last executing test programs: 6m34.435666084s ago: executing program 3 (id=2192): socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 6m32.598201762s ago: executing program 3 (id=2200): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x4040064) close(0x3) (fail_nth: 2) 6m31.822701287s ago: executing program 3 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (fail_nth: 2) umount2(&(0x7f0000000240)='./file0\x00', 0xa) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000008, 0x400000000000, 0x20000000006, 0x0, 0xfffffffd, 0x1, 0xc000, 0x4000000, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m31.506977679s ago: executing program 3 (id=2208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f00003ce000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00006f3000/0x3000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0b03250600000000db0000000000130de33ffafe672759aa1b9a388590adaffbc00ffe7b07573155ca97d250edec5a987e0c3c39e6904c120ada97e68ea5727a5c5680612b1ca60b751441ed9764d502ccc6109f80"], 0x14}}, 0x4840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) dup3(0xffffffffffffffff, r6, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x10d3404, 0x0) dup3(r4, 0xffffffffffffffff, 0x80000) 6m29.999046089s ago: executing program 3 (id=2212): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee800000400", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000010a00000000000000000000000c00090008000080", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffe36, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe8091"], 0x3c}}, 0x0) (fail_nth: 2) 6m29.863285438s ago: executing program 3 (id=2214): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0xc8c, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0x8002, 0x0, 0x8001, 0x9, 0x4, 0x7, 0x5, 0x4, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x0, 0x6, 0x1bfe, 0x2, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0xff, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x7, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x2, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0xa, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0xa, 0x80000000, 0xfdffffff, 0x7ff, 0xfffffffe, 0x4, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x4, 0x8, 0x5, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x5}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x0, 0x110, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6m29.465815812s ago: executing program 32 (id=2214): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0xc8c, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0x8002, 0x0, 0x8001, 0x9, 0x4, 0x7, 0x5, 0x4, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x0, 0x6, 0x1bfe, 0x2, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0xff, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x7, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x2, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0xa, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0xa, 0x80000000, 0xfdffffff, 0x7ff, 0xfffffffe, 0x4, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x4, 0x8, 0x5, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x5}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x0, 0x110, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8.56656478s ago: executing program 2 (id=6329): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0) 8.398242337s ago: executing program 2 (id=6332): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x13, r8, 0x0) 8.162462169s ago: executing program 2 (id=6338): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x1) 7.934545069s ago: executing program 2 (id=6343): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) 7.744485107s ago: executing program 2 (id=6348): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x3c, 0x6}, {0x6}]}) 7.521606627s ago: executing program 2 (id=6352): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x800000e9, 0x4) 1.988724432s ago: executing program 4 (id=6437): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000b80)=[{0x0}], 0x1) 1.924626493s ago: executing program 0 (id=6438): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x9, &(0x7f00000000c0)) 1.877724449s ago: executing program 1 (id=6439): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) write(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) 1.742931346s ago: executing program 4 (id=6440): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) 1.667345514s ago: executing program 1 (id=6441): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) 1.614874706s ago: executing program 0 (id=6442): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, 0x0) 1.54286337s ago: executing program 4 (id=6443): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.491411573s ago: executing program 1 (id=6444): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x24, 0x9, 0x3, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 1.37757643s ago: executing program 4 (id=6445): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) 1.250621966s ago: executing program 1 (id=6446): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) 1.250280723s ago: executing program 0 (id=6447): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = getpid() ptrace(0xe, r4) 1.175009592s ago: executing program 4 (id=6448): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 1.094883008s ago: executing program 1 (id=6449): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="8300d1c4c9036e8866400fe2de0fae4e0afaf2466ff00fc01e63df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc) 954.912584ms ago: executing program 0 (id=6450): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pread64(r0, 0x0, 0xffffffffffffff9f, 0xd36) 947.846418ms ago: executing program 1 (id=6451): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 913.250304ms ago: executing program 4 (id=6452): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000d1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) 734.910967ms ago: executing program 0 (id=6454): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r5, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 575.060621ms ago: executing program 5 (id=6456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 574.598963ms ago: executing program 0 (id=6457): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0) 508.134168ms ago: executing program 5 (id=6458): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x961f, 0x8001) 433.995315ms ago: executing program 5 (id=6459): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) 242.915941ms ago: executing program 5 (id=6460): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r4) 190.264335ms ago: executing program 5 (id=6461): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) keyctl$setperm(0x5, r3, 0x30925) 0s ago: executing program 5 (id=6462): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x1000, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) io_setup(0x8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ip=0xf707d539 code=0x7ffc0000 [ 819.583744][ T13] net_ratelimit: 7 callbacks suppressed [ 819.583759][ T13] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 819.612991][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2948'. [ 819.673165][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.684336][ T30] audit: type=1326 audit(1763262710.167:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 819.859093][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.868708][ T30] audit: type=1326 audit(1763262710.167:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 819.921624][ T30] audit: type=1326 audit(1763262710.167:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 819.921663][ T30] audit: type=1326 audit(1763262710.167:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 819.921685][ T30] audit: type=1326 audit(1763262710.177:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 819.961657][ T154] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 819.962870][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.962947][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.103973][ T12] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 820.122775][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.122875][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.211527][ T154] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 820.381270][ T12] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 820.444904][T16896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.532470][ T12] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 820.604211][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'. [ 820.849484][ T79] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 821.138793][T16896] veth0_vlan: entered promiscuous mode [ 821.178889][T16896] veth1_vlan: entered promiscuous mode [ 821.229353][T16896] veth0_macvtap: entered promiscuous mode [ 821.242727][T16896] veth1_macvtap: entered promiscuous mode [ 821.287620][T16896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.312271][ T154] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 821.336214][T16896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.352935][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.362994][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.392839][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 821.495078][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'. [ 821.511463][ T12] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 821.524581][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.534167][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.691171][ T154] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 821.974985][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.999156][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.034267][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.045091][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.228629][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2955'. [ 823.276899][T17231] program syz.4.2958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.978114][T17238] FAULT_INJECTION: forcing a failure. [ 823.978114][T17238] name failslab, interval 1, probability 0, space 0, times 0 [ 824.005311][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.017871][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.029560][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.042373][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.054039][T17238] CPU: 1 UID: 0 PID: 17238 Comm: syz.5.2961 Not tainted syzkaller #0 PREEMPT(full) [ 824.054063][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 824.054075][T17238] Call Trace: [ 824.054082][T17238] [ 824.054098][T17238] dump_stack_lvl+0x189/0x250 [ 824.054124][T17238] ? __pfx____ratelimit+0x10/0x10 [ 824.054145][T17238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.054165][T17238] ? __pfx__printk+0x10/0x10 [ 824.054187][T17238] ? __pfx___might_resched+0x10/0x10 [ 824.054204][T17238] ? fs_reclaim_acquire+0x7d/0x100 [ 824.054232][T17238] should_fail_ex+0x414/0x560 [ 824.054261][T17238] should_failslab+0xa8/0x100 [ 824.054280][T17238] kmem_cache_alloc_noprof+0x74/0x6e0 [ 824.054303][T17238] ? alloc_empty_file+0x55/0x1d0 [ 824.054327][T17238] alloc_empty_file+0x55/0x1d0 [ 824.054346][T17238] path_openat+0x107/0x3830 [ 824.054380][T17238] ? is_bpf_text_address+0x26/0x2b0 [ 824.054403][T17238] ? is_bpf_text_address+0x292/0x2b0 [ 824.054419][T17238] ? is_bpf_text_address+0x26/0x2b0 [ 824.054439][T17238] ? kernel_text_address+0xa5/0xe0 [ 824.054461][T17238] ? __kernel_text_address+0xd/0x40 [ 824.054482][T17238] ? __pfx_path_openat+0x10/0x10 [ 824.054499][T17238] ? arch_stack_walk+0xfc/0x150 [ 824.054534][T17238] do_filp_open+0x1fa/0x410 [ 824.054556][T17238] ? __pfx_do_filp_open+0x10/0x10 [ 824.054602][T17238] ? __lock_acquire+0xab9/0xd20 [ 824.054618][T17238] ? do_open_execat+0x93/0x560 [ 824.054642][T17238] do_open_execat+0x135/0x560 [ 824.054662][T17238] ? __pfx_do_open_execat+0x10/0x10 [ 824.054700][T17238] alloc_bprm+0x28/0x5c0 [ 824.054725][T17238] do_execveat_common+0x1b3/0x6a0 [ 824.054758][T17238] __ia32_compat_sys_execveat+0xca/0xe0 [ 824.054782][T17238] __do_fast_syscall_32+0xb6/0x2b0 [ 824.054795][T17238] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.054821][T17238] do_fast_syscall_32+0x34/0x80 [ 824.054836][T17238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 824.054854][T17238] RIP: 0023:0xf7f84539 [ 824.054869][T17238] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 824.054881][T17238] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 824.054898][T17238] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 824.054909][T17238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 824.054919][T17238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 824.054928][T17238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 824.054938][T17238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 824.054964][T17238] [ 824.055459][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 824.408455][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 824.408470][ T30] audit: type=1326 audit(1763262715.327:13326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.522990][ T30] audit: type=1326 audit(1763262715.357:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.566704][ T30] audit: type=1326 audit(1763262715.357:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.651736][ T30] audit: type=1326 audit(1763262715.357:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.719115][ T30] audit: type=1326 audit(1763262715.357:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.763778][ T30] audit: type=1326 audit(1763262715.357:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.789394][ T30] audit: type=1326 audit(1763262715.357:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.819382][ T30] audit: type=1326 audit(1763262715.357:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.905329][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'. [ 824.920701][ T30] audit: type=1326 audit(1763262715.367:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 824.930752][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2960'. [ 825.001285][ T30] audit: type=1326 audit(1763262715.367:13335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.2960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 825.147784][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.194334][T17243] chnl_net:caif_netlink_parms(): no params data found [ 825.475052][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.857321][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.110812][ T154] net_ratelimit: 21 callbacks suppressed [ 826.110830][ T154] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 826.165386][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.194900][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.211578][ T5904] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 826.226380][T17243] bridge_slave_0: entered allmulticast mode [ 826.282264][T17243] bridge_slave_0: entered promiscuous mode [ 826.291142][T15858] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 826.361046][ T5904] usb 1-1: device descriptor read/64, error -71 [ 826.371624][ T5833] Bluetooth: hci0: command tx timeout [ 826.552377][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.600947][ T5904] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 826.609043][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.618331][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.648359][T17243] bridge_slave_1: entered allmulticast mode [ 826.680770][T17243] bridge_slave_1: entered promiscuous mode [ 826.740553][ T5904] usb 1-1: device descriptor read/64, error -71 [ 826.834297][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.847609][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.858685][ T5904] usb usb1-port1: attempt power cycle [ 826.973527][T17243] team0: Port device team_slave_0 added [ 827.033238][T17243] team0: Port device team_slave_1 added [ 827.095094][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.105225][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.131944][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.152077][ T12] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 827.193547][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2969'. [ 827.203873][ T5904] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 827.215137][T17285] openvswitch: netlink: Flow key attr not present in new flow. [ 827.283832][ T5904] usb 1-1: device descriptor read/8, error -71 [ 827.365116][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 827.389235][ T12] bond9 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 827.402165][ T12] bond9 (unregistering): (slave ip6gretap2): Releasing backup interface [ 827.412506][ T12] bond9 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - ea:61:18:1a:ec:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 827.530736][ T5904] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 827.561583][ T5904] usb 1-1: device descriptor read/8, error -71 [ 827.674633][ T5904] usb usb1-port1: unable to enumerate USB device [ 827.724154][ T12] bond11 (unregistering): (slave gretap2): Releasing active interface [ 828.174697][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2970'. [ 828.218947][T17293] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2970'. [ 828.451117][ T5833] Bluetooth: hci0: command tx timeout [ 828.542128][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.559331][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.584604][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 828.598783][ T12] bond0 (unregistering): Released all slaves [ 828.926490][ T12] bond1 (unregistering): Released all slaves [ 829.123326][ T12] bond2 (unregistering): Released all slaves [ 829.361337][ T12] bond3 (unregistering): Released all slaves [ 829.485478][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 829.485494][ T30] audit: type=1326 audit(1763262720.407:13394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.517213][ T30] audit: type=1326 audit(1763262720.437:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.549022][ T30] audit: type=1326 audit(1763262720.437:13396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.606741][T11597] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 829.616213][ T12] bond4 (unregistering): Released all slaves [ 829.622433][ T30] audit: type=1326 audit(1763262720.437:13397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.649860][ T30] audit: type=1326 audit(1763262720.437:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.696326][ T30] audit: type=1326 audit(1763262720.437:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.746504][ T30] audit: type=1326 audit(1763262720.437:13400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.770398][ T30] audit: type=1326 audit(1763262720.437:13401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.793920][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2976'. [ 829.817084][T11597] usb 1-1: config 0 has no interfaces? [ 829.823757][T11597] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 829.833390][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2976'. [ 829.842704][T11597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.941035][ T30] audit: type=1326 audit(1763262720.437:13402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 829.965082][T11597] usb 1-1: config 0 descriptor?? [ 829.995744][ T30] audit: type=1326 audit(1763262720.437:13403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17304 comm="syz.5.2976" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 830.076291][ T12] bond5 (unregistering): Released all slaves [ 830.284552][ T12] bond6 (unregistering): Released all slaves [ 830.483128][ T12] bond7 (unregistering): Released all slaves [ 830.538891][ T5833] Bluetooth: hci0: command tx timeout [ 830.687576][ T12] bond8 (unregistering): Released all slaves [ 830.889184][ T12] bond9 (unregistering): (slave veth7): Releasing backup interface [ 830.899443][ T12] bond9 (unregistering): Released all slaves [ 831.063404][ T12] bond10 (unregistering): Released all slaves [ 831.083461][ T12] bond11 (unregistering): Released all slaves [ 831.098138][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.106470][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.133198][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.393874][ T12] tipc: Left network mode [ 831.478896][T17243] hsr_slave_0: entered promiscuous mode [ 831.493130][T17243] hsr_slave_1: entered promiscuous mode [ 831.499975][T17243] debugfs: 'hsr0' already exists in 'hsr' [ 831.506939][T17243] Cannot create hsr debugfs directory [ 831.514929][T17325] tipc: Enabling of bearer rejected, failed to enable media [ 831.811608][T11597] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 831.930324][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2982'. [ 832.143236][T17340] tipc: Started in network mode [ 832.153950][T17340] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 832.177945][T17340] tipc: Enabled bearer , priority 10 [ 832.427154][ T12] hsr_slave_0: left promiscuous mode [ 832.437833][ T12] hsr_slave_1: left promiscuous mode [ 832.445297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.453430][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.467781][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.475989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.495350][ T12] veth0_macvtap: left promiscuous mode [ 832.501307][ T12] veth1_vlan: left promiscuous mode [ 832.506779][ T12] veth0_vlan: left promiscuous mode [ 832.611045][ T5833] Bluetooth: hci0: command tx timeout [ 832.846815][T17350] program syz.5.2983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.397388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 833.462816][ T12] team0 (unregistering): Port device team_slave_0 removed [ 834.063111][ T856] tipc: Node number set to 4269801494 [ 834.111850][T17354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.460103][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 834.569354][ T5904] usb 1-1: USB disconnect, device number 69 [ 834.665559][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 834.676516][T11597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 834.710556][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.720064][T11597] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 834.727663][T11597] usb 3-1: can't read configurations, error -71 [ 834.762457][ T10] usb 5-1: config 0 descriptor?? [ 834.765885][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 834.877696][T17375] hsr0: entered promiscuous mode [ 834.878691][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2986'. [ 834.885129][T17375] hsr_slave_0: left promiscuous mode [ 834.892707][T17375] hsr_slave_1: left promiscuous mode [ 834.929218][T17375] hsr0 (unregistering): left promiscuous mode [ 835.061192][ T5904] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 835.226498][ T5904] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 835.241162][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.253960][ T5904] usb 1-1: Product: syz [ 835.258267][ T5904] usb 1-1: Manufacturer: syz [ 835.267918][ T5904] usb 1-1: SerialNumber: syz [ 835.276455][ T5904] usb 1-1: config 0 descriptor?? [ 835.298120][ T5904] hub 1-1:0.0: bad descriptor, ignoring hub [ 835.313208][ T5904] hub 1-1:0.0: probe with driver hub failed with error -5 [ 835.401212][ T10] gspca_stv06xx: vv6410 sensor detected [ 835.603575][ T5904] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 835.632576][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.661656][ T5904] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 835.677004][ T5904] usb 1-1: media controller created [ 835.764790][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.892250][T17243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 835.922493][ T5904] DVB: Unable to find symbol dib7000p_attach() [ 835.937850][ T5904] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 835.972740][T17243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 836.013431][T17243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 836.042801][T17243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 836.068197][ T5904] rc_core: IR keymap rc-dib0700-rc5 not found [ 836.093386][ T5904] Registered IR keymap rc-empty [ 836.106485][ T5904] dvb-usb: could not initialize remote control. [ 836.121293][ T5904] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 836.436839][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2989'. [ 836.448032][T17412] openvswitch: netlink: Flow key attr not present in new flow. [ 836.541159][T17373] i2c i2c-1: Invalid block size returned: 167 [ 836.658870][T17243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.756693][T17243] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.815849][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.822993][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.860328][ T10] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 836.890090][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.897271][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.969036][ T10] usb 5-1: USB disconnect, device number 61 [ 837.104761][T17243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 837.153816][T17243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.412118][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.494373][T17243] veth0_vlan: entered promiscuous mode [ 837.525261][T17243] veth1_vlan: entered promiscuous mode [ 837.596436][T17243] veth0_macvtap: entered promiscuous mode [ 837.615505][T17243] veth1_macvtap: entered promiscuous mode [ 837.634887][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.648792][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.668818][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.681385][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.705302][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.732346][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.805034][T12656] usb 1-1: USB disconnect, device number 70 [ 837.878987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.888077][T12656] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 837.906622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.948650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.962214][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.439338][T17442] openvswitch: netlink: Flow key attr not present in new flow. [ 838.515726][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.690724][ T5905] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 838.751372][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.851358][ T5905] usb 2-1: device descriptor read/64, error -71 [ 839.111015][ T5905] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 839.260955][ T5905] usb 2-1: device descriptor read/64, error -71 [ 839.394449][ T5905] usb usb2-port1: attempt power cycle [ 839.751171][ T5905] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 839.796023][ T5905] usb 2-1: device descriptor read/8, error -71 [ 840.015170][T17437] kernel read not supported for file /eth0 (pid: 17437 comm: syz.0.2992) [ 840.028984][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 840.028998][ T30] audit: type=1800 audit(1763262730.947:13423): pid=17437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2992" name="eth0" dev="mqueue" ino=52255 res=0 errno=0 [ 840.059317][ T5905] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 840.083200][ T5905] usb 2-1: device descriptor read/8, error -71 [ 840.200819][ T5905] usb usb2-port1: unable to enumerate USB device [ 841.177569][T17530] capability: warning: `syz.4.3024' uses 32-bit capabilities (legacy support in use) [ 841.622245][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 841.636058][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 841.654705][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 841.664903][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 841.675314][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 842.045587][T17566] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3041'. [ 842.071032][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 842.082211][T17566] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3041'. [ 842.087314][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'. [ 842.312380][ T856] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 842.421317][ T13] bond0: (slave ): Releasing backup interface [ 842.515197][ T856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 842.552617][ T856] usb 5-1: config 7 has an invalid interface number: 205 but max is 0 [ 842.576711][ T856] usb 5-1: config 7 has no interface number 0 [ 842.592776][ T856] usb 5-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=29.5d [ 842.608690][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.624448][ T856] usb 5-1: Product: syz [ 842.635954][ T856] usb 5-1: Manufacturer: syz [ 842.646574][ T856] usb 5-1: SerialNumber: syz [ 842.904218][ T856] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.996388][ T856] snd-usb-audio 5-1:7.205: probe with driver snd-usb-audio failed with error -2 [ 843.028638][ T856] usb 5-1: USB disconnect, device number 62 [ 843.108517][ T9275] udevd[9275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.205/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.732562][ T5830] Bluetooth: hci2: command tx timeout [ 844.188885][ T13] bond0 (unregistering): Released all slaves [ 844.213289][ T13] bond1 (unregistering): Released all slaves [ 844.425889][ T13] bond2 (unregistering): Released all slaves [ 844.597047][ T13] bond3 (unregistering): Released all slaves [ 844.741694][ T13] bond4 (unregistering): Released all slaves [ 844.909610][ T13] bond5 (unregistering): Released all slaves [ 845.075633][ T13] bond6 (unregistering): (slave veth3): Releasing active interface [ 845.091163][ T13] bond6 (unregistering): (slave vlan2): Releasing active interface [ 845.102225][ T13] bond6 (unregistering): Released all slaves [ 845.284019][ T13] bond7 (unregistering): (slave batadv1): Releasing active interface [ 845.294789][ T13] bond7 (unregistering): Released all slaves [ 845.467968][ T13] bond8 (unregistering): Released all slaves [ 845.639522][ T13] bond9 (unregistering): Released all slaves [ 845.657363][T17548] chnl_net:caif_netlink_parms(): no params data found [ 845.812385][ T5830] Bluetooth: hci2: command tx timeout [ 845.882097][ T13] : left promiscuous mode [ 846.106685][ T13] tipc: Left network mode [ 846.340857][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.350247][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.375066][T17548] bridge_slave_0: entered allmulticast mode [ 846.392290][T17548] bridge_slave_0: entered promiscuous mode [ 846.411722][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.429284][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.451437][T17548] bridge_slave_1: entered allmulticast mode [ 846.468405][T17548] bridge_slave_1: entered promiscuous mode [ 846.729642][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.853478][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.031490][T17548] team0: Port device team_slave_0 added [ 847.050786][T17548] team0: Port device team_slave_1 added [ 847.203861][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.222521][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.291944][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.347281][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.361950][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.388700][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.891469][ T5830] Bluetooth: hci2: command tx timeout [ 849.446314][T17548] hsr_slave_0: entered promiscuous mode [ 849.456026][T17548] hsr_slave_1: entered promiscuous mode [ 849.463908][T17548] debugfs: 'hsr0' already exists in 'hsr' [ 849.469730][T17548] Cannot create hsr debugfs directory [ 849.972461][ T5830] Bluetooth: hci2: command tx timeout [ 850.700576][T17813] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3138'. [ 850.936825][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3142'. [ 851.224575][T17548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 851.252879][T17548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 851.304726][T17548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 851.384458][T17548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 851.414571][T17846] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3154'. [ 851.432638][T17846] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3154'. [ 851.443963][T17845] @0Ù: renamed from bond_slave_1 (while UP) [ 851.915877][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.943184][T17873] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3160'. [ 851.978617][T17873] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3160'. [ 852.120824][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.173953][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.181216][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.283895][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.291128][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.743054][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.966547][T17548] veth0_vlan: entered promiscuous mode [ 853.008435][T17548] veth1_vlan: entered promiscuous mode [ 853.137155][T17548] veth0_macvtap: entered promiscuous mode [ 853.192029][T17548] veth1_macvtap: entered promiscuous mode [ 853.276361][T17548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.293343][T17930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3180'. [ 853.306808][T17548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.376846][ T1093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.404735][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.469073][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.520268][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.829981][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.871539][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.977468][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.006311][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.074993][T17954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3189'. [ 855.455260][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 855.478200][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 855.487165][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 855.504243][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 855.517943][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 856.684079][T18022] chnl_net:caif_netlink_parms(): no params data found [ 857.100958][T11596] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 857.109725][T18022] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.119774][T18022] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.134108][T18022] bridge_slave_0: entered allmulticast mode [ 857.153330][T18022] bridge_slave_0: entered promiscuous mode [ 857.169598][T18022] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.179279][T18022] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.193395][T18022] bridge_slave_1: entered allmulticast mode [ 857.203005][T18022] bridge_slave_1: entered promiscuous mode [ 857.280123][T11596] usb 2-1: Using ep0 maxpacket: 16 [ 857.291165][T11596] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 857.302084][T11596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.307665][T18022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.314681][T11596] usb 2-1: Product: syz [ 857.329248][T18022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.334151][T11596] usb 2-1: Manufacturer: syz [ 857.347301][T11596] usb 2-1: SerialNumber: syz [ 857.408230][T18022] team0: Port device team_slave_0 added [ 857.421549][T18022] team0: Port device team_slave_1 added [ 857.483594][T18022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.494402][T18022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.522349][T18022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.541117][T18022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.548210][T18022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.575780][ T5830] Bluetooth: hci1: command tx timeout [ 857.591511][T18022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.591612][T11596] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.712383][T11596] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 857.719848][T18022] hsr_slave_0: entered promiscuous mode [ 857.729660][T18022] hsr_slave_1: entered promiscuous mode [ 857.739006][T18022] debugfs: 'hsr0' already exists in 'hsr' [ 857.759610][T11596] usb 2-1: USB disconnect, device number 78 [ 857.775745][T18022] Cannot create hsr debugfs directory [ 857.808491][ T9275] udevd[9275]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.334541][T18022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.687904][T18022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.714873][T18148] netlink: 536 bytes leftover after parsing attributes in process `syz.5.3264'. [ 858.734701][T18148] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3264'. [ 858.913829][T18022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.179755][T18022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.245753][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'. [ 859.405116][ T1093] bridge_slave_1: left allmulticast mode [ 859.439540][ T1093] bridge_slave_1: left promiscuous mode [ 859.447564][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.514926][ T1093] bridge_slave_0: left allmulticast mode [ 859.544398][ T1093] bridge_slave_0: left promiscuous mode [ 859.560296][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.651590][ T5830] Bluetooth: hci1: command tx timeout [ 861.000750][ T1093] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 861.017992][ T1093] bridge5 (unregistering): left promiscuous mode [ 861.455674][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.466394][ T1093] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 861.478065][ T1093] bond0 (unregistering): Released all slaves [ 861.649004][ T1093] bond1 (unregistering): Released all slaves [ 861.730374][ T5830] Bluetooth: hci1: command tx timeout [ 861.825024][ T1093] bond2 (unregistering): Released all slaves [ 862.017502][ T1093] bond3 (unregistering): Released all slaves [ 862.168666][ T1093] bond4 (unregistering): Released all slaves [ 862.184009][ T1093] bond5 (unregistering): Released all slaves [ 862.323957][ T1093] bond6 (unregistering): Released all slaves [ 862.462102][ T1093] bond7 (unregistering): Released all slaves [ 862.596840][ T1093] bond8 (unregistering): Released all slaves [ 862.612793][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3284'. [ 862.631062][T18241] : renamed from bond_slave_0 (while UP) [ 862.821813][ T1093] tipc: Disabling bearer [ 862.838822][ T1093] tipc: Left network mode [ 863.118248][T18022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 863.174756][T18022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 863.212939][T18022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 863.287665][T18022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 863.376534][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.384042][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.395375][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.404271][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.433669][ T1093] veth1_macvtap: left promiscuous mode [ 863.439539][ T1093] veth0_macvtap: left promiscuous mode [ 863.446754][ T1093] veth1_vlan: left promiscuous mode [ 863.454052][ T1093] veth0_vlan: left promiscuous mode [ 863.818692][ T5830] Bluetooth: hci1: command tx timeout [ 864.246078][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 864.315346][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 865.072747][T18022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.132475][T18022] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.151915][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.159066][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.197521][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.204782][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.473337][T18022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.658975][T18306] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3337'. [ 865.724133][T18022] veth0_vlan: entered promiscuous mode [ 865.828660][T18022] veth1_vlan: entered promiscuous mode [ 865.903186][T18022] veth0_macvtap: entered promiscuous mode [ 865.958883][T18022] veth1_macvtap: entered promiscuous mode [ 866.023673][T18318] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3343'. [ 866.045056][T18022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.099611][T18022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.145087][ T1093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.167265][ T1093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.194339][ T30] audit: type=1326 audit(1763262757.117:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.1.3346" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x0 [ 866.208080][ T1093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.228934][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.580610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.603941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.861927][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.897819][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.820860][ T5905] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 868.991093][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 869.005165][ T5905] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 869.027433][ T5905] usb 3-1: config 179 has no interface number 0 [ 869.051240][ T5905] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 869.085732][ T5905] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 869.122526][ T5905] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 869.190287][ T5905] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 869.232837][ T5905] usb 3-1: config 179 interface 65 has no altsetting 0 [ 869.239791][ T5905] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 869.252885][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.317234][ T5905] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input128 [ 869.440597][ T5184] input input128: unable to receive magic message: -110 [ 869.498220][ T5184] input input128: unable to receive magic message: -32 [ 869.512854][ T5905] usb 3-1: USB disconnect, device number 88 [ 869.512927][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 869.513300][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 870.215421][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.223178][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.447123][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3499'. [ 873.974254][T18631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.993594][T18631] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 874.017277][T18631] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.027998][T18631] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 874.067343][T18685] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3515'. [ 874.071289][T18631] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 874.106607][T18631] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.114965][T18631] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.128439][T18631] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.152277][T18631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.159135][T18631] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 874.187338][T18631] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 874.198338][T18631] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.215834][T18631] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 874.246464][T18631] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 874.512238][ T5904] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 874.677640][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.700841][ T5904] usb 5-1: not running at top speed; connect to a high speed hub [ 874.732953][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 874.768109][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 874.788944][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 874.800689][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.827951][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 874.871985][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 874.899353][ T5904] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 874.916165][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.930853][ T5904] usb 5-1: Product: syz [ 874.935205][ T5904] usb 5-1: Manufacturer: syz [ 874.942849][ T5904] usb 5-1: SerialNumber: syz [ 874.962518][ T5904] usb 5-1: config 0 descriptor?? [ 874.972173][T18662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 874.990564][T18662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 875.013905][ T5904] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.164332][ T5904] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 875.249311][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.266272][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 875.291555][ T5904] usb 5-1: USB disconnect, device number 63 [ 875.639418][T18758] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3550'. [ 876.048845][T18772] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3557'. [ 876.058103][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 876.130648][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.212696][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 876.218797][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 876.685524][T18806] netlink: 'syz.1.3572': attribute type 16 has an invalid length. [ 876.704169][T18806] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.3572'. [ 876.934867][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3581'. [ 877.015901][T18827] input input129: cannot allocate more than FF_MAX_EFFECTS effects [ 877.127600][T18832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3585'. [ 877.172875][T18832] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3585'. [ 877.210661][T18832] netlink: 'syz.1.3585': attribute type 4 has an invalid length. [ 877.334983][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 877.454737][T18849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3592'. [ 877.491181][T18849] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3592'. [ 878.132060][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 878.210929][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 878.290277][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 878.290621][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 878.856517][T18912] __nla_validate_parse: 2 callbacks suppressed [ 878.856536][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3623'. [ 878.859021][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 879.280597][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 879.454390][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 879.472840][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 879.487620][ T43] usb 3-1: config 0 has no interface number 0 [ 879.515106][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 879.541290][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 879.575077][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.621244][ T43] usb 3-1: Product: syz [ 879.626675][ T43] usb 3-1: Manufacturer: syz [ 879.641666][ T43] usb 3-1: SerialNumber: syz [ 879.665933][ T43] usb 3-1: config 0 descriptor?? [ 879.677037][ T43] smsc75xx v1.0.0 [ 880.210427][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 880.283376][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 880.300453][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 880.342733][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 880.370110][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 880.385167][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 880.685425][T18989] binder: 18988:18989 ioctl c00c620f 80000000 returned -22 [ 880.815031][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'. [ 881.105901][T19004] netlink: 'syz.4.3664': attribute type 16 has an invalid length. [ 881.140966][T19004] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3664'. [ 881.322974][ T5905] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 881.511575][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 881.522737][ T5905] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.540728][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 881.558037][ T5905] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 881.582240][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.599506][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 881.631856][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 881.644103][ T5905] usb 6-1: config 0 descriptor?? [ 881.662178][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 881.673703][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 881.723431][ T43] usb 3-1: USB disconnect, device number 89 [ 881.856330][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 881.880691][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 881.931473][ T5905] usb 6-1: USB disconnect, device number 23 [ 882.001999][T19039] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3680'. [ 882.129241][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 882.157886][T19047] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3685'. [ 882.460612][ T10] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 882.470597][ T43] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 882.630576][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 882.642699][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 882.647711][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.660704][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 882.681998][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 882.688360][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.705056][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 882.719130][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 882.733697][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.742207][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.742234][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.742263][ T10] usb 1-1: Product: syz [ 882.742277][ T10] usb 1-1: Manufacturer: syz [ 882.742291][ T10] usb 1-1: SerialNumber: syz [ 882.782470][ T43] usb 2-1: config 0 descriptor?? [ 882.984982][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 882.992720][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.004746][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.013122][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.021226][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.034458][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.042991][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 883.050394][ T10] cdc_ncm 1-1:1.0: bind() failure [ 883.064167][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 883.072029][ T10] cdc_ncm 1-1:1.1: bind() failure [ 883.084059][ T10] usb 1-1: USB disconnect, device number 71 [ 883.210685][ T43] hid_parser_main: 104 callbacks suppressed [ 883.210707][ T43] microsoft 0003:045E:07DA.0021: unknown main item tag 0x4 [ 883.274425][ T43] microsoft 0003:045E:07DA.0021: unexpected long global item [ 883.297200][ T43] microsoft 0003:045E:07DA.0021: parse failed [ 883.306518][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3707'. [ 883.314638][ T43] microsoft 0003:045E:07DA.0021: probe with driver microsoft failed with error -22 [ 883.425248][ T43] usb 2-1: USB disconnect, device number 79 [ 883.578155][T19108] netlink: 'syz.4.3715': attribute type 4 has an invalid length. [ 883.586954][T19108] netlink: 'syz.4.3715': attribute type 5 has an invalid length. [ 883.596402][T19108] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3715'. [ 883.740171][T19114] binder: 19112:19114 ioctl c0306201 0 returned -14 [ 885.132519][T19189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3750'. [ 885.372554][T19202] netlink: 'syz.5.3758': attribute type 4 has an invalid length. [ 885.647478][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 885.911877][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3773'. [ 886.182311][T19248] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 886.437469][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3787'. [ 887.402749][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3813'. [ 887.748569][T19332] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3821'. [ 888.884228][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3848'. [ 890.490544][ T43] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 890.654120][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 890.667921][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 890.700524][ T43] usb 2-1: config 0 has no interface number 0 [ 890.710777][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 890.746349][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 890.768037][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.788616][ T43] usb 2-1: Product: syz [ 890.800793][ T43] usb 2-1: Manufacturer: syz [ 890.805437][ T43] usb 2-1: SerialNumber: syz [ 890.825654][ T43] usb 2-1: config 0 descriptor?? [ 890.835359][ T43] smsc75xx v1.0.0 [ 890.920942][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 891.082764][ T10] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 891.101936][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.131556][ T10] usb 3-1: config 0 descriptor?? [ 891.567150][ T10] ortek 0003:05A4:2000.0022: unknown main item tag 0x0 [ 891.578367][ T10] ortek 0003:05A4:2000.0022: unknown main item tag 0x0 [ 891.586101][ T10] ortek 0003:05A4:2000.0022: unknown main item tag 0x0 [ 891.593471][ T10] ortek 0003:05A4:2000.0022: unknown main item tag 0x0 [ 891.603897][ T10] ortek 0003:05A4:2000.0022: hidraw0: USB HID vff.fb Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0 [ 891.651239][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 891.701572][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 891.758023][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 891.765358][ T10] usb 3-1: USB disconnect, device number 90 [ 891.786239][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 891.806379][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 891.817993][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 891.839367][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 891.891257][ T43] usb 2-1: USB disconnect, device number 80 [ 893.117445][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 894.652534][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 894.669237][T19696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3989'. [ 894.837587][T19705] futex_wake_op: syz.0.3992 tries to shift op by 32; fix this program [ 895.883393][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 896.261805][ T5905] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 896.422673][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 896.438272][ T5905] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 896.465388][ T5905] usb 2-1: config 0 has no interface number 0 [ 896.504845][ T5905] usb 2-1: config 0 interface 184 has no altsetting 0 [ 896.554864][ T5905] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 896.591530][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.667600][ T5905] usb 2-1: Product: syz [ 896.708415][ T5905] usb 2-1: Manufacturer: syz [ 896.740972][ T5905] usb 2-1: SerialNumber: syz [ 896.772200][ T5905] usb 2-1: config 0 descriptor?? [ 896.796033][ T5905] smsc75xx v1.0.0 [ 897.200689][ T5905] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 897.259682][ T5905] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 897.277027][ T5905] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 897.288573][ T5905] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 897.363818][ T5905] usb 2-1: USB disconnect, device number 81 [ 899.218346][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4089'. [ 899.706512][T19945] netlink: 'syz.2.4101': attribute type 4 has an invalid length. [ 899.727390][T19945] netlink: 'syz.2.4101': attribute type 21 has an invalid length. [ 899.749249][T19945] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4101'. [ 899.946916][T19956] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4107'. [ 900.335928][T19976] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4115'. [ 900.357344][T19976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4115'. [ 900.472711][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'. [ 900.674355][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4126'. [ 900.738569][T19996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.780718][T19996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.824017][T19996] bond0 (unregistering): Released all slaves [ 901.136594][T20019] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4135'. [ 901.570791][ T856] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 901.740409][ T856] usb 1-1: Using ep0 maxpacket: 16 [ 901.752708][ T856] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.799776][ T856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 901.829722][ T856] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 901.852907][ T856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.893492][ T856] usb 1-1: config 0 descriptor?? [ 902.113147][ T856] usbhid 1-1:0.0: can't add hid device: -71 [ 902.141587][ T856] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 902.181506][ T856] usb 1-1: USB disconnect, device number 72 [ 904.681586][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'. [ 905.460761][ T5905] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 905.621654][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 905.638020][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 905.672913][ T5905] usb 2-1: config 0 has an invalid interface number: 125 but max is 2 [ 905.697950][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 905.717928][ T5905] usb 2-1: config 0 has no interface number 0 [ 905.735888][ T5905] usb 2-1: config 0 interface 125 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.745185][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4258'. [ 905.779546][ T5905] usb 2-1: config 0 interface 125 has no altsetting 0 [ 905.802175][ T5905] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 905.812065][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.831910][ T5905] usb 2-1: Product: syz [ 905.836136][ T5905] usb 2-1: Manufacturer: syz [ 905.852141][ T5905] usb 2-1: SerialNumber: syz [ 905.867917][ T5905] usb 2-1: config 0 descriptor?? [ 906.099064][ T5905] hub 2-1:0.125: bad descriptor, ignoring hub [ 906.122817][ T5905] hub 2-1:0.125: probe with driver hub failed with error -5 [ 906.172350][ T5905] uvcvideo 2-1:0.125: Found UVC 15.ff device syz (17dc:0202) [ 906.200583][ T5905] uvcvideo 2-1:0.125: No valid video chain found. [ 906.241436][ T5905] usb 2-1: USB disconnect, device number 82 [ 906.817659][ T10] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 906.855725][ T10] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.673602][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 911.245869][T20536] netlink: 'syz.1.4383': attribute type 4 has an invalid length. [ 911.299564][T20536] netlink: 'syz.1.4383': attribute type 4 has an invalid length. [ 912.701692][T20613] netlink: 'syz.1.4420': attribute type 4 has an invalid length. [ 913.110482][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 913.129137][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4431'. [ 913.823828][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 913.861504][T20672] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4447'. [ 913.890707][T20672] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4447'. [ 914.886744][T20727] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4471'. [ 914.896900][T20727] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4471'. [ 915.015627][T20729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4472'. [ 917.100252][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4519'. [ 917.926242][T20880] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4542'. [ 918.302653][T20902] __nla_validate_parse: 1 callbacks suppressed [ 918.302672][T20902] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4554'. [ 918.490522][ T5905] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 918.509644][T20916] netlink: 'syz.0.4560': attribute type 4 has an invalid length. [ 918.532201][T20916] netlink: 'syz.0.4560': attribute type 4 has an invalid length. [ 918.671621][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 918.692390][ T5905] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 918.707462][ T5905] usb 6-1: config 0 has no interface number 0 [ 918.722947][ T5905] usb 6-1: config 0 interface 184 has no altsetting 0 [ 918.744712][ T5905] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 918.775194][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.806348][ T5905] usb 6-1: Product: syz [ 918.825384][ T5905] usb 6-1: Manufacturer: syz [ 918.835497][ T5905] usb 6-1: SerialNumber: syz [ 918.884167][ T5905] usb 6-1: config 0 descriptor?? [ 918.895110][ T5905] smsc75xx v1.0.0 [ 919.191485][ T43] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 919.370716][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 919.378624][ T43] usb 5-1: config 1 has an invalid interface number: 64 but max is 0 [ 919.418408][ T43] usb 5-1: config 1 has no interface number 0 [ 919.448226][ T43] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 919.466987][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.486419][ T43] usb 5-1: Product: syz [ 919.500532][ T43] usb 5-1: Manufacturer: syz [ 919.505195][ T43] usb 5-1: SerialNumber: syz [ 919.521569][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 919.560722][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 919.760816][ T43] option 5-1:1.64: GSM modem (1-port) converter detected [ 919.777320][ T43] usb 5-1: USB disconnect, device number 64 [ 919.788645][ T43] option 5-1:1.64: device disconnected [ 919.950526][ T10] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 920.065738][T20989] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4596'. [ 920.075308][T20989] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4596'. [ 920.114692][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 920.126337][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 920.144713][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.156424][ T10] usb 2-1: Product: syz [ 920.161731][ T10] usb 2-1: Manufacturer: syz [ 920.167134][ T10] usb 2-1: SerialNumber: syz [ 920.188666][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 920.213671][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 920.229798][ T5905] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 920.253622][ T5905] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 920.282452][ T5905] usb 6-1: USB disconnect, device number 24 [ 920.426997][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 920.457034][ T10] usb 2-1: USB disconnect, device number 83 [ 920.483877][ T10] usblp0: removed [ 920.646695][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 920.661432][T21012] netlink: 'syz.2.4606': attribute type 17 has an invalid length. [ 924.050638][T21181] netlink: 'syz.2.4681': attribute type 4 has an invalid length. [ 928.210832][ T5913] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 928.382366][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 928.416220][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 928.418480][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4773'. [ 928.438230][ T5913] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 928.449656][ T5913] usb 6-1: can't read configurations, error -71 [ 928.630296][ T856] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 928.810662][ T856] usb 3-1: Using ep0 maxpacket: 32 [ 928.823741][ T856] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 928.840447][ T856] usb 3-1: config 0 has no interface number 0 [ 928.854032][ T856] usb 3-1: config 0 interface 184 has no altsetting 0 [ 928.864973][ T856] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 928.881165][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.899636][ T856] usb 3-1: Product: syz [ 928.904077][ T856] usb 3-1: Manufacturer: syz [ 928.908687][ T856] usb 3-1: SerialNumber: syz [ 928.946008][ T856] usb 3-1: config 0 descriptor?? [ 928.978391][ T856] smsc75xx v1.0.0 [ 929.604385][ T856] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 929.644235][ T856] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 929.727930][T21444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4806'. [ 929.822397][T21444] team0: Port device team_slave_0 removed [ 930.296265][ T856] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 930.317754][ T856] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 930.338832][ T856] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 930.351088][ T856] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 930.374714][ T856] usb 3-1: USB disconnect, device number 91 [ 931.153489][T21518] binder: 21517:21518 ioctl 4018620d 0 returned -22 [ 931.656712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.663587][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.630817][T21592] binder: 21589:21592 ioctl c0306201 0 returned -14 [ 934.636610][T21703] netlink: 'syz.1.4930': attribute type 4 has an invalid length. [ 934.720758][T21707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4931'. [ 936.722071][T21826] netlink: 'syz.2.4986': attribute type 11 has an invalid length. [ 936.741963][T21826] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4986'. [ 937.310987][ T5905] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 937.492734][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 937.530515][ T30] audit: type=1326 audit(1763262828.437:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21872 comm="syz.2.5010" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x0 [ 937.561548][ T5905] usb 6-1: not running at top speed; connect to a high speed hub [ 937.581641][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 937.595667][T21875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5011'. [ 937.599860][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 937.637651][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 937.669489][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 937.701601][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 937.718651][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 937.742296][ T5905] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 937.770975][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.798285][ T5905] usb 6-1: Product: syz [ 937.830652][ T5905] usb 6-1: Manufacturer: syz [ 937.835288][ T5905] usb 6-1: SerialNumber: syz [ 937.872188][ T5905] usb 6-1: config 0 descriptor?? [ 937.878595][T21849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 937.901610][T21849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 937.929109][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.949634][ T30] audit: type=1326 audit(1763262828.867:13426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 937.992240][ T30] audit: type=1326 audit(1763262828.867:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.060464][ T30] audit: type=1326 audit(1763262828.867:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.143861][ T30] audit: type=1326 audit(1763262828.867:13429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.236561][ T30] audit: type=1326 audit(1763262828.867:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.265122][ T5905] usb 6-1: USB disconnect, device number 27 [ 938.275357][ T30] audit: type=1326 audit(1763262828.867:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.329876][T21904] udevd[21904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.359809][ T30] audit: type=1326 audit(1763262828.867:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.383786][ T30] audit: type=1326 audit(1763262828.867:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.441354][ T30] audit: type=1326 audit(1763262828.867:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ff00000 [ 938.870179][ T856] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 939.031505][ T856] usb 5-1: device descriptor read/64, error -71 [ 939.310408][ T856] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 939.450126][ T856] usb 5-1: device descriptor read/64, error -71 [ 939.571368][ T856] usb usb5-port1: attempt power cycle [ 939.930619][ T856] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 939.974559][ T856] usb 5-1: device descriptor read/8, error -71 [ 939.990920][T21991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5062'. [ 940.221353][ T856] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 940.265520][ T856] usb 5-1: device descriptor read/8, error -71 [ 940.382192][ T856] usb usb5-port1: unable to enumerate USB device [ 941.286342][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.296986][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.313935][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.338136][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.371139][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 941.663113][T12303] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.862414][T12303] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.116938][T12303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.356794][T12303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.840214][T22051] chnl_net:caif_netlink_parms(): no params data found [ 943.157259][T12303] bridge_slave_1: left allmulticast mode [ 943.200844][T12303] bridge_slave_1: left promiscuous mode [ 943.206667][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.291804][T12303] bridge_slave_0: left allmulticast mode [ 943.311052][T12303] bridge_slave_0: left promiscuous mode [ 943.316872][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.410933][ T5833] Bluetooth: hci4: command tx timeout [ 943.999087][T22162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5138'. [ 944.009358][T22162] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5138'. [ 944.508541][T12303] tipc: Disabling bearer [ 944.516670][T22051] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.526964][T12303] tipc: Left network mode [ 944.561428][T22051] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.568710][T22051] bridge_slave_0: entered allmulticast mode [ 944.611496][T22051] bridge_slave_0: entered promiscuous mode [ 944.685934][T22051] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.710174][T22051] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.729016][T22051] bridge_slave_1: entered allmulticast mode [ 944.745542][T22051] bridge_slave_1: entered promiscuous mode [ 945.136756][T22051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.179427][T22051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.327199][T22051] team0: Port device team_slave_0 added [ 945.358153][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 945.374138][T22051] team0: Port device team_slave_1 added [ 945.442644][T22228] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5164'. [ 945.494433][ T5833] Bluetooth: hci4: command tx timeout [ 945.553642][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 945.578460][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 945.609355][ T10] usb 2-1: config 220 has no interface number 2 [ 945.620708][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 945.670081][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 945.698078][T22051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.708814][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 945.737363][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 945.745367][T22051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.772470][T22051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.784807][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 945.794818][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.805231][T22051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.820071][ T10] usb 2-1: Product: syz [ 945.824280][ T10] usb 2-1: Manufacturer: syz [ 945.833576][T22051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.869896][ T10] usb 2-1: SerialNumber: syz [ 945.879852][T22051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.934715][T22247] netlink: 'syz.0.5171': attribute type 1 has an invalid length. [ 945.934767][T12303] veth1_macvtap: left promiscuous mode [ 945.950570][T12303] veth0_macvtap: left promiscuous mode [ 945.956906][T12303] veth1_vlan: left promiscuous mode [ 945.963352][T12303] veth0_vlan: left promiscuous mode [ 946.133266][ T10] usb 2-1: selecting invalid altsetting 0 [ 946.147491][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 946.158668][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 946.183264][ T10] usb 2-1: selecting invalid altsetting 0 [ 946.189234][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 946.231190][ T10] usb 2-1: USB disconnect, device number 84 [ 946.767783][T12303] team0 (unregistering): Port device team_slave_1 removed [ 946.799205][T22267] netlink: 'syz.1.5181': attribute type 4 has an invalid length. [ 946.807913][T22267] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5181'. [ 946.827442][T12303] team0 (unregistering): Port device team_slave_0 removed [ 946.860799][T22268] netlink: 'syz.1.5181': attribute type 1 has an invalid length. [ 946.870623][T22268] netlink: 'syz.1.5181': attribute type 2 has an invalid length. [ 947.321521][T22246] tipc: Started in network mode [ 947.326487][T22246] tipc: Node identity 4, cluster identity 4711 [ 947.333356][T22246] tipc: Node number set to 4 [ 947.555712][T22051] hsr_slave_0: entered promiscuous mode [ 947.562904][T22051] hsr_slave_1: entered promiscuous mode [ 947.569632][T22051] debugfs: 'hsr0' already exists in 'hsr' [ 947.576679][T22051] Cannot create hsr debugfs directory [ 947.583590][ T5833] Bluetooth: hci4: command tx timeout [ 948.746906][T22311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5194'. [ 948.945764][T22051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 948.988352][T22051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 949.031908][T22051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 949.081631][T22051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 949.507130][T22349] input: syz1 as /devices/virtual/input/input132 [ 949.650228][ T5833] Bluetooth: hci4: command tx timeout [ 949.847770][T22051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.956074][T22051] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.016944][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.024142][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.108892][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.116108][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.311484][T22051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.482133][T22051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.617561][T22051] veth0_vlan: entered promiscuous mode [ 950.685439][T22051] veth1_vlan: entered promiscuous mode [ 950.779683][T22051] veth0_macvtap: entered promiscuous mode [ 950.823622][T22051] veth1_macvtap: entered promiscuous mode [ 950.896599][T22051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.936738][T22051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.980361][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.989469][ T1093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.020992][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.062805][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.361960][T12303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.369899][T12303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.441411][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.449272][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.621083][T22438] tipc: Started in network mode [ 951.636224][T22438] tipc: Node identity 4, cluster identity 4711 [ 951.660619][T22438] tipc: Node number set to 4 [ 953.480184][T22524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5272'. [ 953.580499][T22524] hsr_slave_0: left promiscuous mode [ 953.615628][T22524] hsr_slave_1: left promiscuous mode [ 954.560928][T22561] futex_wake_op: syz.1.5287 tries to shift op by 32; fix this program [ 954.916893][T22577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'. [ 954.942666][T22577] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5295'. [ 956.282912][T22634] binder: 22632:22634 ioctl c0306201 0 returned -14 [ 956.640245][T11596] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 956.848419][T11596] usb 5-1: Using ep0 maxpacket: 8 [ 956.875280][T11596] usb 5-1: unable to get BOS descriptor or descriptor too short [ 956.913020][T11596] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 956.940130][T11596] usb 5-1: can't read configurations, error -71 [ 957.484637][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5338'. [ 958.400134][ T5913] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 958.562086][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 958.584176][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 958.612522][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 958.642027][ T5913] usb 2-1: can't read configurations, error -71 [ 958.660312][T22720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5362'. [ 959.488134][T22750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5375'. [ 959.861770][T22763] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5383'. [ 959.896487][T22763] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5383'. [ 961.004850][T22821] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5411'. [ 961.803218][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5431'. [ 962.262848][T22892] binder: 22889:22892 ioctl c0306201 800001c0 returned -14 [ 963.265212][T22936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5466'. [ 965.242906][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5502'. [ 965.809525][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 966.268884][T23063] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5524'. [ 966.293554][T23063] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5524'. [ 967.568102][T23107] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5546'. [ 968.531054][T23143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5563'. [ 968.860346][T23155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5570'. [ 969.409039][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5582'. [ 970.186757][T23217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5599'. [ 972.540415][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 972.722234][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.761341][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.838296][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 972.886461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 972.919116][ T10] usb 3-1: SerialNumber: syz [ 973.185984][ T10] usb 3-1: bad CDC descriptors [ 973.228827][ T10] usb 3-1: USB disconnect, device number 92 [ 973.786014][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 974.724521][T23384] netlink: 'syz.5.5677': attribute type 12 has an invalid length. [ 975.417672][T23426] netlink: 'syz.4.5698': attribute type 4 has an invalid length. [ 975.436666][T23426] netlink: 'syz.4.5698': attribute type 5 has an invalid length. [ 975.447606][T23426] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5698'. [ 976.048332][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 976.048350][ T30] audit: type=1326 audit(1763262866.967:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.147671][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 976.157112][ T30] audit: type=1326 audit(1763262866.997:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.182048][T23468] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5718'. [ 976.192923][T23468] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5718'. [ 976.202329][ T30] audit: type=1326 audit(1763262867.007:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.270150][ T30] audit: type=1326 audit(1763262867.007:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.356750][ T30] audit: type=1326 audit(1763262867.007:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.460251][ T30] audit: type=1326 audit(1763262867.007:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.494443][ T30] audit: type=1326 audit(1763262867.007:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.547676][ T30] audit: type=1326 audit(1763262867.007:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.594971][ T30] audit: type=1326 audit(1763262867.007:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 976.639212][ T30] audit: type=1326 audit(1763262867.007:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 978.144598][T23567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5767'. [ 979.121657][T23615] netlink: 'syz.1.5789': attribute type 25 has an invalid length. [ 980.212226][T23667] netlink: 'syz.2.5814': attribute type 16 has an invalid length. [ 980.272822][T23667] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.5814'. [ 980.983305][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 980.998284][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.021038][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.040758][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.050566][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 981.325489][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.577179][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.805644][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.959445][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.081230][T23694] chnl_net:caif_netlink_parms(): no params data found [ 982.309758][T23751] netlink: 'syz.2.5850': attribute type 8 has an invalid length. [ 982.336125][T23751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5850'. [ 982.378735][T23753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5851'. [ 982.396355][T23694] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.410339][T23694] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.421269][T23694] bridge_slave_0: entered allmulticast mode [ 982.429891][T23694] bridge_slave_0: entered promiscuous mode [ 982.494627][T23694] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.540416][T23694] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.547711][T23694] bridge_slave_1: entered allmulticast mode [ 982.584112][T23694] bridge_slave_1: entered promiscuous mode [ 982.756690][T23694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.767781][ T154] bridge_slave_1: left allmulticast mode [ 982.776987][ T154] bridge_slave_1: left promiscuous mode [ 982.783493][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.799960][ T154] bridge_slave_0: left allmulticast mode [ 982.810934][ T154] bridge_slave_0: left promiscuous mode [ 982.826977][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.091294][ T5830] Bluetooth: hci3: command tx timeout [ 983.293016][T23791] netlink: 392 bytes leftover after parsing attributes in process `syz.5.5868'. [ 983.966358][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.980710][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.991607][ T154] bond0 (unregistering): Released all slaves [ 984.016841][T23694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.208604][ T154] tipc: Left network mode [ 984.218275][T23694] team0: Port device team_slave_0 added [ 984.262869][T23694] team0: Port device team_slave_1 added [ 984.482615][T23694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.489601][T23694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.538704][T23694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.614611][T23694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.624347][T23694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.687608][T23694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.961926][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.984019][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.020686][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.029268][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.091269][ T154] veth1_macvtap: left promiscuous mode [ 985.096842][ T154] veth0_macvtap: left promiscuous mode [ 985.120686][ T154] veth1_vlan: left promiscuous mode [ 985.126264][ T154] veth0_vlan: left promiscuous mode [ 985.180453][ T5830] Bluetooth: hci3: command tx timeout [ 985.705560][ T154] team0 (unregistering): Port device team_slave_1 removed [ 985.766042][ T154] team0 (unregistering): Port device team_slave_0 removed [ 986.485003][T23694] hsr_slave_0: entered promiscuous mode [ 986.513131][T23694] hsr_slave_1: entered promiscuous mode [ 986.647642][T23893] binder: 23891:23893 ioctl c0306201 0 returned -14 [ 987.240338][T23913] random: crng reseeded on system resumption [ 987.253519][ T5830] Bluetooth: hci3: command tx timeout [ 988.269279][T23694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 988.316750][T23694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 988.353543][T23694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 988.403160][T23694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 988.686081][T23694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.768186][T23694] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.836055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.843272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.893346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.900579][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.115635][T23694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.294023][T23694] veth0_vlan: entered promiscuous mode [ 989.330250][ T5830] Bluetooth: hci3: command tx timeout [ 989.339240][T23694] veth1_vlan: entered promiscuous mode [ 989.417815][T23694] veth0_macvtap: entered promiscuous mode [ 989.476457][T23694] veth1_macvtap: entered promiscuous mode [ 989.551697][T23694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.605715][T23694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.709238][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.738129][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.791899][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.821456][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.093279][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.142101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.215249][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.280386][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.713177][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.748014][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.757776][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.770335][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.791478][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 992.231921][ T10] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 992.391819][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 992.412989][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 992.430223][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.438254][ T10] usb 3-1: Product: syz [ 992.443571][ T10] usb 3-1: Manufacturer: syz [ 992.448207][ T10] usb 3-1: SerialNumber: syz [ 992.779335][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.859077][T24113] chnl_net:caif_netlink_parms(): no params data found [ 992.876270][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 993.032142][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.099340][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.105832][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.246586][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.454464][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.483348][T24113] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.501649][T24113] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.522358][T24113] bridge_slave_0: entered allmulticast mode [ 993.548164][T24113] bridge_slave_0: entered promiscuous mode [ 993.555637][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.578851][T24113] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.595857][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.607020][T24113] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.635244][T24113] bridge_slave_1: entered allmulticast mode [ 993.644206][T24113] bridge_slave_1: entered promiscuous mode [ 993.758884][T24113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.837805][T24113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.891549][ T5830] Bluetooth: hci5: command tx timeout [ 994.007223][T24113] team0: Port device team_slave_0 added [ 994.018927][T24113] team0: Port device team_slave_1 added [ 994.174643][ T79] bridge_slave_1: left allmulticast mode [ 994.181844][ T79] bridge_slave_1: left promiscuous mode [ 994.188005][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.204208][ T79] bridge_slave_0: left allmulticast mode [ 994.216840][ T79] bridge_slave_0: left promiscuous mode [ 994.223418][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.712914][ T79] bond0 (unregistering): (slave 70): Releasing backup interface [ 994.723096][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.733718][ T79] bond0 (unregistering): Released all slaves [ 994.748951][T24113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.757490][T24113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.784553][T24113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.821060][T24113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.828039][T24113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.871232][ C1] usblp0: nonzero write bulk status received: -71 [ 994.872534][T24113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.891328][T12656] usb 3-1: USB disconnect, device number 93 [ 994.949846][T12656] usblp0: removed [ 995.108707][T24207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6029'. [ 995.338736][T24113] hsr_slave_0: entered promiscuous mode [ 995.345761][T24113] hsr_slave_1: entered promiscuous mode [ 995.371237][T24113] debugfs: 'hsr0' already exists in 'hsr' [ 995.380271][T24113] Cannot create hsr debugfs directory [ 995.468582][ T79] hsr_slave_0: left promiscuous mode [ 995.502080][ T79] hsr_slave_1: left promiscuous mode [ 995.508199][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.526003][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.547207][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.562227][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.638051][ T79] veth1_macvtap: left promiscuous mode [ 995.653927][ T79] veth0_macvtap: left promiscuous mode [ 995.664927][ T79] veth1_vlan: left promiscuous mode [ 995.671481][ T79] veth0_vlan: left promiscuous mode [ 995.970415][ T5830] Bluetooth: hci5: command tx timeout [ 996.580487][ T79] team0 (unregistering): Port device team_slave_1 removed [ 996.641423][ T79] team0 (unregistering): Port device team_slave_0 removed [ 998.052108][ T5830] Bluetooth: hci5: command tx timeout [ 998.701946][ T856] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 998.870355][ T856] usb 5-1: Using ep0 maxpacket: 32 [ 998.916176][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.969833][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.012105][ T856] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 999.028721][ T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.067733][ T856] usb 5-1: config 0 descriptor?? [ 999.109860][ T856] hub 5-1:0.0: USB hub found [ 999.317228][ T856] hub 5-1:0.0: 1 port detected [ 999.533519][T24113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 999.585839][T24113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 999.622533][T24113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 999.724120][T24113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 999.750484][ T5905] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 999.922554][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 999.922999][ T10] hub 5-1:0.0: activate --> -90 [ 999.934762][ T5905] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.982507][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1000.020144][ T5905] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1000.029288][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.065665][ T5905] usb 6-1: config 0 descriptor?? [ 1000.068307][T24113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.117514][T24113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.130923][ T5830] Bluetooth: hci5: command tx timeout [ 1000.152415][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.159641][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.193441][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.200625][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.304279][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1000.339517][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1000.342575][T11596] usb 5-1: USB disconnect, device number 71 [ 1000.395158][ T5905] usb 6-1: USB disconnect, device number 28 [ 1000.423890][T24113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.557865][T24113] veth0_vlan: entered promiscuous mode [ 1000.570412][ T10] usb 5-1-port1: config error [ 1000.598171][T24113] veth1_vlan: entered promiscuous mode [ 1000.681301][T24113] veth0_macvtap: entered promiscuous mode [ 1000.695213][T24113] veth1_macvtap: entered promiscuous mode [ 1000.723844][T24113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.748090][T24113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.760307][T11597] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1000.784580][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.794603][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.807118][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.830575][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.949742][T11597] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1000.985260][T11597] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1001.015057][T11597] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1001.070134][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.077983][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.104415][T11597] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1001.121766][T11597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1001.136183][T11597] usb 3-1: SerialNumber: syz [ 1001.146276][T11597] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1001.207436][T12303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.225634][T12303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.370731][T12656] usb 3-1: USB disconnect, device number 94 [ 1002.645404][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1002.659420][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1002.673823][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1002.693563][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1002.703814][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1002.710930][ T5905] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1002.850694][T11597] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1002.870137][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 1002.878407][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.899193][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1002.922045][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.941452][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.970117][ T5905] usb 5-1: Product: syz [ 1002.982490][ T5905] usb 5-1: Manufacturer: syz [ 1002.995862][ T5905] usb 5-1: SerialNumber: syz [ 1003.011157][T11597] usb 3-1: Using ep0 maxpacket: 8 [ 1003.021255][T11597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1003.041234][T11597] usb 3-1: config 143 has an invalid interface number: 213 but max is 1 [ 1003.052502][T11597] usb 3-1: config 143 has an invalid interface number: 2 but max is 1 [ 1003.060900][T11597] usb 3-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 1003.071619][T11597] usb 3-1: config 143 has no interface number 0 [ 1003.077887][T11597] usb 3-1: config 143 has no interface number 1 [ 1003.084572][T11597] usb 3-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1003.098228][T11597] usb 3-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1003.111859][T11597] usb 3-1: config 143 interface 213 has no altsetting 0 [ 1003.118822][T11597] usb 3-1: config 143 interface 2 has no altsetting 0 [ 1003.128422][T11597] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 1003.149061][T11597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.173286][T11597] usb 3-1: Product: syz [ 1003.177497][T11597] usb 3-1: Manufacturer: syz [ 1003.186987][T24465] chnl_net:caif_netlink_parms(): no params data found [ 1003.211238][T11597] usb 3-1: SerialNumber: syz [ 1003.309182][ T5905] usb 5-1: 0:2 : does not exist [ 1003.321589][ T5905] usb 5-1: unit 6 not found! [ 1003.403230][ T5905] usb 5-1: USB disconnect, device number 72 [ 1003.432020][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1003.455897][T11597] asix 3-1:143.213: probe with driver asix failed with error -22 [ 1003.476548][T11597] asix 3-1:143.2: probe with driver asix failed with error -22 [ 1003.488716][T11597] usb 3-1: USB disconnect, device number 95 [ 1003.528356][T24188] udevd[24188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.654082][T24465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.688414][T24465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.721730][T24465] bridge_slave_0: entered allmulticast mode [ 1003.729582][T24465] bridge_slave_0: entered promiscuous mode [ 1003.759596][T24465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.779173][T24465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.789483][T24465] bridge_slave_1: entered allmulticast mode [ 1003.798384][T24465] bridge_slave_1: entered promiscuous mode [ 1003.885538][T24465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.904463][T24465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.113275][T24465] team0: Port device team_slave_0 added [ 1004.134266][T24465] team0: Port device team_slave_1 added [ 1004.243693][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 1004.332522][T24465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.339504][T24465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.377269][T24465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.396472][T24465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.435855][T24465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.479587][T24465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.597944][T24529] binder: 24528:24529 ioctl c0306201 0 returned -14 [ 1004.635932][T24465] hsr_slave_0: entered promiscuous mode [ 1004.651514][T24465] hsr_slave_1: entered promiscuous mode [ 1004.671343][T24465] debugfs: 'hsr0' already exists in 'hsr' [ 1004.677113][T24465] Cannot create hsr debugfs directory [ 1004.748324][T24534] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1004.770752][ T5830] Bluetooth: hci0: command tx timeout [ 1005.332936][T24465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.619382][T24465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.848911][T24465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.043086][T24465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.402843][T24465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.439930][T24465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.469266][T24465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1006.642112][T24618] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1006.671543][T24465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1006.850375][ T5830] Bluetooth: hci0: command tx timeout [ 1006.896144][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1007.185382][T24465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.375185][T24465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.421339][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.428496][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.455453][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.462663][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.904321][T24465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.135001][T24465] veth0_vlan: entered promiscuous mode [ 1008.251795][T24465] veth1_vlan: entered promiscuous mode [ 1008.375441][T24465] veth0_macvtap: entered promiscuous mode [ 1008.409094][T24465] veth1_macvtap: entered promiscuous mode [ 1008.420170][T12656] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1008.485579][T24465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.497851][T24465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.537747][T12303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.558781][T12303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.590270][T12656] usb 6-1: Using ep0 maxpacket: 32 [ 1008.597867][T12303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.614433][T12656] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1008.628727][T12303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.639048][T12656] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1008.661299][T12656] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.692637][T12656] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1008.714772][T12656] usb 6-1: config 128 has no interface number 0 [ 1008.730262][T12656] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1008.763957][T12656] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1008.820162][T12656] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1008.839600][T12656] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1008.857647][T12656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.875035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.883335][T12656] usb 6-1: Product: syz [ 1008.895058][T12656] usb 6-1: Manufacturer: syz [ 1008.906711][T12656] usb 6-1: SerialNumber: syz [ 1008.923441][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.931235][ T5830] Bluetooth: hci0: command tx timeout [ 1009.026800][T12303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.049909][T12303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.233002][T12656] usb 6-1: USB disconnect, device number 29 [ 1009.298876][T24188] udevd[24188]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.801880][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6245'. [ 1011.011390][ T5830] Bluetooth: hci0: command tx timeout [ 1012.454737][T24889] sit0: entered promiscuous mode [ 1012.493743][T24889] netlink: 'syz.0.6312': attribute type 1 has an invalid length. [ 1012.527021][T24889] netlink: 'syz.0.6312': attribute type 3 has an invalid length. [ 1012.645005][T24901] netlink: 'syz.0.6317': attribute type 16 has an invalid length. [ 1012.653023][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1012.653040][ T30] audit: type=1326 audit(1763262903.567:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24895 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000 [ 1013.105013][T24920] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6326'. [ 1013.344033][T24937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1013.995546][ T30] audit: type=1326 audit(1763262904.917:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24965 comm="syz.2.6348" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x0 [ 1015.040729][T25004] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6365'. [ 1015.111889][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1015.507865][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.519784][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.529252][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.549319][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.559524][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1015.693050][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.988671][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.235913][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.377297][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.431134][T25048] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1017.070418][ T13] bridge_slave_1: left allmulticast mode [ 1017.100062][ T13] bridge_slave_1: left promiscuous mode [ 1017.105917][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.202171][ T13] bridge_slave_0: left allmulticast mode [ 1017.207870][ T13] bridge_slave_0: left promiscuous mode [ 1017.247102][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.650466][ T5830] Bluetooth: hci1: command tx timeout [ 1019.191687][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.216419][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.242084][ T13] bond0 (unregistering): Released all slaves [ 1019.315026][T25028] chnl_net:caif_netlink_parms(): no params data found [ 1019.730616][ T5830] Bluetooth: hci1: command tx timeout [ 1020.124980][ T13] hsr_slave_0: left promiscuous mode [ 1020.155155][ T13] hsr_slave_1: left promiscuous mode [ 1020.177810][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.205776][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.258042][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.283104][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.361029][ T13] veth1_macvtap: left promiscuous mode [ 1020.375485][ T13] veth0_macvtap: left promiscuous mode [ 1020.393248][ T13] veth1_vlan: left promiscuous mode [ 1020.398629][ T13] veth0_vlan: left promiscuous mode [ 1020.467828][T25207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6446'. [ 1021.040368][ T5905] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1021.220125][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 1021.231567][ T5905] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.245005][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1021.259760][ T5905] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1021.269413][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.282109][ T5905] usb 5-1: config 0 descriptor?? [ 1021.310181][T12656] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1021.475234][T12656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.495165][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 1021.501551][T12656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.515505][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1021.526468][T12656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.539892][ T5905] usb 5-1: USB disconnect, device number 73 [ 1021.551697][T12656] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.561180][T12656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.579815][T12656] usb 1-1: config 0 descriptor?? [ 1021.588841][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1021.659561][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1021.671451][T25240] ------------[ cut here ]------------ [ 1021.677011][T25240] WARNING: CPU: 1 PID: 25240 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 1021.686004][T25240] Modules linked in: [ 1021.691355][T25240] CPU: 1 UID: 0 PID: 25240 Comm: syz.5.6462 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1021.700810][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1021.711179][T25240] RIP: 0010:path_noexec+0x1af/0x200 [ 1021.716432][T25240] Code: 02 31 ff 48 89 de e8 70 8e 87 ff d1 eb eb 07 e8 87 89 87 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 89 87 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1021.736511][T25240] RSP: 0018:ffffc9000bfdfbb8 EFLAGS: 00010283 [ 1021.742667][T25240] RAX: ffffffff82387a6e RBX: ffff888021339e40 RCX: 0000000000080000 [ 1021.750825][T25240] RDX: ffffc90013ba4000 RSI: 000000000000006a RDI: 000000000000006b [ 1021.758875][T25240] RBP: 0000000000080000 R08: ffff88802e1cdac0 R09: 0000000000000003 [ 1021.766948][T25240] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 1021.775016][T25240] R13: 1ffff920017fbf8c R14: 0000000000000000 R15: dffffc0000000000 [ 1021.783696][T25240] FS: 0000000000000000(0000) GS:ffff88812623b000(0063) knlGS:00000000f543db40 [ 1021.793450][T25240] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1021.800738][T25240] CR2: 000000000c352a81 CR3: 000000001d6fa000 CR4: 00000000003526f0 [ 1021.808793][T25240] Call Trace: [ 1021.812181][T25240] [ 1021.812291][ T5830] Bluetooth: hci1: command tx timeout [ 1021.815150][T25240] do_mmap+0xa43/0x10d0 [ 1021.824856][T25240] ? __pfx_do_mmap+0x10/0x10 [ 1021.829591][T25240] ? down_write_killable+0x178/0x230 [ 1021.834979][T25240] ? __pfx_down_write_killable+0x10/0x10 [ 1021.840686][T25240] ? common_file_perm+0x1b5/0x230 [ 1021.845864][T25240] vm_mmap_pgoff+0x2a6/0x4d0 [ 1021.850607][T25240] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1021.855775][T25240] ? __fget_files+0x2a/0x420 [ 1021.860439][T25240] ? __fget_files+0x3a0/0x420 [ 1021.865222][T25240] ? __fget_files+0x2a/0x420 [ 1021.869857][T25240] ksys_mmap_pgoff+0x51f/0x760 [ 1021.874713][T25240] __do_fast_syscall_32+0xb6/0x2b0 [ 1021.879876][T25240] do_fast_syscall_32+0x34/0x80 [ 1021.884839][T25240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.892977][T25240] RIP: 0023:0xf704d539 [ 1021.897067][T25240] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1021.917693][T25240] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1021.926270][T25240] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 1021.934509][T25240] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000005 [ 1021.942574][T25240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.950622][T25240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1021.958641][T25240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.966731][T25240] [ 1021.969786][T25240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1021.977067][T25240] CPU: 1 UID: 0 PID: 25240 Comm: syz.5.6462 Not tainted syzkaller #0 PREEMPT(full) [ 1021.986430][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1021.996484][T25240] Call Trace: [ 1021.999754][T25240] [ 1022.002675][T25240] dump_stack_lvl+0x99/0x250 [ 1022.007263][T25240] ? __asan_memcpy+0x40/0x70 [ 1022.011846][T25240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.017039][T25240] ? __pfx__printk+0x10/0x10 [ 1022.021732][T25240] vpanic+0x237/0x6d0 [ 1022.025727][T25240] ? __pfx_vpanic+0x10/0x10 [ 1022.030278][T25240] panic+0xb9/0xc0 [ 1022.034012][T25240] ? __pfx_panic+0x10/0x10 [ 1022.038431][T25240] __warn+0x31b/0x4b0 [ 1022.042405][T25240] ? path_noexec+0x1af/0x200 [ 1022.046984][T25240] ? path_noexec+0x1af/0x200 [ 1022.051571][T25240] report_bug+0x2be/0x4f0 [ 1022.055911][T25240] ? path_noexec+0x1af/0x200 [ 1022.060496][T25240] ? path_noexec+0x1af/0x200 [ 1022.065095][T25240] ? path_noexec+0x1b1/0x200 [ 1022.069669][T25240] handle_bug+0x84/0x160 [ 1022.073899][T25240] exc_invalid_op+0x1a/0x50 [ 1022.078389][T25240] asm_exc_invalid_op+0x1a/0x20 [ 1022.083224][T25240] RIP: 0010:path_noexec+0x1af/0x200 [ 1022.088407][T25240] Code: 02 31 ff 48 89 de e8 70 8e 87 ff d1 eb eb 07 e8 87 89 87 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 89 87 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1022.108093][T25240] RSP: 0018:ffffc9000bfdfbb8 EFLAGS: 00010283 [ 1022.114246][T25240] RAX: ffffffff82387a6e RBX: ffff888021339e40 RCX: 0000000000080000 [ 1022.122204][T25240] RDX: ffffc90013ba4000 RSI: 000000000000006a RDI: 000000000000006b [ 1022.130164][T25240] RBP: 0000000000080000 R08: ffff88802e1cdac0 R09: 0000000000000003 [ 1022.138141][T25240] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 1022.146115][T25240] R13: 1ffff920017fbf8c R14: 0000000000000000 R15: dffffc0000000000 [ 1022.154107][T25240] ? path_noexec+0x1ae/0x200 [ 1022.158734][T25240] ? path_noexec+0x1ae/0x200 [ 1022.163341][T25240] do_mmap+0xa43/0x10d0 [ 1022.167515][T25240] ? __pfx_do_mmap+0x10/0x10 [ 1022.172111][T25240] ? down_write_killable+0x178/0x230 [ 1022.177397][T25240] ? __pfx_down_write_killable+0x10/0x10 [ 1022.183022][T25240] ? common_file_perm+0x1b5/0x230 [ 1022.188054][T25240] vm_mmap_pgoff+0x2a6/0x4d0 [ 1022.192653][T25240] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1022.197759][T25240] ? __fget_files+0x2a/0x420 [ 1022.202347][T25240] ? __fget_files+0x3a0/0x420 [ 1022.207018][T25240] ? __fget_files+0x2a/0x420 [ 1022.211598][T25240] ksys_mmap_pgoff+0x51f/0x760 [ 1022.216477][T25240] __do_fast_syscall_32+0xb6/0x2b0 [ 1022.221583][T25240] do_fast_syscall_32+0x34/0x80 [ 1022.226446][T25240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1022.232785][T25240] RIP: 0023:0xf704d539 [ 1022.236858][T25240] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1022.256452][T25240] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1022.264857][T25240] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 1022.272830][T25240] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000005 [ 1022.280802][T25240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.288778][T25240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1022.296744][T25240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.304731][T25240] [ 1022.308004][T25240] Kernel Offset: disabled [ 1022.312328][T25240] Rebooting in 86400 seconds..