last executing test programs: 6.602856615s ago: executing program 3 (id=25773): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlockall(0x6) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 6.39759967s ago: executing program 3 (id=25776): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) getgroups(0x0, 0x0) 6.097104932s ago: executing program 3 (id=25778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62020000) 5.62064878s ago: executing program 4 (id=25783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), 0x0, 0x1}, 0x20) 5.512377368s ago: executing program 4 (id=25784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.486875499s ago: executing program 3 (id=25785): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2086dd0000000000ac141416e0885a049a179424", 0x0, 0x3000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.166918863s ago: executing program 4 (id=25786): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9"], 0x15) 4.417472069s ago: executing program 1 (id=25792): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.015735328s ago: executing program 1 (id=25794): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), 0x0, 0x1}, 0x20) 3.902255896s ago: executing program 3 (id=25797): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) 3.792353119s ago: executing program 1 (id=25798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x4) getgroups(0x0, 0x0) 3.503291992s ago: executing program 1 (id=25800): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x3, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0xfffffffd, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0x9, 0x0, 0x575c, 0x2, 0x5a, 0x2, 0x0, 0x5, 0x5, 0x1, 0x2, 0x1, 0x5, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9b2, 0x0, 0x2, 0xa, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0xfffff7ff, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x6, 0x4, 0x1100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x8, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x4, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x2, 0x4, 0x7fffffff, 0xc2577131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x40007, 0xb5, 0xfffffffa, 0x100, 0x0, 0x6, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x7, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x32, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x1000006, 0x9, 0x2, 0xe, 0x0, 0x7f, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x400007, 0x8, 0x2, 0x3, 0x5, 0x83, 0xfffffff8, 0xb6], [0x3, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x9, 0x16, 0x10, 0x7fff, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x20000005, 0x8, 0x7, 0x2, 0x4689, 0x9, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x177, 0x5, 0xfffffffa, 0x6e, 0xffffffff]}, 0x45c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 3.311132759s ago: executing program 1 (id=25801): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) 2.685574962s ago: executing program 2 (id=25808): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0x0, 0x4000}, 0x0) 2.502276193s ago: executing program 2 (id=25809): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.910272506s ago: executing program 4 (id=25812): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x10000f90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 1.909412665s ago: executing program 2 (id=25813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62020000) 1.661015456s ago: executing program 0 (id=25815): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.497427219s ago: executing program 0 (id=25816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) 1.34079812s ago: executing program 0 (id=25817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = gettid() prlimit64(r5, 0x8, 0x0, &(0x7f0000000100)) 1.279157465s ago: executing program 2 (id=25818): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) epoll_create(0x7) 1.272047154s ago: executing program 0 (id=25819): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000200)="34ce1e", 0x3}], 0x2, 0x0, 0x0, 0x4000}, 0x0) 1.165150143s ago: executing program 0 (id=25820): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x5c, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0xa, &(0x7f00000000c0)) 1.156203563s ago: executing program 4 (id=25821): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100013070000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c0014"], 0x160}}, 0x0) 1.00661674s ago: executing program 2 (id=25822): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write$P9_RMKNOD(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}}], 0x1, 0x488d5) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0x9bb1, &(0x7f0000000040)) 931.623323ms ago: executing program 4 (id=25823): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9"], 0x15) 722.678857ms ago: executing program 0 (id=25824): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 593.565493ms ago: executing program 3 (id=25825): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x25, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000040)="ca00d1c441ef196ec867f3410f12a5000000000fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) 592.609842ms ago: executing program 2 (id=25826): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 0s ago: executing program 1 (id=25827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) kernel console output (not intermixed with test programs): z.2.21013'. [ 2955.399795][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21013'. [ 2956.445600][T20686] IPVS: length: 62 != 8 [ 2959.048010][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.048082][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.142375][T20758] IPVS: length: 62 != 8 [ 2959.438561][T20770] binder_alloc: 20769: pid 20769 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2959.502858][T20772] __nla_validate_parse: 4 callbacks suppressed [ 2959.502875][T20772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21070'. [ 2960.280068][T20798] netlink: 'syz.0.21082': attribute type 4 has an invalid length. [ 2961.121549][ T8824] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 2961.180762][T20825] netlink: 'syz.0.21095': attribute type 4 has an invalid length. [ 2961.273955][ T8824] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2961.274020][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2961.274046][ T8824] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2961.274070][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2961.274099][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2961.275319][ T8824] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2961.275371][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2961.275405][ T8824] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2961.275428][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2961.275452][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2961.276559][ T8824] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2961.276619][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2961.276644][ T8824] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2961.276666][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2961.276689][ T8824] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2961.280327][ T8824] usb 5-1: string descriptor 0 read error: -22 [ 2961.280484][ T8824] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2961.280506][ T8824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2961.394084][ T8824] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2961.541660][ T8824] usb 5-1: USB disconnect, device number 19 [ 2962.229203][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21105'. [ 2962.229225][T20848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21105'. [ 2962.229475][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21105'. [ 2962.229489][T20848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21105'. [ 2962.536771][T20859] sctp: [Deprecated]: syz.2.21110 (pid 20859) Use of int in maxseg socket option. [ 2962.536771][T20859] Use struct sctp_assoc_value instead [ 2962.914869][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21117'. [ 2963.189532][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21120'. [ 2963.189554][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21120'. [ 2963.189804][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21120'. [ 2963.189817][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21120'. [ 2963.498804][T20884] sctp: [Deprecated]: syz.4.21124 (pid 20884) Use of int in maxseg socket option. [ 2963.498804][T20884] Use struct sctp_assoc_value instead [ 2972.704167][T21062] sctp: [Deprecated]: syz.2.21205 (pid 21062) Use of int in maxseg socket option. [ 2972.704167][T21062] Use struct sctp_assoc_value instead [ 2975.812987][T21114] netlink: 'syz.1.21231': attribute type 4 has an invalid length. [ 2977.153402][T21138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2977.163284][T21138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2977.171748][T21138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2977.206096][T21138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2977.208512][T21138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2977.923503][T21160] __nla_validate_parse: 1 callbacks suppressed [ 2977.923521][T21160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21251'. [ 2978.286911][T21175] netlink: 100 bytes leftover after parsing attributes in process `syz.2.21258'. [ 2978.734561][ T4104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2978.734596][ T4104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2979.242307][ T4104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2979.242340][ T4104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2979.292738][ T61] Bluetooth: hci3: command tx timeout [ 2979.745304][ T4104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2979.745338][ T4104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2980.246093][ T4104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2980.246126][ T4104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2980.366967][T21190] netlink: 'syz.4.21265': attribute type 3 has an invalid length. [ 2981.361713][ T61] Bluetooth: hci3: command tx timeout [ 2981.409074][T21136] chnl_net:caif_netlink_parms(): no params data found [ 2981.849501][ T4104] bridge_slave_1: left allmulticast mode [ 2981.849525][ T4104] bridge_slave_1: left promiscuous mode [ 2981.849799][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 2981.954365][ T4104] bridge_slave_0: left allmulticast mode [ 2981.954394][ T4104] bridge_slave_0: left promiscuous mode [ 2981.954674][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 2982.235132][T21217] netlink: 100 bytes leftover after parsing attributes in process `syz.4.21272'. [ 2983.247318][T21234] binder_alloc: 21233: binder_alloc_buf, no vma [ 2983.441664][ T61] Bluetooth: hci3: command tx timeout [ 2985.521627][ T61] Bluetooth: hci3: command tx timeout [ 2985.982845][ T4104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2986.087479][ T4104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2986.145424][ T4104] bond0 (unregistering): Released all slaves [ 2986.401791][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21286'. [ 2986.774526][T21269] IPVS: length: 62 != 8 [ 2987.735902][ T4104] bond1 (unregistering): Released all slaves [ 2989.072367][ T4104] bond2 (unregistering): Released all slaves [ 2990.047343][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21301'. [ 2990.047564][T21136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2990.047689][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 2990.047927][T21136] bridge_slave_0: entered allmulticast mode [ 2990.050671][T21136] bridge_slave_0: entered promiscuous mode [ 2990.313802][T21136] bridge0: port 2(bridge_slave_1) entered blocking state [ 2990.313992][T21136] bridge0: port 2(bridge_slave_1) entered disabled state [ 2990.314227][T21136] bridge_slave_1: entered allmulticast mode [ 2990.317108][T21136] bridge_slave_1: entered promiscuous mode [ 2991.113335][T21316] netlink: 100 bytes leftover after parsing attributes in process `syz.4.21313'. [ 2991.120417][T21136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2991.164719][T21136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2991.530190][ T4104] hsr_slave_0: left promiscuous mode [ 2991.564659][ T4104] hsr_slave_1: left promiscuous mode [ 2991.565635][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2991.565661][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2991.640768][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2991.640797][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2991.866598][ T4104] veth1_macvtap: left promiscuous mode [ 2991.866721][ T4104] veth0_macvtap: left promiscuous mode [ 2991.866989][ T4104] veth1_vlan: left promiscuous mode [ 2991.867173][ T4104] veth0_vlan: left promiscuous mode [ 2996.642221][ T4104] team0 (unregistering): Port device team_slave_1 removed [ 2996.892136][ T4104] team0 (unregistering): Port device team_slave_0 removed [ 2999.356232][T21136] team0: Port device team_slave_0 added [ 2999.360916][T21136] team0: Port device team_slave_1 added [ 2999.566120][T21136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2999.566137][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2999.566161][T21136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2999.569454][T21136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2999.569467][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2999.569491][T21136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2999.885905][T21136] hsr_slave_0: entered promiscuous mode [ 2999.886720][T21136] hsr_slave_1: entered promiscuous mode [ 3001.464629][T21136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3001.506099][T21136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3001.526464][T21136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3001.586985][T21136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3001.755289][T21136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3001.790693][T21136] 8021q: adding VLAN 0 to HW filter on device team0 [ 3001.810188][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3001.810489][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3001.828073][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3001.828281][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3002.165794][T21136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3002.227750][T21136] veth0_vlan: entered promiscuous mode [ 3002.240987][T21136] veth1_vlan: entered promiscuous mode [ 3002.300299][T21136] veth0_macvtap: entered promiscuous mode [ 3002.307005][T21136] veth1_macvtap: entered promiscuous mode [ 3002.329229][T21136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3002.348470][T21136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3002.370441][T25887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.370656][T25887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.370693][T25887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.370726][T25887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.707107][T13502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3002.707128][T13502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3002.785306][ T9378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3002.785326][ T9378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3008.685515][T21475] netlink: 'syz.1.21340': attribute type 4 has an invalid length. [ 3010.779573][T21497] netlink: 100 bytes leftover after parsing attributes in process `syz.3.21351'. [ 3011.864008][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf34400: rx timeout, send abort [ 3011.864170][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf36000: rx timeout, send abort [ 3011.864374][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf34400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3011.864515][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf36000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3013.252824][T21521] IPVS: length: 62 != 8 [ 3014.147093][T21570] netlink: 'syz.1.21387': attribute type 4 has an invalid length. [ 3014.253259][T21574] binder: BINDER_SET_CONTEXT_MGR already set [ 3014.253275][T21574] binder: 21573:21574 ioctl 4018620d 200000000040 returned -16 [ 3014.690140][T21592] IPVS: length: 62 != 8 [ 3014.759792][T21600] netlink: 'syz.4.21402': attribute type 4 has an invalid length. [ 3016.556491][T21674] IPVS: length: 62 != 8 [ 3019.486535][ C0] vkms_vblank_simulate: vblank timer overrun [ 3020.271545][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 3020.311154][T21794] fuse: Bad value for 'group_id' [ 3020.311173][T21794] fuse: Bad value for 'group_id' [ 3020.424058][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3020.424117][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3020.424142][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3020.424163][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3020.424187][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3020.425576][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3020.425655][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3020.425681][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3020.425703][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3020.425726][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3020.427145][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3020.427194][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3020.427219][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3020.427241][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3020.427265][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3020.435077][ T9] usb 3-1: string descriptor 0 read error: -22 [ 3020.435225][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3020.435245][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.502250][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.502316][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.556606][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3020.672142][T26581] usb 3-1: USB disconnect, device number 22 [ 3020.865483][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21496'. [ 3021.104500][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21496'. [ 3022.694723][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21515'. [ 3022.694755][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21515'. [ 3022.947771][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21515'. [ 3022.947803][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21515'. [ 3024.161113][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21527'. [ 3026.309499][T21905] No control pipe specified [ 3028.089363][T21943] No control pipe specified [ 3030.864926][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21597'. [ 3032.677176][T22068] netlink: 'syz.3.21623': attribute type 4 has an invalid length. [ 3034.052079][T22094] netlink: 'syz.1.21636': attribute type 4 has an invalid length. [ 3036.900247][T22183] tmpfs: Bad value for 'mpol' [ 3037.925088][T22207] fuse: Bad value for 'group_id' [ 3037.925107][T22207] fuse: Bad value for 'group_id' [ 3038.573313][T22227] No control pipe specified [ 3039.047866][T22244] tmpfs: Bad value for 'mpol' [ 3039.343888][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21711'. [ 3040.347091][T22282] netlink: 112 bytes leftover after parsing attributes in process `syz.0.21725'. [ 3041.417700][T22311] netlink: 112 bytes leftover after parsing attributes in process `syz.1.21741'. [ 3041.518227][T22313] binder: BINDER_SET_CONTEXT_MGR already set [ 3041.518243][T22313] binder: 22312:22313 ioctl 4018620d 200000000040 returned -16 [ 3042.109504][T22338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21752'. [ 3042.215497][T22341] netlink: 112 bytes leftover after parsing attributes in process `syz.0.21753'. [ 3043.105744][T22361] tmpfs: Bad value for 'mpol' [ 3045.014261][T22365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21765'. [ 3046.131272][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21773'. [ 3046.391334][T21138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3046.395672][T21138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3046.396903][T21138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3046.398389][T21138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3046.399163][T21138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3046.531015][T22381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3047.291151][T22389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21776'. [ 3047.815869][T22377] chnl_net:caif_netlink_parms(): no params data found [ 3048.484615][ C0] vkms_vblank_simulate: vblank timer overrun [ 3048.498111][ T61] Bluetooth: hci5: command tx timeout [ 3048.587073][T13502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3048.587108][T13502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3049.375571][T13502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3049.375612][T13502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3049.524850][T22377] bridge0: port 1(bridge_slave_0) entered blocking state [ 3049.524991][T22377] bridge0: port 1(bridge_slave_0) entered disabled state [ 3049.525219][T22377] bridge_slave_0: entered allmulticast mode [ 3049.528743][T22377] bridge_slave_0: entered promiscuous mode [ 3049.564291][T22377] bridge0: port 2(bridge_slave_1) entered blocking state [ 3049.564434][T22377] bridge0: port 2(bridge_slave_1) entered disabled state [ 3049.564630][T22377] bridge_slave_1: entered allmulticast mode [ 3049.576636][T22377] bridge_slave_1: entered promiscuous mode [ 3050.038406][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.097596][T13502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3050.097630][T13502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.178075][T22377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3050.205601][T22377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3050.451754][T22461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21808'. [ 3050.564748][T21138] Bluetooth: hci5: command tx timeout [ 3050.656020][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.741131][T13502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3050.741165][T13502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.794706][T22377] team0: Port device team_slave_0 added [ 3050.809916][T22377] team0: Port device team_slave_1 added [ 3051.087417][T22377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3051.087434][T22377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3051.087459][T22377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3051.101875][T22377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3051.101892][T22377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3051.101918][T22377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3051.648532][T22377] hsr_slave_0: entered promiscuous mode [ 3051.649952][T22377] hsr_slave_1: entered promiscuous mode [ 3051.650943][T22377] debugfs: 'hsr0' already exists in 'hsr' [ 3051.650968][T22377] Cannot create hsr debugfs directory [ 3052.504524][T13502] bridge_slave_1: left allmulticast mode [ 3052.504552][T13502] bridge_slave_1: left promiscuous mode [ 3052.504790][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.574819][T13502] bridge_slave_0: left allmulticast mode [ 3052.574848][T13502] bridge_slave_0: left promiscuous mode [ 3052.575127][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.651521][T21138] Bluetooth: hci5: command tx timeout [ 3053.317189][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.421758][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.533696][ C0] vkms_vblank_simulate: vblank timer overrun [ 3053.805994][ C0] vkms_vblank_simulate: vblank timer overrun [ 3054.722681][T21138] Bluetooth: hci5: command tx timeout [ 3055.465059][T22508] netlink: 108 bytes leftover after parsing attributes in process `syz.0.21829'. [ 3055.927432][T22520] binder: 22519:22520 ioctl c0306201 0 returned -14 [ 3056.183622][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21838'. [ 3056.532415][T13502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3056.612487][T13502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3056.656565][T13502] bond0 (unregistering): Released all slaves [ 3057.606488][T13502] bond1 (unregistering): Released all slaves [ 3057.812320][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21850'. [ 3058.413051][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21850'. [ 3058.752417][T22580] netlink: 108 bytes leftover after parsing attributes in process `syz.1.21861'. [ 3059.593442][T13502] hsr_slave_0: left promiscuous mode [ 3059.661741][T13502] hsr_slave_1: left promiscuous mode [ 3059.662702][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3059.662727][T13502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3059.752518][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3059.752545][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3059.985575][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21867'. [ 3060.005594][T13502] veth1_macvtap: left promiscuous mode [ 3060.005709][T13502] veth0_macvtap: left promiscuous mode [ 3060.005995][T13502] veth1_vlan: left promiscuous mode [ 3060.006186][T13502] veth0_vlan: left promiscuous mode [ 3062.727524][T22633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21879'. [ 3064.613323][T13502] team0 (unregistering): Port device team_slave_1 removed [ 3064.982297][T13502] team0 (unregistering): Port device team_slave_0 removed [ 3066.742528][T21436] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 3066.894493][T21436] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3066.894550][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3066.894575][T21436] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3066.894598][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3066.894621][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3066.896013][T21436] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3066.896072][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3066.896098][T21436] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3066.896121][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3066.896145][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3066.897502][T21436] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3066.897559][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3066.897584][T21436] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3066.897608][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3066.897631][T21436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3067.062274][T21436] usb 3-1: string descriptor 0 read error: -22 [ 3067.062439][T21436] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3067.062461][T21436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3067.112302][T21436] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3067.277006][T26581] usb 3-1: USB disconnect, device number 23 [ 3069.105928][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21871'. [ 3069.741998][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21871'. [ 3070.446940][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21927'. [ 3070.915603][T22744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3070.915635][T22744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3070.953273][T22744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3070.953302][T22744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3071.142071][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21933'. [ 3071.249933][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21933'. [ 3071.883687][T22377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3071.981712][T22377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3072.092985][T22377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3072.119905][T22795] fuse: Bad value for 'group_id' [ 3072.119924][T22795] fuse: Bad value for 'group_id' [ 3072.149612][T22377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3072.357602][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21947'. [ 3072.417498][T22808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3072.417529][T22808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3072.455946][T22808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3072.455974][T22808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3072.919237][T22377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3073.003903][T22377] 8021q: adding VLAN 0 to HW filter on device team0 [ 3073.010754][T18793] bridge0: port 1(bridge_slave_0) entered blocking state [ 3073.012236][T18793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3073.062322][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 3073.062474][ T9378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3073.106690][T22828] fuse: Bad value for 'group_id' [ 3073.106709][T22828] fuse: Bad value for 'group_id' [ 3073.392451][T22840] tmpfs: Bad value for 'mpol' [ 3074.113288][T22870] netlink: 'syz.2.21970': attribute type 4 has an invalid length. [ 3074.617875][T22377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3075.232744][T22919] netlink: 'syz.3.21985': attribute type 4 has an invalid length. [ 3075.513272][T22932] tmpfs: Bad value for 'mpol' [ 3075.558300][T22377] veth0_vlan: entered promiscuous mode [ 3075.575189][T22933] netlink: 100 bytes leftover after parsing attributes in process `syz.3.21990'. [ 3075.587143][T22377] veth1_vlan: entered promiscuous mode [ 3075.694599][T22377] veth0_macvtap: entered promiscuous mode [ 3075.712515][T22377] veth1_macvtap: entered promiscuous mode [ 3075.750821][T22377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3075.773711][T22377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3075.792303][T18793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3075.814175][T18793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3075.815826][T18793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3075.816764][T18793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3076.293687][T18793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3076.293707][T18793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3076.482697][T18793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3076.482718][T18793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3077.625779][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22009'. [ 3077.625806][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3077.625830][T22986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3077.665109][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3077.665137][T22986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3081.927971][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.928045][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3084.693722][T23049] netlink: 100 bytes leftover after parsing attributes in process `syz.0.22042'. [ 3085.661842][T23078] netlink: 100 bytes leftover after parsing attributes in process `syz.4.22053'. [ 3093.603456][T23179] netlink: 'syz.0.22101': attribute type 4 has an invalid length. [ 3099.367439][T21138] Bluetooth: hci3: command 0x0406 tx timeout [ 3103.865394][T23306] netlink: 112 bytes leftover after parsing attributes in process `syz.2.22164'. [ 3108.031168][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22193'. [ 3109.665666][T23402] tmpfs: Bad value for 'mpol' [ 3113.756907][T23445] tmpfs: Bad value for 'mpol' [ 3118.191890][T23560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22281'. [ 3118.192153][T23560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22281'. [ 3121.135753][T23628] netlink: 108 bytes leftover after parsing attributes in process `syz.0.22312'. [ 3121.748539][T23639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22318'. [ 3121.748795][T23639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22318'. [ 3125.232293][T21138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3125.250535][T21138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3125.258794][T21138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3125.275670][T21138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3125.276496][T21138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3126.330355][T23673] chnl_net:caif_netlink_parms(): no params data found [ 3127.361798][ T61] Bluetooth: hci2: command tx timeout [ 3128.728974][ T9378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3128.816369][T23673] bridge0: port 1(bridge_slave_0) entered blocking state [ 3128.816540][T23673] bridge0: port 1(bridge_slave_0) entered disabled state [ 3128.816759][T23673] bridge_slave_0: entered allmulticast mode [ 3128.819693][T23673] bridge_slave_0: entered promiscuous mode [ 3128.852752][T23673] bridge0: port 2(bridge_slave_1) entered blocking state [ 3128.852906][T23673] bridge0: port 2(bridge_slave_1) entered disabled state [ 3128.853091][T23673] bridge_slave_1: entered allmulticast mode [ 3128.857264][T23673] bridge_slave_1: entered promiscuous mode [ 3129.388062][ T9378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3129.441525][ T61] Bluetooth: hci2: command tx timeout [ 3129.485653][T23673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3129.489922][T23673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3130.098463][ T9378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.195319][T23673] team0: Port device team_slave_0 added [ 3130.453839][T23673] team0: Port device team_slave_1 added [ 3130.966363][ T9378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3131.184715][T23731] netlink: 'syz.0.22351': attribute type 3 has an invalid length. [ 3131.184735][T23731] netlink: 'syz.0.22351': attribute type 1 has an invalid length. [ 3131.184748][T23731] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22351'. [ 3131.259777][T23673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3131.259794][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3131.259819][T23673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3131.283820][T23673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3131.283836][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3131.283869][T23673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3131.464070][T23736] netlink: 108 bytes leftover after parsing attributes in process `syz.0.22358'. [ 3131.531535][ T61] Bluetooth: hci2: command tx timeout [ 3131.906299][T23673] hsr_slave_0: entered promiscuous mode [ 3131.907698][T23673] hsr_slave_1: entered promiscuous mode [ 3131.908662][T23673] debugfs: 'hsr0' already exists in 'hsr' [ 3131.908685][T23673] Cannot create hsr debugfs directory [ 3132.656255][ T9378] bridge_slave_1: left allmulticast mode [ 3132.656282][ T9378] bridge_slave_1: left promiscuous mode [ 3132.656534][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 3132.783317][ T9378] bridge_slave_0: left allmulticast mode [ 3132.783347][ T9378] bridge_slave_0: left promiscuous mode [ 3132.783612][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 3133.645327][ T61] Bluetooth: hci2: command tx timeout [ 3134.237062][T23827] fuse: Bad value for 'group_id' [ 3134.237081][T23827] fuse: Bad value for 'group_id' [ 3136.155607][ T9378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3136.258067][ T9378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3136.293098][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22410'. [ 3136.314993][ T9378] bond0 (unregistering): Released all slaves [ 3136.921564][T26580] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 3137.026192][T23895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3137.073988][T26580] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3137.074046][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3137.074071][T26580] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3137.074094][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3137.074119][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3137.075528][T26580] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3137.075578][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3137.075603][T26580] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3137.075626][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3137.075650][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3137.077059][T26580] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3137.077157][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3137.077182][T26580] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3137.077205][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3137.077229][T26580] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3137.092000][T26580] usb 2-1: string descriptor 0 read error: -22 [ 3137.092155][T26580] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3137.092176][T26580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.145009][T26580] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3137.336036][T21436] usb 2-1: USB disconnect, device number 22 [ 3139.211763][ T9378] hsr_slave_0: left promiscuous mode [ 3139.271277][ T9378] hsr_slave_1: left promiscuous mode [ 3139.363861][ T9378] veth1_macvtap: left promiscuous mode [ 3139.363975][ T9378] veth0_macvtap: left promiscuous mode [ 3139.364234][ T9378] veth1_vlan: left promiscuous mode [ 3139.364306][ T9378] veth0_vlan: left promiscuous mode [ 3143.381123][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.381215][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.093527][ T9378] team0 (unregistering): Port device team_slave_1 removed [ 3144.644233][ T9378] team0 (unregistering): Port device team_slave_0 removed [ 3150.726657][T23673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3150.779951][T23673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3150.906757][T23673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3151.052680][T23673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3151.541092][T23673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3151.648511][T23673] 8021q: adding VLAN 0 to HW filter on device team0 [ 3151.715702][T18793] bridge0: port 1(bridge_slave_0) entered blocking state [ 3151.715902][T18793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3151.783089][T18793] bridge0: port 2(bridge_slave_1) entered blocking state [ 3151.783240][T18793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3152.609890][T24092] netlink: 'syz.0.22487': attribute type 3 has an invalid length. [ 3152.609910][T24092] netlink: 'syz.0.22487': attribute type 1 has an invalid length. [ 3152.609922][T24092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22487'. [ 3152.742165][T23673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3152.965281][T23673] veth0_vlan: entered promiscuous mode [ 3153.075038][T23673] veth1_vlan: entered promiscuous mode [ 3153.151259][T24106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22491'. [ 3153.244402][T23673] veth0_macvtap: entered promiscuous mode [ 3153.282992][T23673] veth1_macvtap: entered promiscuous mode [ 3153.389013][T23673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3153.428900][T23673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3153.483249][ T1447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3153.486571][ T1447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3153.486615][ T1447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3153.486649][ T1447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3154.013988][T18178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3154.014008][T18178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3154.114551][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3154.114572][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3156.412277][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22506'. [ 3157.172365][T21138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3157.177596][T21138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3157.179147][T21138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3157.205128][T21138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3157.207486][T21138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3158.359737][T24163] chnl_net:caif_netlink_parms(): no params data found [ 3158.941525][ T9594] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3159.091626][ T9594] usb 3-1: Using ep0 maxpacket: 8 [ 3159.093944][ T9594] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3159.093970][ T9594] usb 3-1: config 179 has no interface number 0 [ 3159.094023][ T9594] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3159.094048][ T9594] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3159.094075][ T9594] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3159.094096][ T9594] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3159.094122][ T9594] usb 3-1: config 179 interface 65 has no altsetting 0 [ 3159.094155][ T9594] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3159.094175][ T9594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3159.282212][ T61] Bluetooth: hci4: command tx timeout [ 3159.364101][ T9594] usb 3-1: USB disconnect, device number 24 [ 3159.519623][T24205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3159.925327][T24194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3159.925361][T24194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3160.633383][T24194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3160.633416][T24194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3160.680075][T24163] bridge0: port 1(bridge_slave_0) entered blocking state [ 3160.680213][T24163] bridge0: port 1(bridge_slave_0) entered disabled state [ 3160.680394][T24163] bridge_slave_0: entered allmulticast mode [ 3160.685719][T24163] bridge_slave_0: entered promiscuous mode [ 3160.689131][T24163] bridge0: port 2(bridge_slave_1) entered blocking state [ 3160.715806][T24163] bridge0: port 2(bridge_slave_1) entered disabled state [ 3160.716044][T24163] bridge_slave_1: entered allmulticast mode [ 3160.718736][T24163] bridge_slave_1: entered promiscuous mode [ 3161.280369][T24194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3161.280403][T24194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3161.361622][ T61] Bluetooth: hci4: command tx timeout [ 3161.375292][T24163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3161.379409][T24163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3161.928661][T24194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3161.928695][T24194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3161.994914][T24163] team0: Port device team_slave_0 added [ 3162.117609][T24163] team0: Port device team_slave_1 added [ 3162.436674][T24163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3162.436691][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3162.436716][T24163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3162.439188][T24163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3162.439202][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3162.439227][T24163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3162.845750][T24163] hsr_slave_0: entered promiscuous mode [ 3162.859709][T24163] hsr_slave_1: entered promiscuous mode [ 3162.860751][T24163] debugfs: 'hsr0' already exists in 'hsr' [ 3162.860776][T24163] Cannot create hsr debugfs directory [ 3163.441633][ T61] Bluetooth: hci4: command tx timeout [ 3163.605734][T24194] bridge_slave_1: left allmulticast mode [ 3163.605758][T24194] bridge_slave_1: left promiscuous mode [ 3163.605954][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 3163.743882][T24194] bridge_slave_0: left allmulticast mode [ 3163.743911][T24194] bridge_slave_0: left promiscuous mode [ 3163.744195][T24194] bridge0: port 1(bridge_slave_0) entered disabled state [ 3165.521683][ T61] Bluetooth: hci4: command tx timeout [ 3167.523143][T24194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3167.617479][T24194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3167.656491][T24194] bond0 (unregistering): Released all slaves [ 3170.231654][T24194] hsr_slave_0: left promiscuous mode [ 3170.271942][T24194] hsr_slave_1: left promiscuous mode [ 3170.364163][T24194] veth1_macvtap: left promiscuous mode [ 3170.364277][T24194] veth0_macvtap: left promiscuous mode [ 3170.364541][T24194] veth1_vlan: left promiscuous mode [ 3170.364621][T24194] veth0_vlan: left promiscuous mode [ 3170.758350][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cbbfc00: rx timeout, send abort [ 3170.759069][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d092000: rx timeout, send abort [ 3170.759259][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cbbfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3170.759400][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d092000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3171.041646][T21138] Bluetooth: hci5: command 0x0406 tx timeout [ 3172.832054][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7c6800: rx timeout, send abort [ 3172.832216][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7c7800: rx timeout, send abort [ 3172.832408][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d7c6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3172.832551][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d7c7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3173.850753][T24376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22599'. [ 3174.924037][T24402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3175.131056][T24194] team0 (unregistering): Port device team_slave_1 removed [ 3175.442451][T24194] team0 (unregistering): Port device team_slave_0 removed [ 3179.004152][ C0] vkms_vblank_simulate: vblank timer overrun [ 3179.171708][ C0] vkms_vblank_simulate: vblank timer overrun [ 3179.237136][ C0] vkms_vblank_simulate: vblank timer overrun [ 3179.742091][T24406] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22615'. [ 3180.801713][T27420] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3180.810303][T24163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3180.876346][T24163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3180.951531][T27420] usb 3-1: Using ep0 maxpacket: 8 [ 3180.953896][ C0] vkms_vblank_simulate: vblank timer overrun [ 3180.953976][T27420] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3180.953997][T27420] usb 3-1: config 179 has no interface number 0 [ 3180.954043][T27420] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3180.954069][T27420] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3180.954093][T27420] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3180.954114][T27420] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3180.954138][T27420] usb 3-1: config 179 interface 65 has no altsetting 0 [ 3180.954170][T27420] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3180.954188][T27420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.966223][T24163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3181.166771][T27420] usb 3-1: USB disconnect, device number 25 [ 3181.173420][T24163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3181.578730][T24163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3181.617476][T24163] 8021q: adding VLAN 0 to HW filter on device team0 [ 3181.640798][T24194] bridge0: port 1(bridge_slave_0) entered blocking state [ 3181.644085][T24194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3181.648476][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 3181.648611][T24194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3182.250531][T24163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3182.363973][T24163] veth0_vlan: entered promiscuous mode [ 3182.391841][T24163] veth1_vlan: entered promiscuous mode [ 3182.466058][T24163] veth0_macvtap: entered promiscuous mode [ 3182.479963][T24163] veth1_macvtap: entered promiscuous mode [ 3182.508911][T24163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3182.550093][T24163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3182.572091][T24194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.572488][T24194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.572542][T24194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.572575][T24194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3182.662110][T24552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.021654][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3183.021670][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3183.118044][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3183.118064][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3183.771533][T24495] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 3183.939257][T24495] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3183.939318][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3183.939344][T24495] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3183.939366][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3183.939389][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3183.940919][T24495] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3183.940983][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3183.941010][T24495] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3183.941033][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3183.941057][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3183.942826][T24495] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3183.942877][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3183.942903][T24495] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3183.942926][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3183.942950][T24495] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3183.982899][T24495] usb 2-1: string descriptor 0 read error: -22 [ 3183.983050][T24495] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3183.983071][T24495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.092481][T24495] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3184.225054][ T9] usb 2-1: USB disconnect, device number 23 [ 3184.742518][ C0] vkms_vblank_simulate: vblank timer overrun [ 3184.759208][T21138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3184.780453][T21138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3184.800720][T21138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3184.851814][T21138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3184.861731][T21138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3185.478276][T24597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.886740][ T9378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.398405][ T9378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.940897][ T9378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.972936][ T61] Bluetooth: hci0: command tx timeout [ 3187.247056][ C0] vkms_vblank_simulate: vblank timer overrun [ 3187.348444][ T9378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3187.848599][T24589] chnl_net:caif_netlink_parms(): no params data found [ 3187.852274][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22703'. [ 3188.520962][ T9378] bridge_slave_1: left allmulticast mode [ 3188.520991][ T9378] bridge_slave_1: left promiscuous mode [ 3188.521230][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 3188.658634][ T9378] bridge_slave_0: left allmulticast mode [ 3188.658660][ T9378] bridge_slave_0: left promiscuous mode [ 3188.660936][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 3189.041618][ T61] Bluetooth: hci0: command tx timeout [ 3189.357726][ C1] vkms_vblank_simulate: vblank timer overrun [ 3189.762762][ C1] vkms_vblank_simulate: vblank timer overrun [ 3190.768839][T27420] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3190.921650][T27420] usb 5-1: Using ep0 maxpacket: 8 [ 3190.924006][T27420] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 3190.924030][T27420] usb 5-1: config 179 has no interface number 0 [ 3190.924081][T27420] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3190.924107][T27420] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3190.924132][T27420] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3190.924154][T27420] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3190.924178][T27420] usb 5-1: config 179 interface 65 has no altsetting 0 [ 3190.924210][T27420] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3190.924230][T27420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.121597][ T61] Bluetooth: hci0: command tx timeout [ 3191.208605][ C1] vkms_vblank_simulate: vblank timer overrun [ 3191.257519][ T9594] usb 5-1: USB disconnect, device number 20 [ 3191.380580][ C1] vkms_vblank_simulate: vblank timer overrun [ 3191.674603][ C1] vkms_vblank_simulate: vblank timer overrun [ 3191.946158][ C1] vkms_vblank_simulate: vblank timer overrun [ 3192.128136][ C1] vkms_vblank_simulate: vblank timer overrun [ 3192.225827][ C1] vkms_vblank_simulate: vblank timer overrun [ 3192.407396][ C1] vkms_vblank_simulate: vblank timer overrun [ 3192.492992][ C1] vkms_vblank_simulate: vblank timer overrun [ 3192.841245][ T9378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3192.902259][ T9378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3192.955030][ T9378] bond0 (unregistering): Released all slaves [ 3193.205295][ T61] Bluetooth: hci0: command tx timeout [ 3193.257799][ C1] vkms_vblank_simulate: vblank timer overrun [ 3193.464262][ C1] vkms_vblank_simulate: vblank timer overrun [ 3194.603068][T24589] bridge0: port 1(bridge_slave_0) entered blocking state [ 3194.603214][T24589] bridge0: port 1(bridge_slave_0) entered disabled state [ 3194.603442][T24589] bridge_slave_0: entered allmulticast mode [ 3194.606238][T24589] bridge_slave_0: entered promiscuous mode [ 3194.629951][T24589] bridge0: port 2(bridge_slave_1) entered blocking state [ 3194.630133][T24589] bridge0: port 2(bridge_slave_1) entered disabled state [ 3194.630356][T24589] bridge_slave_1: entered allmulticast mode [ 3194.644760][T24589] bridge_slave_1: entered promiscuous mode [ 3195.522320][T24589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3195.558236][T24589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3196.109636][T24589] team0: Port device team_slave_0 added [ 3196.351584][ T9378] hsr_slave_0: left promiscuous mode [ 3196.401669][ T9378] hsr_slave_1: left promiscuous mode [ 3196.403671][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3196.403698][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3196.468392][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3196.468420][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3196.670247][ T9378] veth1_macvtap: left promiscuous mode [ 3196.670362][ T9378] veth0_macvtap: left promiscuous mode [ 3196.670635][ T9378] veth1_vlan: left promiscuous mode [ 3196.670715][ T9378] veth0_vlan: left promiscuous mode [ 3201.276856][ T9378] team0 (unregistering): Port device team_slave_1 removed [ 3201.394594][ C1] vkms_vblank_simulate: vblank timer overrun [ 3201.492360][ C1] vkms_vblank_simulate: vblank timer overrun [ 3201.723252][ T9378] team0 (unregistering): Port device team_slave_0 removed [ 3202.391508][ C1] vkms_vblank_simulate: vblank timer overrun [ 3202.609549][T24807] tmpfs: Bad value for 'mpol' [ 3202.664431][ C1] vkms_vblank_simulate: vblank timer overrun [ 3204.540287][T24851] netlink: 112 bytes leftover after parsing attributes in process `syz.4.22795'. [ 3204.807201][ C1] vkms_vblank_simulate: vblank timer overrun [ 3204.819857][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.819915][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.895899][ C1] vkms_vblank_simulate: vblank timer overrun [ 3204.958362][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.026130][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.160990][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.227736][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.395090][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.457736][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.527875][ C1] vkms_vblank_simulate: vblank timer overrun [ 3205.726570][T24589] team0: Port device team_slave_1 added [ 3206.640285][T24908] syz.0.22819 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3206.960479][T24589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3206.960495][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3206.960521][T24589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3207.013428][T24589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3207.013444][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3207.013468][T24589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3207.426294][T24589] hsr_slave_0: entered promiscuous mode [ 3207.438073][T24589] hsr_slave_1: entered promiscuous mode [ 3207.439033][T24589] debugfs: 'hsr0' already exists in 'hsr' [ 3207.439058][T24589] Cannot create hsr debugfs directory [ 3207.640100][ T9594] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3207.781556][ T9594] usb 3-1: device descriptor read/64, error -71 [ 3208.024313][ C1] vkms_vblank_simulate: vblank timer overrun [ 3208.036051][ T9594] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3208.171551][ T9594] usb 3-1: device descriptor read/64, error -71 [ 3208.281903][ T9594] usb usb3-port1: attempt power cycle [ 3208.631591][ T9594] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3208.653364][ T9594] usb 3-1: device descriptor read/8, error -71 [ 3208.891624][ T9594] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3208.912510][ T9594] usb 3-1: device descriptor read/8, error -71 [ 3209.007625][ C1] vkms_vblank_simulate: vblank timer overrun [ 3209.021889][ T9594] usb usb3-port1: unable to enumerate USB device [ 3210.861916][T24589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3210.927808][ C1] vkms_vblank_simulate: vblank timer overrun [ 3210.957459][T25067] netlink: 112 bytes leftover after parsing attributes in process `syz.0.22880'. [ 3210.960320][T24589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3211.023257][T24589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3211.068687][T24589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3211.393801][T24589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3211.448594][T24589] 8021q: adding VLAN 0 to HW filter on device team0 [ 3211.479747][ T9378] bridge0: port 1(bridge_slave_0) entered blocking state [ 3211.484865][ T9378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3211.522916][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 3211.531635][ T9378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3211.697816][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d72a800: rx timeout, send abort [ 3211.698745][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca6e800: rx timeout, send abort [ 3211.698978][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d72a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3211.699135][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ca6e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3212.538570][T24589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3212.779340][T24589] veth0_vlan: entered promiscuous mode [ 3212.799789][T24589] veth1_vlan: entered promiscuous mode [ 3212.996692][T24589] veth0_macvtap: entered promiscuous mode [ 3213.031361][T24589] veth1_macvtap: entered promiscuous mode [ 3213.109980][T24589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3213.140358][T24589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3213.195977][T24194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3213.197012][T24194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3213.197051][T24194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3213.197091][T24194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3213.667753][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3213.667773][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3213.729527][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3213.729545][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3216.148061][T25187] netlink: 112 bytes leftover after parsing attributes in process `syz.4.22911'. [ 3218.449282][T25225] netlink: 112 bytes leftover after parsing attributes in process `syz.3.22925'. [ 3222.255778][T25283] netlink: 112 bytes leftover after parsing attributes in process `syz.4.22943'. [ 3222.581509][T25290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22957'. [ 3227.967527][T25364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22991'. [ 3233.433392][T25438] tmpfs: Bad value for 'mpol' [ 3234.486444][T25452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23035'. [ 3236.177093][T25496] netlink: 'syz.2.23055': attribute type 3 has an invalid length. [ 3236.177114][T25496] netlink: 'syz.2.23055': attribute type 1 has an invalid length. [ 3236.177126][T25496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23055'. [ 3241.417148][T25558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3243.751550][ T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 3243.915163][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3243.915223][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3243.915249][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3243.915273][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3243.915296][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3243.916711][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3243.916768][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3243.916793][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3243.916816][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3243.916840][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3243.918343][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3243.918398][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3243.918422][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3243.918446][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3243.918471][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3244.086718][ T9] usb 3-1: string descriptor 0 read error: -22 [ 3244.086865][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3244.086888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3244.132746][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3244.333077][ T9] usb 3-1: USB disconnect, device number 30 [ 3244.871939][T25601] netlink: 108 bytes leftover after parsing attributes in process `syz.4.23105'. [ 3246.546832][T25639] netlink: 'syz.3.23125': attribute type 3 has an invalid length. [ 3246.546853][T25639] netlink: 'syz.3.23125': attribute type 1 has an invalid length. [ 3246.546866][T25639] netlink: 224 bytes leftover after parsing attributes in process `syz.3.23125'. [ 3247.847449][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 3248.533128][T25664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23135'. [ 3248.783762][T25668] netlink: 'syz.1.23137': attribute type 3 has an invalid length. [ 3248.783784][T25668] netlink: 'syz.1.23137': attribute type 1 has an invalid length. [ 3248.783796][T25668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23137'. [ 3254.584837][T25721] netlink: 112 bytes leftover after parsing attributes in process `syz.1.23163'. [ 3255.470160][T25742] netlink: 112 bytes leftover after parsing attributes in process `syz.4.23175'. [ 3255.510250][T25744] netlink: 108 bytes leftover after parsing attributes in process `syz.1.23174'. [ 3256.266932][T25769] netlink: 112 bytes leftover after parsing attributes in process `syz.2.23188'. [ 3257.459801][T25813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3258.673231][T25872] netlink: 'syz.4.23236': attribute type 4 has an invalid length. [ 3258.843448][T25876] netlink: 112 bytes leftover after parsing attributes in process `syz.1.23237'. [ 3266.257924][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.257998][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.317416][T26008] tmpfs: Bad value for 'mpol' [ 3271.894387][T26087] tmpfs: Bad value for 'mpol' [ 3276.440146][T26123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3277.177410][T26129] netlink: 108 bytes leftover after parsing attributes in process `syz.2.23355'. [ 3277.347527][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23359'. [ 3278.349086][ C0] vkms_vblank_simulate: vblank timer overrun [ 3279.223282][T26135] team0 (unregistering): Port device team_slave_0 removed [ 3279.269161][T26135] team0 (unregistering): Port device team_slave_1 removed [ 3280.280907][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23393'. [ 3280.771600][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 3280.944109][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3280.944182][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3280.944208][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3280.944231][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3280.944254][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3280.945653][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3280.945727][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3280.945753][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3280.945779][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3280.945804][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3280.947286][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3280.947337][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3280.947363][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3280.947387][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3280.947413][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3280.982461][ T9] usb 3-1: string descriptor 0 read error: -22 [ 3280.982614][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3280.982635][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3281.051484][ C0] vkms_vblank_simulate: vblank timer overrun [ 3281.097947][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3281.231954][T26581] usb 3-1: USB disconnect, device number 31 [ 3281.415825][ C0] vkms_vblank_simulate: vblank timer overrun [ 3281.616618][ C0] vkms_vblank_simulate: vblank timer overrun [ 3281.715489][ C0] vkms_vblank_simulate: vblank timer overrun [ 3282.181765][T26213] team0 (unregistering): Port device team_slave_0 removed [ 3282.263981][T26213] team0 (unregistering): Port device team_slave_1 removed [ 3283.510439][T26285] netlink: 112 bytes leftover after parsing attributes in process `syz.4.23429'. [ 3283.688019][T21138] Bluetooth: hci4: command 0x0406 tx timeout [ 3286.018786][T26396] fuse: Unknown parameter 'grou' [ 3286.583972][T26423] fuse: Unknown parameter 'grou' [ 3287.595565][T26463] netlink: 'syz.4.23517': attribute type 4 has an invalid length. [ 3289.115679][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23545'. [ 3290.347859][T26559] netlink: 'syz.2.23546': attribute type 3 has an invalid length. [ 3290.347880][T26559] netlink: 244 bytes leftover after parsing attributes in process `syz.2.23546'. [ 3292.024454][T26598] netlink: 112 bytes leftover after parsing attributes in process `syz.2.23582'. [ 3294.242131][T16372] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3294.398587][T16372] usb 3-1: Using ep0 maxpacket: 8 [ 3294.401075][T16372] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3294.401099][T16372] usb 3-1: config 179 has no interface number 0 [ 3294.401151][T16372] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3294.401176][T16372] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3294.401212][T16372] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3294.401233][T16372] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3294.401259][T16372] usb 3-1: config 179 interface 65 has no altsetting 0 [ 3294.401292][T16372] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3294.401312][T16372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3294.621150][T16372] usb 3-1: USB disconnect, device number 32 [ 3295.353140][T26640] netlink: 'syz.2.23603': attribute type 4 has an invalid length. [ 3295.661573][ T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 3295.815373][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3295.815434][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3295.815458][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3295.815482][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3295.815507][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3295.816658][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3295.816713][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3295.816738][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3295.816762][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3295.816787][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3295.817940][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 3295.817993][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3295.818018][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3295.818041][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3295.818064][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3295.821378][ T9] usb 4-1: string descriptor 0 read error: -22 [ 3295.989083][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3295.989111][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.041765][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3296.226653][T26580] usb 4-1: USB disconnect, device number 29 [ 3298.581536][T24561] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 3298.744083][T24561] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3298.744166][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3298.744192][T24561] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3298.744216][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3298.744240][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3298.745841][T24561] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3298.745894][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3298.745920][T24561] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3298.745942][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3298.745966][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3298.747623][T24561] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3298.747671][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3298.747695][T24561] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3298.747718][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3298.747954][T24561] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3298.915216][T24561] usb 5-1: string descriptor 0 read error: -22 [ 3298.915375][T24561] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3298.915396][T24561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.956340][T24561] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3299.148980][T26581] usb 5-1: USB disconnect, device number 21 [ 3300.320354][T26705] netlink: 'syz.1.23634': attribute type 4 has an invalid length. [ 3302.070550][T26746] netlink: 'syz.0.23652': attribute type 3 has an invalid length. [ 3302.070571][T26746] netlink: 'syz.0.23652': attribute type 1 has an invalid length. [ 3302.070583][T26746] netlink: 232 bytes leftover after parsing attributes in process `syz.0.23652'. [ 3302.385650][T26750] fuse: Bad value for 'user_id' [ 3302.385668][T26750] fuse: Bad value for 'user_id' [ 3307.363066][T26822] netlink: 'syz.3.23692': attribute type 3 has an invalid length. [ 3307.363086][T26822] netlink: 244 bytes leftover after parsing attributes in process `syz.3.23692'. [ 3309.289920][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 3312.363926][T26891] tmpfs: Bad value for 'mpol' [ 3316.893583][T26985] fuse: Invalid rootmode [ 3318.087613][T27010] fuse: Bad value for 'rootmode' [ 3318.631042][T27032] netlink: 'syz.0.23792': attribute type 4 has an invalid length. [ 3318.760648][T27036] fuse: Bad value for 'rootmode' [ 3319.384314][T27067] fuse: Bad value for 'rootmode' [ 3320.613751][T26580] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3320.771523][T26580] usb 3-1: Using ep0 maxpacket: 8 [ 3320.773941][T26580] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3320.773965][T26580] usb 3-1: config 179 has no interface number 0 [ 3320.774011][T26580] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3320.774034][T26580] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3320.774059][T26580] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3320.774080][T26580] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3320.774104][T26580] usb 3-1: config 179 interface 65 has no altsetting 0 [ 3320.774135][T26580] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3320.774156][T26580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.094773][T26580] usb 3-1: USB disconnect, device number 33 [ 3327.689498][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.689565][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3344.779419][T27628] 9pnet_fd: Insufficient options for proto=fd [ 3346.475973][T27715] netlink: 'syz.1.24111': attribute type 22 has an invalid length. [ 3346.475998][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24111'. [ 3348.244825][T27786] netlink: 112 bytes leftover after parsing attributes in process `syz.1.24146'. [ 3349.999786][T27821] netlink: 'syz.3.24164': attribute type 1 has an invalid length. [ 3349.999806][T27821] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24164'. [ 3351.495263][T27843] netlink: 'syz.3.24175': attribute type 1 has an invalid length. [ 3351.495284][T27843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24175'. [ 3354.139717][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3354.158501][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3354.160213][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3354.163858][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3354.164609][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3355.335778][T24194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.009788][T24194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.241985][ T61] Bluetooth: hci1: command tx timeout [ 3356.514958][T24194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.024778][T24194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.590092][T27881] chnl_net:caif_netlink_parms(): no params data found [ 3358.059510][T24194] bridge_slave_1: left allmulticast mode [ 3358.059540][T24194] bridge_slave_1: left promiscuous mode [ 3358.059804][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 3358.119753][T27944] netlink: 'syz.1.24216': attribute type 4 has an invalid length. [ 3358.165775][T24194] bridge_slave_0: left allmulticast mode [ 3358.165803][T24194] bridge_slave_0: left promiscuous mode [ 3358.166058][T24194] bridge0: port 1(bridge_slave_0) entered disabled state [ 3358.322179][ T61] Bluetooth: hci1: command tx timeout [ 3358.945743][T27956] trusted_key: encrypted_key: master key parameter 'ufer:syz' is invalid [ 3360.403554][ T61] Bluetooth: hci1: command tx timeout [ 3361.530891][T24194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3361.604340][T24194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3361.655142][T24194] bond0 (unregistering): Released all slaves [ 3361.938342][ C1] vkms_vblank_simulate: vblank timer overrun [ 3362.481664][ T61] Bluetooth: hci1: command tx timeout [ 3362.572436][T28031] netlink: 'syz.4.24259': attribute type 4 has an invalid length. [ 3362.767936][T27881] bridge0: port 1(bridge_slave_0) entered blocking state [ 3362.768061][T27881] bridge0: port 1(bridge_slave_0) entered disabled state [ 3362.768285][T27881] bridge_slave_0: entered allmulticast mode [ 3362.770732][T27881] bridge_slave_0: entered promiscuous mode [ 3362.858136][T27881] bridge0: port 2(bridge_slave_1) entered blocking state [ 3362.858278][T27881] bridge0: port 2(bridge_slave_1) entered disabled state [ 3362.858507][T27881] bridge_slave_1: entered allmulticast mode [ 3362.873813][T27881] bridge_slave_1: entered promiscuous mode [ 3363.793167][T27881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3363.807450][T27881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3363.996239][T24194] hsr_slave_0: left promiscuous mode [ 3364.042303][T24194] hsr_slave_1: left promiscuous mode [ 3364.189361][T24194] veth1_macvtap: left promiscuous mode [ 3364.189469][T24194] veth0_macvtap: left promiscuous mode [ 3364.189735][T24194] veth1_vlan: left promiscuous mode [ 3364.189816][T24194] veth0_vlan: left promiscuous mode [ 3365.154987][ C1] vkms_vblank_simulate: vblank timer overrun [ 3365.253523][ C1] vkms_vblank_simulate: vblank timer overrun [ 3365.619746][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.085571][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.206639][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.457650][ C1] vkms_vblank_simulate: vblank timer overrun [ 3366.584973][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.008011][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.103504][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.595426][T28108] netlink: 'syz.3.24298': attribute type 8 has an invalid length. [ 3367.595451][T28108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24298'. [ 3367.856746][ C1] vkms_vblank_simulate: vblank timer overrun [ 3367.992291][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.104746][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.221211][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.438101][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.840970][ C1] vkms_vblank_simulate: vblank timer overrun [ 3368.937530][ C1] vkms_vblank_simulate: vblank timer overrun [ 3369.046873][T24194] team0 (unregistering): Port device team_slave_1 removed [ 3369.483057][T24194] team0 (unregistering): Port device team_slave_0 removed [ 3369.522109][ C1] vkms_vblank_simulate: vblank timer overrun [ 3369.634890][ C1] vkms_vblank_simulate: vblank timer overrun [ 3371.736340][ C1] vkms_vblank_simulate: vblank timer overrun [ 3373.957427][ C1] vkms_vblank_simulate: vblank timer overrun [ 3374.017814][ C1] vkms_vblank_simulate: vblank timer overrun [ 3374.136299][ C1] vkms_vblank_simulate: vblank timer overrun [ 3375.386413][T27881] team0: Port device team_slave_0 added [ 3375.405618][T27881] team0: Port device team_slave_1 added [ 3375.795115][T27881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3375.795132][T27881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3375.795157][T27881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3375.797517][T27881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3375.797538][T27881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3375.797562][T27881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3376.410698][T27881] hsr_slave_0: entered promiscuous mode [ 3376.422259][T27881] hsr_slave_1: entered promiscuous mode [ 3377.284389][T28240] netlink: 'syz.4.24355': attribute type 8 has an invalid length. [ 3377.284413][T28240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.24355'. [ 3379.644772][T27881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3379.733439][T27881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3379.778254][T27881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3379.873563][T27881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3380.338249][T27881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3380.417173][T27881] 8021q: adding VLAN 0 to HW filter on device team0 [ 3380.459121][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 3380.459276][T13502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3380.502478][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 3380.502677][T24194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3381.412552][T27881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3381.418391][T28336] overlayfs: failed to resolve './file0': -2 [ 3381.626078][T27881] veth0_vlan: entered promiscuous mode [ 3381.667086][T27881] veth1_vlan: entered promiscuous mode [ 3381.823526][T27881] veth0_macvtap: entered promiscuous mode [ 3381.872757][T27881] veth1_macvtap: entered promiscuous mode [ 3381.979621][T27881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3382.056189][T27881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3382.126402][T18793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3382.166513][T18793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3382.168808][T18793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3382.175121][T18793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3382.774108][T18793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3382.774128][T18793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3383.013822][ T9378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3383.013842][ T9378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3383.712834][T28397] netlink: 'syz.1.24393': attribute type 22 has an invalid length. [ 3383.712858][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24393'. [ 3384.287075][T28406] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3387.401678][T28466] netlink: 'syz.0.24439': attribute type 22 has an invalid length. [ 3387.401700][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24439'. [ 3389.129412][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.129481][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.054738][T28543] netlink: 536 bytes leftover after parsing attributes in process `syz.3.24476'. [ 3395.957757][T28639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24522'. [ 3396.314391][T28646] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3397.013292][T28661] tmpfs: Bad value for 'huge' [ 3403.979627][T28736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24563'. [ 3405.909107][T28799] netlink: 'syz.1.24595': attribute type 8 has an invalid length. [ 3405.909129][T28799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24595'. [ 3406.442413][T28816] netlink: 'syz.4.24604': attribute type 12 has an invalid length. [ 3406.442436][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24604'. [ 3406.532769][T28816] netlink: 'syz.4.24604': attribute type 12 has an invalid length. [ 3406.532793][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24604'. [ 3406.536150][T24194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3406.548186][T24194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3406.548244][T24194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3406.548275][T24194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3406.560682][T28820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.24606'. [ 3407.002945][T28829] netlink: 'syz.4.24610': attribute type 8 has an invalid length. [ 3407.002969][T28829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.24610'. [ 3407.552369][T28840] netlink: 'syz.4.24617': attribute type 4 has an invalid length. [ 3407.988040][T28854] netlink: 'syz.3.24623': attribute type 8 has an invalid length. [ 3407.988064][T28854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24623'. [ 3408.352073][T28868] tmpfs: Bad value for 'huge' [ 3408.541503][T28872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24631'. [ 3409.309960][T28882] netlink: 'syz.2.24636': attribute type 8 has an invalid length. [ 3409.309984][T28882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24636'. [ 3412.618731][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24643'. [ 3421.818691][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24717'. [ 3424.815954][T29087] netlink: 'syz.4.24726': attribute type 22 has an invalid length. [ 3424.815975][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24726'. [ 3426.545714][T21138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3426.552775][T21138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3426.562423][T21138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3426.575865][T21138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3426.583227][T21138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3427.661233][ T1451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3427.661267][ T1451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.136011][ T1451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3428.136045][ T1451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.481900][T29148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24766'. [ 3428.641547][ T61] Bluetooth: hci3: command tx timeout [ 3428.667081][ T1451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3428.667115][ T1451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.257572][ T1451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3429.257606][ T1451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.388559][T29110] chnl_net:caif_netlink_parms(): no params data found [ 3429.455033][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24777'. [ 3430.046602][T29110] bridge0: port 1(bridge_slave_0) entered blocking state [ 3430.046835][T29110] bridge0: port 1(bridge_slave_0) entered disabled state [ 3430.047066][T29110] bridge_slave_0: entered allmulticast mode [ 3430.074193][T29110] bridge_slave_0: entered promiscuous mode [ 3430.151908][T29110] bridge0: port 2(bridge_slave_1) entered blocking state [ 3430.152090][T29110] bridge0: port 2(bridge_slave_1) entered disabled state [ 3430.152320][T29110] bridge_slave_1: entered allmulticast mode [ 3430.155638][T29110] bridge_slave_1: entered promiscuous mode [ 3430.250124][T29194] netlink: 'syz.0.24784': attribute type 8 has an invalid length. [ 3430.250148][T29194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24784'. [ 3430.516808][T29110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3430.555533][T29110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3430.680179][T29203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24788'. [ 3430.721634][ T61] Bluetooth: hci3: command tx timeout [ 3431.009368][T29110] team0: Port device team_slave_0 added [ 3431.028199][T29110] team0: Port device team_slave_1 added [ 3431.035368][T29211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3431.035423][T29211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3431.193115][ T1451] bridge_slave_1: left allmulticast mode [ 3431.193142][ T1451] bridge_slave_1: left promiscuous mode [ 3431.193414][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 3431.293127][ T1451] bridge_slave_0: left allmulticast mode [ 3431.293155][ T1451] bridge_slave_0: left promiscuous mode [ 3431.293414][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 3431.914087][T29231] netlink: 'syz.2.24803': attribute type 4 has an invalid length. [ 3432.811633][ T61] Bluetooth: hci3: command tx timeout [ 3433.026003][T29242] netlink: 'syz.1.24808': attribute type 8 has an invalid length. [ 3433.026025][T29242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24808'. [ 3434.784364][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3434.862517][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3434.881653][ T61] Bluetooth: hci3: command tx timeout [ 3434.900400][ T1451] bond0 (unregistering): Released all slaves [ 3435.302707][T29110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3435.302723][T29110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3435.302749][T29110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3435.875400][T29110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3435.875416][T29110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3435.875439][T29110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3436.293187][T29297] netlink: 'syz.2.24832': attribute type 4 has an invalid length. [ 3436.892536][T29110] hsr_slave_0: entered promiscuous mode [ 3436.893899][T29110] hsr_slave_1: entered promiscuous mode [ 3436.894852][T29110] debugfs: 'hsr0' already exists in 'hsr' [ 3436.894875][T29110] Cannot create hsr debugfs directory [ 3437.783905][ T1451] hsr_slave_0: left promiscuous mode [ 3437.837424][ T1451] hsr_slave_1: left promiscuous mode [ 3437.838403][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3437.838429][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3437.893973][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3437.894002][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3438.038635][ T1451] veth1_macvtap: left promiscuous mode [ 3438.038750][ T1451] veth0_macvtap: left promiscuous mode [ 3438.039016][ T1451] veth1_vlan: left promiscuous mode [ 3438.039098][ T1451] veth0_vlan: left promiscuous mode [ 3442.273965][T29372] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3442.649950][T29376] tmpfs: Bad value for 'huge' [ 3444.542054][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24878'. [ 3447.120263][T29421] netlink: 'syz.3.24889': attribute type 13 has an invalid length. [ 3447.911761][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24899'. [ 3448.943040][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24913'. [ 3449.698690][T29110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3449.786576][T29110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3449.851050][T29110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3449.925150][T29110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3450.359724][T29110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3450.414780][T29110] 8021q: adding VLAN 0 to HW filter on device team0 [ 3450.466796][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 3450.466944][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3450.510397][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 3450.521941][T24194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3450.567624][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.567689][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.469203][T29110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3451.877974][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24925'. [ 3452.531319][T29110] veth0_vlan: entered promiscuous mode [ 3452.588726][T29110] veth1_vlan: entered promiscuous mode [ 3452.733682][T29110] veth0_macvtap: entered promiscuous mode [ 3452.750893][T29110] veth1_macvtap: entered promiscuous mode [ 3452.844758][T29110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3452.896721][T29110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3452.959202][ T1451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3452.969621][ T1451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3452.970556][ T1451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3452.970782][ T1451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3453.274373][T29581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24938'. [ 3453.484796][T24194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3453.484815][T24194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3453.686234][T24194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3453.686255][T24194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3454.063839][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24741'. [ 3457.857643][T29664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24971'. [ 3459.397688][T29688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24983'. [ 3460.733959][T29706] netlink: 'syz.2.24991': attribute type 13 has an invalid length. [ 3462.305305][T29737] netlink: 'syz.4.24995': attribute type 10 has an invalid length. [ 3462.305354][T29737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24995'. [ 3462.305395][T29737] dummy0: entered promiscuous mode [ 3462.306458][T29737] bridge0: port 3(dummy0) entered blocking state [ 3462.306615][T29737] bridge0: port 3(dummy0) entered disabled state [ 3462.306815][T29737] dummy0: entered allmulticast mode [ 3462.310575][T29737] bridge0: port 3(dummy0) entered blocking state [ 3462.310743][T29737] bridge0: port 3(dummy0) entered forwarding state [ 3463.453920][T29769] netlink: 'syz.2.25020': attribute type 10 has an invalid length. [ 3463.453951][T29769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25020'. [ 3463.453989][T29769] dummy0: entered promiscuous mode [ 3463.454949][T29769] bridge0: port 3(dummy0) entered blocking state [ 3463.456456][T29769] bridge0: port 3(dummy0) entered disabled state [ 3463.456664][T29769] dummy0: entered allmulticast mode [ 3463.467424][T29769] bridge0: port 3(dummy0) entered blocking state [ 3463.467600][T29769] bridge0: port 3(dummy0) entered forwarding state [ 3473.627401][T29912] tmpfs: Bad value for 'huge' [ 3474.203930][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25098'. [ 3474.464851][T29943] netlink: 112 bytes leftover after parsing attributes in process `syz.4.25101'. [ 3478.241530][T21138] Bluetooth: hci1: command 0x0406 tx timeout [ 3481.470363][T30042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3481.470425][T30042] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3482.195960][T30049] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3482.458297][T30059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25157'. [ 3486.409160][T30079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25168'. [ 3512.006943][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.007047][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3527.490267][T30109] tmpfs: Bad value for 'huge' [ 3528.735084][T30142] tmpfs: Bad value for 'huge' [ 3531.961586][T30213] netlink: 'syz.0.25226': attribute type 8 has an invalid length. [ 3531.961611][T30213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25226'. [ 3532.869838][T30233] netlink: 'syz.1.25235': attribute type 13 has an invalid length. [ 3533.143287][T21138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3533.146578][T21138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3533.147804][T21138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3533.171556][T21138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3533.179864][T21138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3534.419323][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3534.868278][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3535.282232][ T61] Bluetooth: hci2: command tx timeout [ 3535.329407][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3535.775398][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3536.346962][T30241] chnl_net:caif_netlink_parms(): no params data found [ 3536.802277][ T58] dummy0: left allmulticast mode [ 3536.802585][ T58] bridge0: port 3(dummy0) entered disabled state [ 3536.981916][ T58] bridge_slave_1: left allmulticast mode [ 3536.981945][ T58] bridge_slave_1: left promiscuous mode [ 3536.982221][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 3537.133091][ T58] bridge_slave_0: left allmulticast mode [ 3537.133121][ T58] bridge_slave_0: left promiscuous mode [ 3537.133360][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 3537.361609][ T61] Bluetooth: hci2: command tx timeout [ 3537.642540][T30288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25260'. [ 3539.451545][ T61] Bluetooth: hci2: command tx timeout [ 3540.612362][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3540.692277][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3540.745015][ T58] bond0 (unregistering): Released all slaves [ 3541.217636][T30333] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3541.527780][ T61] Bluetooth: hci2: command tx timeout [ 3541.711745][T30241] bridge0: port 1(bridge_slave_0) entered blocking state [ 3541.711904][T30241] bridge0: port 1(bridge_slave_0) entered disabled state [ 3541.712138][T30241] bridge_slave_0: entered allmulticast mode [ 3541.714945][T30241] bridge_slave_0: entered promiscuous mode [ 3541.718597][T30241] bridge0: port 2(bridge_slave_1) entered blocking state [ 3541.718818][T30241] bridge0: port 2(bridge_slave_1) entered disabled state [ 3541.719010][T30241] bridge_slave_1: entered allmulticast mode [ 3541.768745][T30241] bridge_slave_1: entered promiscuous mode [ 3542.617840][T30241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3542.716624][T30241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3543.073777][ T58] hsr_slave_0: left promiscuous mode [ 3543.101570][ T58] hsr_slave_1: left promiscuous mode [ 3543.102561][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3543.102587][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3543.165732][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3543.165759][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3543.303537][ T58] veth1_macvtap: left promiscuous mode [ 3543.303650][ T58] veth0_macvtap: left promiscuous mode [ 3543.303928][ T58] veth1_vlan: left promiscuous mode [ 3543.304008][ T58] veth0_vlan: left promiscuous mode [ 3544.989012][T30342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25283'. [ 3545.699019][T30354] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 3549.936836][T21138] Bluetooth: hci3: command 0x0406 tx timeout [ 3551.329116][T30408] netlink: 'syz.1.25314': attribute type 8 has an invalid length. [ 3551.329140][T30408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25314'. [ 3551.493706][T30241] team0: Port device team_slave_0 added [ 3551.496880][T30241] team0: Port device team_slave_1 added [ 3551.977434][T30241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3551.977451][T30241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3551.977476][T30241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3552.027722][T30241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3552.027752][T30241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3552.027779][T30241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3552.515306][T30241] hsr_slave_0: entered promiscuous mode [ 3552.516695][T30241] hsr_slave_1: entered promiscuous mode [ 3552.517662][T30241] debugfs: 'hsr0' already exists in 'hsr' [ 3552.517692][T30241] Cannot create hsr debugfs directory [ 3552.950636][T30430] netlink: 112 bytes leftover after parsing attributes in process `syz.3.25322'. [ 3555.548706][T30241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3555.597881][T30241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3555.602211][T30484] netlink: 'syz.4.25336': attribute type 8 has an invalid length. [ 3555.602231][T30484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25336'. [ 3555.676419][T30241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3555.792763][T30241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3556.221180][T30241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3556.335012][T30241] 8021q: adding VLAN 0 to HW filter on device team0 [ 3556.348909][T25887] bridge0: port 1(bridge_slave_0) entered blocking state [ 3556.352134][T25887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3556.407785][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 3556.407975][ T9378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3557.337409][T30241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3557.613071][T30241] veth0_vlan: entered promiscuous mode [ 3557.620918][T30241] veth1_vlan: entered promiscuous mode [ 3557.861390][T30241] veth0_macvtap: entered promiscuous mode [ 3557.889333][T30241] veth1_macvtap: entered promiscuous mode [ 3558.105284][T30241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3558.138031][T30241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3558.181317][ T9378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.182587][ T9378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.185482][ T9378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.185856][ T9378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3558.766757][T18178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3558.766778][T18178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3558.963280][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3558.963301][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3559.915562][T30600] netlink: 'syz.2.25371': attribute type 22 has an invalid length. [ 3559.915584][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25371'. [ 3560.702668][T21138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3560.711226][T21138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3560.741922][T21138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3560.776465][T21138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3560.782803][T21138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3560.841367][T30612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25373'. [ 3561.123828][T30621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25375'. [ 3562.242599][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3562.790687][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3562.881678][ T61] Bluetooth: hci5: command tx timeout [ 3563.240749][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3563.625084][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3563.977209][T30608] chnl_net:caif_netlink_parms(): no params data found [ 3564.961581][ T61] Bluetooth: hci5: command tx timeout [ 3564.966258][T30608] bridge0: port 1(bridge_slave_0) entered blocking state [ 3564.966470][T30608] bridge0: port 1(bridge_slave_0) entered disabled state [ 3564.966691][T30608] bridge_slave_0: entered allmulticast mode [ 3565.012412][T30608] bridge_slave_0: entered promiscuous mode [ 3565.023381][T30608] bridge0: port 2(bridge_slave_1) entered blocking state [ 3565.024578][T30608] bridge0: port 2(bridge_slave_1) entered disabled state [ 3565.024808][T30608] bridge_slave_1: entered allmulticast mode [ 3565.041254][T30608] bridge_slave_1: entered promiscuous mode [ 3565.623659][ T58] bridge_slave_1: left allmulticast mode [ 3565.623688][ T58] bridge_slave_1: left promiscuous mode [ 3565.623941][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 3565.772693][ T58] bridge_slave_0: left allmulticast mode [ 3565.772718][ T58] bridge_slave_0: left promiscuous mode [ 3565.772928][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 3567.041795][ T61] Bluetooth: hci5: command tx timeout [ 3569.121560][ T61] Bluetooth: hci5: command tx timeout [ 3569.384563][T30718] netlink: 100 bytes leftover after parsing attributes in process `syz.4.25409'. [ 3570.137855][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3570.232204][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3570.317454][ T58] bond0 (unregistering): Released all slaves [ 3570.415669][T30608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3570.479937][T30608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3570.925773][T30608] team0: Port device team_slave_0 added [ 3570.929616][T30608] team0: Port device team_slave_1 added [ 3571.546482][T30743] tmpfs: Bad value for 'huge' [ 3571.976281][T30608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3571.976296][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3571.976318][T30608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3571.992147][T30608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3571.992163][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3571.992185][T30608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3572.983563][T30608] hsr_slave_0: entered promiscuous mode [ 3572.988965][T30608] hsr_slave_1: entered promiscuous mode [ 3572.989971][T30608] debugfs: 'hsr0' already exists in 'hsr' [ 3572.989994][T30608] Cannot create hsr debugfs directory [ 3573.266069][ T58] hsr_slave_0: left promiscuous mode [ 3573.337231][ T58] hsr_slave_1: left promiscuous mode [ 3573.338222][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3573.338247][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3573.422596][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3573.422625][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3573.449408][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.449480][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.645909][ T58] veth1_macvtap: left promiscuous mode [ 3573.646022][ T58] veth0_macvtap: left promiscuous mode [ 3573.646286][ T58] veth1_vlan: left promiscuous mode [ 3573.646371][ T58] veth0_vlan: left promiscuous mode [ 3574.756984][T30784] netlink: 84 bytes leftover after parsing attributes in process `syz.4.25434'. [ 3574.757022][T30784] nbd: must specify at least one socket [ 3575.792634][T30796] tmpfs: Bad value for 'huge' [ 3576.790840][T30817] tmpfs: Bad value for 'huge' [ 3577.950220][T30844] tmpfs: Bad value for 'huge' [ 3578.427242][T30854] netlink: 'syz.0.25468': attribute type 10 has an invalid length. [ 3578.427275][T30854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25468'. [ 3579.055904][ T58] team0 (unregistering): Port device team_slave_1 removed [ 3579.532538][ T58] team0 (unregistering): Port device team_slave_0 removed [ 3583.429685][T30854] dummy0: entered promiscuous mode [ 3583.430429][T30854] bridge0: port 3(dummy0) entered blocking state [ 3583.430649][T30854] bridge0: port 3(dummy0) entered disabled state [ 3583.430911][T30854] dummy0: entered allmulticast mode [ 3583.446974][T30854] bridge0: port 3(dummy0) entered blocking state [ 3583.447128][T30854] bridge0: port 3(dummy0) entered forwarding state [ 3584.530472][T30920] tmpfs: Bad value for 'huge' [ 3584.727024][T30927] netlink: 112 bytes leftover after parsing attributes in process `syz.3.25499'. [ 3584.971690][T30938] netlink: 'syz.0.25501': attribute type 8 has an invalid length. [ 3584.971712][T30938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25501'. [ 3585.591161][T30962] netlink: 112 bytes leftover after parsing attributes in process `syz.0.25511'. [ 3586.953402][T30608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3587.081481][T30608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3587.116537][T30608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3587.236984][T30608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3587.614383][T30608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3587.737299][T30608] 8021q: adding VLAN 0 to HW filter on device team0 [ 3587.794848][T18178] bridge0: port 1(bridge_slave_0) entered blocking state [ 3587.795047][T18178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3587.797472][T18178] bridge0: port 2(bridge_slave_1) entered blocking state [ 3587.797616][T18178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3588.666923][T30608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3588.977911][T30608] veth0_vlan: entered promiscuous mode [ 3589.052845][T30608] veth1_vlan: entered promiscuous mode [ 3589.243235][T30608] veth0_macvtap: entered promiscuous mode [ 3589.253889][T30608] veth1_macvtap: entered promiscuous mode [ 3589.349792][T30608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3589.404476][T30608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3589.475491][ T4104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3589.475759][ T4104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3589.475984][ T4104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3589.476020][ T4104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3590.154141][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3590.154159][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3590.269406][ T61] Bluetooth: Frame is too long (len 16, expected len 4) [ 3590.351861][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3590.351879][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3590.942493][T31069] netlink: 'syz.4.25541': attribute type 22 has an invalid length. [ 3590.942515][T31069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25541'. [ 3591.764529][T31094] netlink: 'syz.0.25537': attribute type 12 has an invalid length. [ 3591.764552][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25537'. [ 3591.788154][T31094] netlink: 'syz.0.25537': attribute type 12 has an invalid length. [ 3591.788176][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25537'. [ 3591.810360][T25887] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3591.825228][T24194] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3591.825275][T24194] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3591.825309][T24194] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3592.682095][T31115] can: request_module (can-proto-0) failed. [ 3592.731056][T31124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25555'. [ 3593.494883][T31144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25563'. [ 3593.533881][T31144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3595.397973][T31185] netlink: 'syz.4.25583': attribute type 12 has an invalid length. [ 3595.397995][T31185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25583'. [ 3595.443735][T18178] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3595.444018][T18178] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3595.444054][T18178] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3595.444087][T18178] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3595.444319][T31185] netlink: 'syz.4.25583': attribute type 12 has an invalid length. [ 3595.444334][T31185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25583'. [ 3595.872037][T31197] netlink: 'syz.4.25589': attribute type 8 has an invalid length. [ 3595.872058][T31197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25589'. [ 3597.004674][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25598'. [ 3597.284003][T31223] netlink: 'syz.4.25601': attribute type 8 has an invalid length. [ 3597.284026][T31223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25601'. [ 3600.027812][T31244] netlink: 'syz.3.25612': attribute type 8 has an invalid length. [ 3600.027835][T31244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25612'. [ 3600.253285][T31248] tmpfs: Bad value for 'huge' [ 3601.689977][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25625'. [ 3601.805086][T31272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3604.632361][T31320] 9pnet_fd: Insufficient options for proto=fd [ 3605.311197][T31332] tmpfs: Bad value for 'huge' [ 3606.761378][T31360] can: request_module (can-proto-0) failed. [ 3612.889629][T31430] netlink: 112 bytes leftover after parsing attributes in process `syz.1.25697'. [ 3618.582138][T31507] overlayfs: missing 'lowerdir' [ 3621.396631][T31562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25761'. [ 3625.152374][T31635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25792'. [ 3627.751262][T31683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25815'. [ 3629.121740][ T8824] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3629.311888][ T8824] usb 3-1: Using ep0 maxpacket: 8 [ 3629.314570][ T8824] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3629.314596][ T8824] usb 3-1: config 0 has no interface number 0 [ 3629.314648][ T8824] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3629.314671][ T8824] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3629.314695][ T8824] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3629.314719][ T8824] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3629.314760][ T8824] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3629.314780][ T8824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3629.325236][ T8824] usb 3-1: config 0 descriptor?? [ 3629.606604][ T8824] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3629.721745][ T8824] usb 3-1: USB disconnect, device number 34 [ 3629.759293][ T8824] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3630.092031][ T8824] ================================================================== [ 3630.092048][ T8824] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 3630.092121][ T8824] Read of size 8 at addr ffffc90016c49008 by task kworker/0:2/8824 [ 3630.092136][ T8824] [ 3630.092159][ T8824] CPU: 0 UID: 0 PID: 8824 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3630.092179][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3630.092191][ T8824] Workqueue: usb_hub_wq hub_event [ 3630.092319][ T8824] Call Trace: [ 3630.092330][ T8824] [ 3630.092340][ T8824] dump_stack_lvl+0x189/0x250 [ 3630.092418][ T8824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3630.092440][ T8824] ? __pfx__printk+0x10/0x10 [ 3630.092464][ T8824] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 3630.092557][ T8824] ? __virt_addr_valid+0xdc/0x5c0 [ 3630.092601][ T8824] ? __virt_addr_valid+0xdc/0x5c0 [ 3630.092623][ T8824] print_report+0xca/0x240 [ 3630.092644][ T8824] ? __list_add_valid_or_report+0x4e/0x130 [ 3630.092669][ T8824] kasan_report+0x118/0x150 [ 3630.092714][ T8824] ? __list_add_valid_or_report+0x4e/0x130 [ 3630.092737][ T8824] __list_add_valid_or_report+0x4e/0x130 [ 3630.092758][ T8824] kcov_remote_stop+0x52d/0x660 [ 3630.092800][ T8824] hub_event+0x45d2/0x4a20 [ 3630.092830][ T8824] ? do_raw_spin_lock+0x121/0x290 [ 3630.092861][ T8824] ? register_lock_class+0x51/0x320 [ 3630.092888][ T8824] ? __pfx_hub_event+0x10/0x10 [ 3630.092906][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.092938][ T8824] ? _raw_spin_unlock_irq+0x23/0x50 [ 3630.092959][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.092977][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.092997][ T8824] process_scheduled_works+0xae1/0x17b0 [ 3630.093028][ T8824] ? __pfx_process_scheduled_works+0x10/0x10 [ 3630.093054][ T8824] worker_thread+0x8a0/0xda0 [ 3630.093075][ T8824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3630.093100][ T8824] ? __kthread_parkme+0x7b/0x200 [ 3630.093125][ T8824] kthread+0x711/0x8a0 [ 3630.093148][ T8824] ? __pfx_worker_thread+0x10/0x10 [ 3630.093167][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.093186][ T8824] ? rt_spin_unlock+0x150/0x200 [ 3630.093206][ T8824] ? rt_spin_unlock+0x161/0x200 [ 3630.093223][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.093244][ T8824] ret_from_fork+0x4bc/0x870 [ 3630.093270][ T8824] ? __pfx_ret_from_fork+0x10/0x10 [ 3630.093293][ T8824] ? __switch_to_asm+0x39/0x70 [ 3630.093309][ T8824] ? __switch_to_asm+0x33/0x70 [ 3630.093325][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.093346][ T8824] ret_from_fork_asm+0x1a/0x30 [ 3630.093370][ T8824] [ 3630.093378][ T8824] [ 3630.093383][ T8824] The buggy address belongs to a vmalloc virtual mapping [ 3630.093401][ T8824] Memory state around the buggy address: [ 3630.093416][ T8824] ffffc90016c48f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3630.093427][ T8824] ffffc90016c48f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3630.093440][ T8824] >ffffc90016c49000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3630.093452][ T8824] ^ [ 3630.093462][ T8824] ffffc90016c49080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3630.093473][ T8824] ffffc90016c49100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3630.093482][ T8824] ================================================================== [ 3630.093500][ T8824] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3630.093514][ T8824] CPU: 0 UID: 0 PID: 8824 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3630.093534][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3630.093546][ T8824] Workqueue: usb_hub_wq hub_event [ 3630.093564][ T8824] Call Trace: [ 3630.093571][ T8824] [ 3630.093579][ T8824] dump_stack_lvl+0x99/0x250 [ 3630.093601][ T8824] ? __asan_memcpy+0x40/0x70 [ 3630.093619][ T8824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3630.093642][ T8824] ? __pfx__printk+0x10/0x10 [ 3630.093672][ T8824] vpanic+0x237/0x6d0 [ 3630.093688][ T8824] ? __pfx_vpanic+0x10/0x10 [ 3630.093709][ T8824] panic+0xb9/0xc0 [ 3630.093724][ T8824] ? __pfx_panic+0x10/0x10 [ 3630.093741][ T8824] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3630.093763][ T8824] ? lockdep_hardirqs_on+0x9c/0x150 [ 3630.093831][ T8824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3630.093853][ T8824] ? __list_add_valid_or_report+0x4e/0x130 [ 3630.093870][ T8824] check_panic_on_warn+0x89/0xb0 [ 3630.093886][ T8824] ? __list_add_valid_or_report+0x4e/0x130 [ 3630.093905][ T8824] end_report+0x78/0x160 [ 3630.093925][ T8824] kasan_report+0x129/0x150 [ 3630.093948][ T8824] ? __list_add_valid_or_report+0x4e/0x130 [ 3630.093971][ T8824] __list_add_valid_or_report+0x4e/0x130 [ 3630.093993][ T8824] kcov_remote_stop+0x52d/0x660 [ 3630.094017][ T8824] hub_event+0x45d2/0x4a20 [ 3630.094047][ T8824] ? do_raw_spin_lock+0x121/0x290 [ 3630.094068][ T8824] ? register_lock_class+0x51/0x320 [ 3630.094096][ T8824] ? __pfx_hub_event+0x10/0x10 [ 3630.094114][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.094135][ T8824] ? _raw_spin_unlock_irq+0x23/0x50 [ 3630.094155][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.094173][ T8824] ? process_scheduled_works+0x9ef/0x17b0 [ 3630.094192][ T8824] process_scheduled_works+0xae1/0x17b0 [ 3630.094220][ T8824] ? __pfx_process_scheduled_works+0x10/0x10 [ 3630.094247][ T8824] worker_thread+0x8a0/0xda0 [ 3630.094269][ T8824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3630.094294][ T8824] ? __kthread_parkme+0x7b/0x200 [ 3630.094319][ T8824] kthread+0x711/0x8a0 [ 3630.094341][ T8824] ? __pfx_worker_thread+0x10/0x10 [ 3630.094359][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.094380][ T8824] ? rt_spin_unlock+0x150/0x200 [ 3630.094400][ T8824] ? rt_spin_unlock+0x161/0x200 [ 3630.094417][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.094439][ T8824] ret_from_fork+0x4bc/0x870 [ 3630.094459][ T8824] ? __pfx_ret_from_fork+0x10/0x10 [ 3630.094481][ T8824] ? __switch_to_asm+0x39/0x70 [ 3630.094498][ T8824] ? __switch_to_asm+0x33/0x70 [ 3630.094514][ T8824] ? __pfx_kthread+0x10/0x10 [ 3630.094536][ T8824] ret_from_fork_asm+0x1a/0x30 [ 3630.094560][ T8824] [ 3630.094893][ T8824] Kernel Offset: disabled