last executing test programs: 13.072619175s ago: executing program 1 (id=2249): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8804) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10", 0x5a, 0x0, 0x0, 0x0) 12.928308115s ago: executing program 1 (id=2251): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) 12.805618617s ago: executing program 1 (id=2252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) 12.578615989s ago: executing program 1 (id=2253): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38}}) 10.710169384s ago: executing program 1 (id=2258): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x3, &(0x7f0000000580)=[{0x4}, {0x7, 0x20, 0xf1}, {0x6, 0x1}]}) 9.990620888s ago: executing program 1 (id=2259): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8804) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10", 0x5a, 0x0, 0x0, 0x0) 3.918171961s ago: executing program 0 (id=2290): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38}}) 3.820147486s ago: executing program 0 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r2, 0x3, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000080) 2.621895894s ago: executing program 3 (id=2297): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000080)='@/\xf3*##\'Z\x00', &(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100), 0x0, &(0x7f0000004900)) 2.413003681s ago: executing program 3 (id=2299): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904"], 0x0) 1.59042905s ago: executing program 0 (id=2300): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, 0x0, 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ff"]) 1.499190551s ago: executing program 2 (id=2301): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000440)={0xa, 0xfffe, 0x80000001, @empty, 0x10401}, 0x1c) 1.470304044s ago: executing program 0 (id=2302): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866600fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x54000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.33466804s ago: executing program 2 (id=2303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.334490948s ago: executing program 0 (id=2304): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.176597374s ago: executing program 2 (id=2305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10051, 0x0) 926.409849ms ago: executing program 3 (id=2306): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0xa0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4696}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffa44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x4014000) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 698.083214ms ago: executing program 3 (id=2307): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r6, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa}]]}, 0x38}}, 0x4) 466.498095ms ago: executing program 2 (id=2308): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38}}) 358.177317ms ago: executing program 3 (id=2309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) 321.175385ms ago: executing program 0 (id=2310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open_tree(0xffffffffffffffff, 0x0, 0x89901) 270.623805ms ago: executing program 2 (id=2311): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000080000000018000000000000002900000037"], 0x30}, 0x2000) 66.511385ms ago: executing program 2 (id=2312): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 0s ago: executing program 3 (id=2313): unshare(0x20000400) syz_clone(0x2a809000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 126.111038][ T5834] cgroup: Unknown subsys name 'net' [ 126.247971][ T5834] cgroup: Unknown subsys name 'cpuset' [ 126.256668][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 127.712060][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.747799][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754719][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.184254][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.197117][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.205413][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.212959][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.215099][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.221217][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.235664][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.236306][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.244019][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.258949][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.266702][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.267431][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.273960][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.282813][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.288230][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.296350][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.310710][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.318181][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.319361][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.339854][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.847222][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 134.921852][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 134.957299][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 135.043521][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 135.143060][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.150860][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.158372][ T5845] bridge_slave_0: entered allmulticast mode [ 135.165620][ T5845] bridge_slave_0: entered promiscuous mode [ 135.224612][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.231775][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.239393][ T5845] bridge_slave_1: entered allmulticast mode [ 135.246493][ T5845] bridge_slave_1: entered promiscuous mode [ 135.253916][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.261112][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.268284][ T5843] bridge_slave_0: entered allmulticast mode [ 135.275983][ T5843] bridge_slave_0: entered promiscuous mode [ 135.293397][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.300740][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.308376][ T5844] bridge_slave_0: entered allmulticast mode [ 135.315559][ T5844] bridge_slave_0: entered promiscuous mode [ 135.332845][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.340071][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.347347][ T5843] bridge_slave_1: entered allmulticast mode [ 135.354610][ T5843] bridge_slave_1: entered promiscuous mode [ 135.372161][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.379452][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.387267][ T5844] bridge_slave_1: entered allmulticast mode [ 135.394251][ T5844] bridge_slave_1: entered promiscuous mode [ 135.447264][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.468487][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.476004][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.483184][ T5846] bridge_slave_0: entered allmulticast mode [ 135.490626][ T5846] bridge_slave_0: entered promiscuous mode [ 135.511871][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.537820][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.549300][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.558738][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.566111][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.573300][ T5846] bridge_slave_1: entered allmulticast mode [ 135.580436][ T5846] bridge_slave_1: entered promiscuous mode [ 135.589968][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.638026][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.664161][ T5845] team0: Port device team_slave_0 added [ 135.704910][ T5845] team0: Port device team_slave_1 added [ 135.712412][ T5843] team0: Port device team_slave_0 added [ 135.720938][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.739037][ T5844] team0: Port device team_slave_0 added [ 135.757832][ T5843] team0: Port device team_slave_1 added [ 135.765984][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.777191][ T5844] team0: Port device team_slave_1 added [ 135.853805][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.860938][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.886873][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.910341][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.917446][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.943429][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.957439][ T5846] team0: Port device team_slave_0 added [ 135.963861][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.971387][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.997390][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.009267][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.016272][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.042591][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.054267][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.061378][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.087352][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.100609][ T5846] team0: Port device team_slave_1 added [ 136.118035][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.125006][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.151019][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.189421][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.196422][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.222868][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.253340][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.260510][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.286643][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.345165][ T5858] Bluetooth: hci2: command tx timeout [ 136.347448][ T5844] hsr_slave_0: entered promiscuous mode [ 136.350801][ T5858] Bluetooth: hci0: command tx timeout [ 136.357767][ T5844] hsr_slave_1: entered promiscuous mode [ 136.396101][ T5845] hsr_slave_0: entered promiscuous mode [ 136.402408][ T5845] hsr_slave_1: entered promiscuous mode [ 136.409269][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 136.415105][ T5845] Cannot create hsr debugfs directory [ 136.424827][ T5851] Bluetooth: hci3: command tx timeout [ 136.430543][ T5858] Bluetooth: hci1: command tx timeout [ 136.475626][ T5846] hsr_slave_0: entered promiscuous mode [ 136.481902][ T5846] hsr_slave_1: entered promiscuous mode [ 136.488523][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 136.494252][ T5846] Cannot create hsr debugfs directory [ 136.505107][ T5843] hsr_slave_0: entered promiscuous mode [ 136.511445][ T5843] hsr_slave_1: entered promiscuous mode [ 136.517830][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 136.523561][ T5843] Cannot create hsr debugfs directory [ 136.956566][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.970086][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.980870][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.999141][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.050217][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.063768][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.082859][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.093432][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.180294][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.191833][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.205237][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.216465][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.310324][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.324137][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.347643][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.358649][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.396899][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.450529][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.480841][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.488049][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.501349][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.508532][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.562455][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.597361][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.630645][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.653686][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.660883][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.683713][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.706174][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.713327][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.722431][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.729540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.740577][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.747716][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.811104][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.937141][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.984157][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.991371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.052689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.059901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.181998][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.265035][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.351671][ T5844] veth0_vlan: entered promiscuous mode [ 138.400404][ T5844] veth1_vlan: entered promiscuous mode [ 138.425098][ T5858] Bluetooth: hci0: command tx timeout [ 138.430520][ T5851] Bluetooth: hci2: command tx timeout [ 138.452121][ T5845] veth0_vlan: entered promiscuous mode [ 138.481435][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.494214][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.503263][ T5845] veth1_vlan: entered promiscuous mode [ 138.509161][ T5851] Bluetooth: hci3: command tx timeout [ 138.515391][ T5858] Bluetooth: hci1: command tx timeout [ 138.542659][ T5844] veth0_macvtap: entered promiscuous mode [ 138.553479][ T5844] veth1_macvtap: entered promiscuous mode [ 138.591791][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.617867][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.633502][ T3537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.651377][ T3537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.660643][ T3537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.679222][ T5843] veth0_vlan: entered promiscuous mode [ 138.696344][ T3537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.708077][ T5845] veth0_macvtap: entered promiscuous mode [ 138.739730][ T5846] veth0_vlan: entered promiscuous mode [ 138.746853][ T5845] veth1_macvtap: entered promiscuous mode [ 138.757874][ T5843] veth1_vlan: entered promiscuous mode [ 138.779489][ T5846] veth1_vlan: entered promiscuous mode [ 138.840586][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.861972][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.874325][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.884270][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.929503][ T3537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.938927][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.960184][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.963405][ T3537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.975710][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.979240][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.999697][ T5846] veth0_macvtap: entered promiscuous mode [ 139.016808][ T5843] veth0_macvtap: entered promiscuous mode [ 139.028392][ T5846] veth1_macvtap: entered promiscuous mode [ 139.052199][ T5843] veth1_macvtap: entered promiscuous mode [ 139.113250][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.114160][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 139.169637][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.182824][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.186255][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.202820][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.253790][ T2990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.270749][ T2990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.298413][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.311819][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.327282][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.342490][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.351188][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.390806][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.442329][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.475796][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.485307][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.577699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.605223][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.713270][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.722541][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.740886][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.757222][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.881807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.916759][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.507399][ T5851] Bluetooth: hci0: command tx timeout [ 140.513277][ T5858] Bluetooth: hci2: command tx timeout [ 140.587666][ T5858] Bluetooth: hci3: command tx timeout [ 140.594309][ T5851] Bluetooth: hci1: command tx timeout [ 141.400012][ T5995] process 'syz.1.27' launched './file0' with NULL argv: empty string added [ 141.684872][ T48] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 141.868596][ T48] usb 4-1: config 0 has no interfaces? [ 141.874208][ T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 141.924863][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.966659][ T48] usb 4-1: config 0 descriptor?? [ 142.185202][ T48] usb 4-1: USB disconnect, device number 2 [ 142.584841][ T5858] Bluetooth: hci2: command tx timeout [ 142.590356][ T5851] Bluetooth: hci0: command tx timeout [ 142.664895][ T5851] Bluetooth: hci3: command tx timeout [ 142.670333][ T5851] Bluetooth: hci1: command tx timeout [ 150.214868][ T870] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 150.316185][ T6164] netlink: 92 bytes leftover after parsing attributes in process `syz.1.108'. [ 150.386710][ T870] usb 4-1: config 0 has no interfaces? [ 150.392475][ T870] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 150.423960][ T870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.465324][ T870] usb 4-1: config 0 descriptor?? [ 150.680583][ T870] usb 4-1: USB disconnect, device number 3 [ 151.625831][ T6199] netlink: 92 bytes leftover after parsing attributes in process `syz.3.126'. [ 151.932812][ T6212] 9p: Bad value for 'wfdno' [ 154.153301][ T6267] netlink: 92 bytes leftover after parsing attributes in process `syz.1.160'. [ 155.489190][ T6285] 9p: Bad value for 'rfdno' [ 158.848306][ T6315] 9p: Bad value for 'rfdno' [ 159.018474][ T6317] netlink: 92 bytes leftover after parsing attributes in process `syz.0.184'. [ 163.927798][ T6393] netlink: 92 bytes leftover after parsing attributes in process `syz.0.222'. [ 176.314512][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 176.496311][ T10] usb 4-1: config 0 has no interfaces? [ 176.502038][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 176.511640][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.532679][ T10] usb 4-1: config 0 descriptor?? [ 176.755475][ T10] usb 4-1: USB disconnect, device number 4 [ 194.191092][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.296540][ T6993] x_tables: duplicate underflow at hook 1 [ 198.661033][ T7002] netlink: 'syz.0.506': attribute type 25 has an invalid length. [ 198.947841][ T7007] netlink: 92 bytes leftover after parsing attributes in process `syz.0.508'. [ 200.256128][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 200.497162][ T7028] netlink: 92 bytes leftover after parsing attributes in process `syz.2.518'. [ 200.635236][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 200.739022][ T7032] netlink: 'syz.2.522': attribute type 25 has an invalid length. [ 201.729822][ T7048] netlink: 'syz.1.528': attribute type 4 has an invalid length. [ 201.745006][ T7048] netlink: 'syz.1.528': attribute type 5 has an invalid length. [ 201.770476][ T7048] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.528'. [ 203.926997][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 204.106804][ T10] usb 1-1: config 0 has no interfaces? [ 204.112329][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 204.131723][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.161421][ T10] usb 1-1: config 0 descriptor?? [ 204.378371][ T10] usb 1-1: USB disconnect, device number 2 [ 204.765881][ T7123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.210773][ T7133] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 205.914670][ T7160] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 205.933009][ T7160] netlink: 'syz.2.582': attribute type 5 has an invalid length. [ 205.942096][ T7160] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.582'. [ 205.975450][ T7162] netlink: 92 bytes leftover after parsing attributes in process `syz.3.583'. [ 206.107252][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 206.726837][ T7193] netlink: 'syz.2.594': attribute type 4 has an invalid length. [ 206.774561][ T7193] netlink: 'syz.2.594': attribute type 5 has an invalid length. [ 206.812739][ T7193] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.594'. [ 207.104949][ T7201] netlink: 'syz.0.598': attribute type 25 has an invalid length. [ 209.423465][ T7283] netlink: 'syz.0.637': attribute type 25 has an invalid length. [ 211.272125][ T7328] netlink: 'syz.3.659': attribute type 25 has an invalid length. [ 212.614216][ T7368] Zero length message leads to an empty skb [ 212.616219][ T7370] netlink: 92 bytes leftover after parsing attributes in process `syz.2.678'. [ 212.755641][ T7372] netlink: 'syz.3.679': attribute type 25 has an invalid length. [ 213.411335][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 214.045134][ T7420] netlink: 92 bytes leftover after parsing attributes in process `syz.0.700'. [ 214.170598][ T7426] netlink: 'syz.0.704': attribute type 4 has an invalid length. [ 214.178367][ T7426] netlink: 'syz.0.704': attribute type 5 has an invalid length. [ 214.186704][ T7426] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.704'. [ 214.309751][ T7430] ======================================================= [ 214.309751][ T7430] WARNING: The mand mount option has been deprecated and [ 214.309751][ T7430] and is ignored by this kernel. Remove the mand [ 214.309751][ T7430] option from the mount to silence this warning. [ 214.309751][ T7430] ======================================================= [ 214.384793][ T7430] binder: Unknown parameter 'context' [ 214.642598][ T7442] netlink: 92 bytes leftover after parsing attributes in process `syz.0.712'. [ 215.605785][ T7475] netlink: 'syz.1.727': attribute type 4 has an invalid length. [ 215.624951][ T7475] netlink: 'syz.1.727': attribute type 5 has an invalid length. [ 215.639293][ T7475] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.727'. [ 215.755960][ T7479] netlink: 92 bytes leftover after parsing attributes in process `syz.3.729'. [ 216.327725][ T7500] binder: Unknown parameter 'context' [ 216.447013][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.741'. [ 216.835762][ T7520] binder: Unknown parameter 'context' [ 217.003469][ T7528] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 217.026999][ T7528] netlink: 'syz.2.754': attribute type 5 has an invalid length. [ 217.054843][ T7528] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.754'. [ 217.777914][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 218.771685][ T7596] binder: Unknown parameter 'context' [ 219.205499][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 220.022750][ T7624] netlink: 92 bytes leftover after parsing attributes in process `syz.3.800'. [ 220.940168][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 221.175009][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 221.241777][ T7656] binder: Unknown parameter 'context' [ 221.369249][ T24] usb 1-1: config 0 has no interfaces? [ 221.375156][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 221.388470][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.418496][ T24] usb 1-1: config 0 descriptor?? [ 221.642176][ T24] usb 1-1: USB disconnect, device number 3 [ 222.403191][ T7689] netlink: 'syz.3.832': attribute type 25 has an invalid length. [ 222.592766][ T7695] netlink: 92 bytes leftover after parsing attributes in process `syz.3.834'. [ 223.273310][ T7717] binder: Unknown parameter 'context' [ 223.322533][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.847'. [ 223.731251][ T7734] netlink: 'syz.3.853': attribute type 4 has an invalid length. [ 223.755561][ T7734] netlink: 'syz.3.853': attribute type 5 has an invalid length. [ 223.771163][ T7734] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.853'. [ 223.968215][ T7744] netlink: 'syz.2.857': attribute type 25 has an invalid length. [ 224.539597][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.868'. [ 226.065297][ T7801] netlink: 'syz.0.886': attribute type 25 has an invalid length. [ 227.064858][ T7825] binder: Unknown parameter 'context' [ 227.520575][ T7839] netlink: 'syz.2.895': attribute type 4 has an invalid length. [ 227.528546][ T7839] netlink: 'syz.2.895': attribute type 5 has an invalid length. [ 227.554563][ T7839] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.895'. [ 227.746321][ T7847] netlink: 'syz.3.897': attribute type 25 has an invalid length. [ 228.281023][ T7873] netlink: 'syz.1.921': attribute type 25 has an invalid length. [ 228.724497][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 228.883229][ T7898] netlink: 'syz.3.933': attribute type 25 has an invalid length. [ 228.893670][ T10] usb 2-1: config 0 has no interfaces? [ 228.911680][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 228.942547][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.965077][ T10] usb 2-1: config 0 descriptor?? [ 229.176021][ T10] usb 2-1: USB disconnect, device number 2 [ 229.402971][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'. [ 230.345627][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 230.747235][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 230.915818][ T9] usb 2-1: config 0 has no interfaces? [ 230.921512][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 230.944662][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.966629][ T9] usb 2-1: config 0 descriptor?? [ 231.177922][ T10] usb 2-1: USB disconnect, device number 3 [ 232.500922][ T7990] netlink: 92 bytes leftover after parsing attributes in process `syz.1.975'. [ 238.747390][ T8069] netlink: 'syz.2.1009': attribute type 25 has an invalid length. [ 240.373119][ T8092] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 240.394503][ T8092] netlink: 'syz.1.1021': attribute type 5 has an invalid length. [ 240.402344][ T8092] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1021'. [ 241.935951][ T8109] binder: Unknown parameter 'context' [ 243.948498][ T8146] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 243.976905][ T8146] netlink: 'syz.2.1046': attribute type 5 has an invalid length. [ 244.016922][ T8146] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1046'. [ 244.109661][ T8150] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1042'. [ 244.565479][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 244.740007][ T9] usb 3-1: config 0 has no interfaces? [ 244.745715][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 244.778758][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.783423][ T8176] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1059'. [ 244.797074][ T9] usb 3-1: config 0 descriptor?? [ 245.010409][ T24] usb 3-1: USB disconnect, device number 2 [ 245.664710][ T8196] binder: Unknown parameter 'context' [ 249.263358][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 252.377604][ T8260] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1101'. [ 253.016562][ T8279] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1111'. [ 253.178373][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1113'. [ 253.790877][ T8296] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1121'. [ 255.633694][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640066][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.698495][ T8322] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1132'. [ 257.065898][ T8328] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 257.075612][ T8328] netlink: 'syz.2.1133': attribute type 5 has an invalid length. [ 257.092599][ T8328] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1133'. [ 257.704668][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 257.710795][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 257.713052][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 257.717079][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 258.156868][ T8367] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1153'. [ 258.498001][ T8374] binder: Unknown parameter 'context' [ 258.987986][ T8386] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1162'. [ 263.386454][ T8438] netlink: 'syz.3.1188': attribute type 25 has an invalid length. [ 264.238315][ T8467] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1199'. [ 270.672712][ T8553] netlink: 'syz.3.1241': attribute type 25 has an invalid length. [ 271.205838][ T8559] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 271.215956][ T8559] netlink: 'syz.3.1246': attribute type 5 has an invalid length. [ 271.223712][ T8559] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1246'. [ 274.727727][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 274.860902][ T8590] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 274.870314][ T8590] netlink: 'syz.3.1260': attribute type 5 has an invalid length. [ 274.884934][ T8590] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1260'. [ 276.492419][ T8634] netlink: 'syz.3.1282': attribute type 4 has an invalid length. [ 276.512152][ T8634] netlink: 'syz.3.1282': attribute type 5 has an invalid length. [ 276.520050][ T8634] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1282'. [ 276.795089][ T8646] binder: Unknown parameter 'context' [ 277.075084][ T8658] netlink: 'syz.3.1293': attribute type 25 has an invalid length. [ 277.419179][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'. [ 277.695216][ T8680] netlink: 'syz.2.1304': attribute type 25 has an invalid length. [ 278.319206][ T8705] netlink: 'syz.0.1316': attribute type 25 has an invalid length. [ 278.999111][ T8724] netlink: 'syz.0.1327': attribute type 25 has an invalid length. [ 282.051254][ T8796] binder: Unknown parameter 'context' [ 283.636311][ T8827] netlink: 'syz.1.1368': attribute type 25 has an invalid length. [ 284.932006][ T8848] netlink: 'syz.1.1384': attribute type 25 has an invalid length. [ 289.804464][ T870] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 289.986587][ T870] usb 2-1: config 0 has no interfaces? [ 289.992116][ T870] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 290.034464][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.063311][ T870] usb 2-1: config 0 descriptor?? [ 290.275270][ T870] usb 2-1: USB disconnect, device number 4 [ 291.648750][ T870] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 291.826262][ T870] usb 1-1: config 0 has no interfaces? [ 291.842425][ T870] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 291.879162][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.898994][ T870] usb 1-1: config 0 descriptor?? [ 292.111704][ T870] usb 1-1: USB disconnect, device number 4 [ 293.199717][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1479'. [ 293.337786][ T9057] binder: Unknown parameter 'context' [ 295.994446][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 296.156652][ T24] usb 1-1: config 0 has no interfaces? [ 296.164476][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 296.179526][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.215798][ T24] usb 1-1: config 0 descriptor?? [ 296.435405][ T870] usb 1-1: USB disconnect, device number 5 [ 297.686344][ T9127] binder: Unknown parameter 'context' [ 298.704442][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 298.884517][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 298.910121][ T10] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 298.928083][ T10] usb 3-1: config 1 has no interface number 0 [ 298.945061][ T10] usb 3-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 298.968158][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 298.994439][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.009776][ T10] usb 3-1: Product: syz [ 299.015401][ T10] usb 3-1: Manufacturer: syz [ 299.023841][ T10] usb 3-1: SerialNumber: syz [ 299.258584][ T10] option 3-1:1.64: GSM modem (1-port) converter detected [ 299.285001][ T10] usb 3-1: USB disconnect, device number 3 [ 299.321194][ T10] option 3-1:1.64: device disconnected [ 302.046421][ T9199] netlink: 'syz.3.1543': attribute type 4 has an invalid length. [ 302.075436][ T9199] netlink: 'syz.3.1543': attribute type 5 has an invalid length. [ 302.084986][ T9199] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1543'. [ 302.420467][ T9207] netlink: 'syz.0.1546': attribute type 25 has an invalid length. [ 309.366974][ T9285] binder: Unknown parameter 'context' [ 309.929632][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1575'. [ 310.312376][ T9300] netlink: 'syz.1.1589': attribute type 4 has an invalid length. [ 310.330397][ T9300] netlink: 'syz.1.1589': attribute type 5 has an invalid length. [ 310.344545][ T9300] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1589'. [ 312.165977][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 312.344508][ T10] usb 1-1: config 0 has no interfaces? [ 312.350029][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 312.388395][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.413458][ T10] usb 1-1: config 0 descriptor?? [ 312.579229][ T9329] netlink: 'syz.1.1605': attribute type 25 has an invalid length. [ 312.635162][ T48] usb 1-1: USB disconnect, device number 6 [ 313.934516][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 314.116948][ T10] usb 1-1: config 0 has no interfaces? [ 314.122682][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 314.146106][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.173210][ T10] usb 1-1: config 0 descriptor?? [ 314.394542][ T10] usb 1-1: USB disconnect, device number 7 [ 316.534841][ T9438] binder: Unknown parameter 'context' [ 317.069317][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078854][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.303937][ T9500] netlink: 'syz.1.1682': attribute type 25 has an invalid length. [ 320.550201][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'. [ 322.349720][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1730'. [ 322.935588][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'. [ 323.710914][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'. [ 324.263926][ T9657] binder: Unknown parameter 'context' [ 324.664622][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 324.829093][ T9] usb 1-1: config 0 has no interfaces? [ 324.852334][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 324.874497][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.905480][ T9] usb 1-1: config 0 descriptor?? [ 325.120298][ T48] usb 1-1: USB disconnect, device number 8 [ 326.565846][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 326.751446][ T24] usb 2-1: config 0 has no interfaces? [ 326.772535][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 326.802060][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.827080][ T24] usb 2-1: config 0 descriptor?? [ 327.039186][ T9] usb 2-1: USB disconnect, device number 5 [ 329.074662][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 329.234917][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 329.256068][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.294498][ T24] usb 2-1: config 3 has an invalid interface number: 67 but max is 0 [ 329.312856][ T24] usb 2-1: config 3 has no interface number 0 [ 329.324437][ T24] usb 2-1: config 3 interface 67 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 329.354469][ T24] usb 2-1: config 3 interface 67 has no altsetting 0 [ 329.367073][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice= 5.bc [ 329.368942][ T9752] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1809'. [ 329.383531][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.403722][ T24] usb 2-1: Product: syz [ 329.412644][ T24] usb 2-1: Manufacturer: syz [ 329.423270][ T24] usb 2-1: SerialNumber: syz [ 329.571984][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'. [ 329.667261][ T24] gspca_main: spca500-2.14.0 probing 8086:0630 [ 329.730423][ T24] usb 2-1: USB disconnect, device number 6 [ 330.021804][ T9773] binder: 9772:9773 ioctl c0306201 0 returned -14 [ 330.280570][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 330.305011][ T9780] netlink: 'syz.0.1819': attribute type 2 has an invalid length. [ 330.381122][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1822'. [ 330.535470][ T9788] netlink: 'syz.2.1824': attribute type 25 has an invalid length. [ 331.040531][ T9802] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 331.048473][ T9802] netlink: 'syz.1.1831': attribute type 5 has an invalid length. [ 331.060423][ T9802] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1831'. [ 332.989551][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1847'. [ 334.007270][ T9876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1867'. [ 335.510467][ T9908] netlink: 'syz.1.1873': attribute type 25 has an invalid length. [ 336.405651][ T9927] netlink: 'syz.0.1892': attribute type 25 has an invalid length. [ 337.509339][ T5862] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 339.795404][ T870] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 339.970054][ T870] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 339.995576][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.023985][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.046220][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.076999][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.094597][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.114433][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.131774][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.140968][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.162344][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.182846][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.193835][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.218341][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.235526][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.254843][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.284679][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.296604][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.310537][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.344712][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.363828][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.386832][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.419697][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.435836][ T870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.463586][ T870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.494444][ T870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.519709][ T870] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 340.534428][ T870] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 340.558684][ T870] usb 2-1: Product: syz [ 340.562871][ T870] usb 2-1: Manufacturer: syz [ 340.574451][ T870] usb 2-1: SerialNumber: syz [ 340.592307][ T870] usb 2-1: config 0 descriptor?? [ 340.605435][ T870] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 340.813836][ T48] usb 2-1: USB disconnect, device number 7 [ 340.825563][ T48] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 342.408605][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 342.844480][ T870] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 343.018317][ T870] usb 2-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 343.028838][T10061] capability: warning: `syz.3.1956' uses deprecated v2 capabilities in a way that may be insecure [ 343.040465][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.054438][ T870] usb 2-1: Product: syz [ 343.058736][ T870] usb 2-1: Manufacturer: syz [ 343.063332][ T870] usb 2-1: SerialNumber: syz [ 343.105487][ T870] usb 2-1: config 0 descriptor?? [ 343.284557][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'. [ 343.325938][ T870] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.333997][ T870] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 343.385301][ T870] usb 2-1: USB disconnect, device number 8 [ 344.045519][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 344.214858][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 344.223322][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.238761][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 344.250509][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.264690][ T9] usb 1-1: Product: syz [ 344.271964][ T9] usb 1-1: Manufacturer: syz [ 344.280005][ T9] usb 1-1: SerialNumber: syz [ 344.298302][ T9] usb 1-1: config 0 descriptor?? [ 344.964907][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 345.415593][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 346.094540][ T48] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 346.200935][T10175] binder: Unknown parameter 'context' [ 346.271383][ T48] usb 4-1: config 0 has no interfaces? [ 346.278615][ T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 346.304631][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.325731][ T48] usb 4-1: config 0 descriptor?? [ 346.535188][ T9] usb 4-1: USB disconnect, device number 5 [ 346.814800][ T5994] usb 1-1: USB disconnect, device number 9 [ 347.444304][T10212] misc userio: Invalid payload size [ 348.001709][T10230] netlink: 'syz.3.2038': attribute type 4 has an invalid length. [ 348.009652][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 348.034845][T10230] netlink: 'syz.3.2038': attribute type 5 has an invalid length. [ 348.042768][T10230] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2038'. [ 348.197142][ T9] usb 1-1: config 0 has no interfaces? [ 348.212861][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 348.225658][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.268576][ T9] usb 1-1: config 0 descriptor?? [ 348.513385][ T870] usb 1-1: USB disconnect, device number 10 [ 349.525962][T10280] netlink: 'syz.2.2061': attribute type 4 has an invalid length. [ 349.554526][T10280] netlink: 'syz.2.2061': attribute type 5 has an invalid length. [ 349.562307][T10280] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2061'. [ 349.712520][T10286] binder: Unknown parameter 'context' [ 349.994470][ T48] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 350.227617][ T48] usb 1-1: config 0 has no interfaces? [ 350.233223][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 350.249487][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.345564][ T48] usb 1-1: config 0 descriptor?? [ 350.599115][ T870] usb 1-1: USB disconnect, device number 11 [ 351.192430][T10335] netlink: 'syz.3.2088': attribute type 4 has an invalid length. [ 351.203819][T10335] netlink: 'syz.3.2088': attribute type 5 has an invalid length. [ 351.213916][T10335] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2088'. [ 351.254769][ T48] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 351.404665][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 351.424250][ T48] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 351.446281][ T48] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 351.474792][ T48] usb 3-1: Product: syz [ 351.484492][ T48] usb 3-1: Manufacturer: syz [ 351.494431][ T48] usb 3-1: SerialNumber: syz [ 351.512175][ T48] usb 3-1: config 0 descriptor?? [ 351.746172][ T48] usb 3-1: USB disconnect, device number 4 [ 352.131320][T10360] netlink: 'syz.3.2101': attribute type 4 has an invalid length. [ 352.139342][T10360] netlink: 'syz.3.2101': attribute type 5 has an invalid length. [ 352.147587][ T5850] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 352.157217][T10360] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2101'. [ 352.327402][ T5850] usb 1-1: config 0 has no interfaces? [ 352.343169][ T5850] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 352.362436][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.386283][ T5850] usb 1-1: config 0 descriptor?? [ 352.615450][ T48] usb 1-1: USB disconnect, device number 12 [ 354.044499][ T5850] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 354.220209][ T5850] usb 2-1: config 0 has no interfaces? [ 354.220250][ T5850] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 354.220272][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.223073][ T5850] usb 2-1: config 0 descriptor?? [ 354.429508][ T5850] usb 2-1: USB disconnect, device number 9 [ 354.650420][T10435] netlink: 'syz.3.2135': attribute type 4 has an invalid length. [ 354.711907][T10435] netlink: 'syz.3.2135': attribute type 5 has an invalid length. [ 354.794777][T10435] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2135'. [ 355.589563][T10465] binder: Unknown parameter 'context' [ 356.890974][T10487] binder: 10486:10487 ioctl 4018620d 0 returned -22 [ 356.908883][T10487] binder: 10486:10487 ioctl 89f3 0 returned -22 [ 357.344780][T10494] binder: Unknown parameter 'context' [ 361.701160][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 363.701634][T10662] netlink: 'syz.0.2246': attribute type 4 has an invalid length. [ 363.715707][T10664] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 363.764481][T10662] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2246'. [ 363.804709][T10664] CIFS mount error: No usable UNC path provided in device string! [ 363.804709][T10664] [ 363.850464][T10664] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.644572][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 364.817470][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.849309][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.884649][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.904789][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.918170][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.944485][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.968167][ T5850] usb 3-1: config 0 descriptor?? [ 365.428529][ T5850] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 366.890396][ T30] audit: type=1326 audit(1763247159.076:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.2258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac1938f6c9 code=0x0 [ 367.469913][ T9] usb 3-1: USB disconnect, device number 5 [ 367.546783][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.560583][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.568427][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.576649][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.584419][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.316491][T10707] chnl_net:caif_netlink_parms(): no params data found [ 368.905868][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.913061][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.938401][T10707] bridge_slave_0: entered allmulticast mode [ 368.967830][T10707] bridge_slave_0: entered promiscuous mode [ 368.986979][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.994256][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.014630][T10707] bridge_slave_1: entered allmulticast mode [ 369.022618][T10707] bridge_slave_1: entered promiscuous mode [ 369.077344][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.416190][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 369.527066][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.619136][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.629199][ T5851] Bluetooth: hci4: command tx timeout [ 369.648570][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.834987][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.891068][T10707] team0: Port device team_slave_0 added [ 369.917482][T10707] team0: Port device team_slave_1 added [ 370.046611][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.115737][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.122734][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.187556][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.219382][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.226625][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.267134][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.399075][T10707] hsr_slave_0: entered promiscuous mode [ 370.415817][T10707] hsr_slave_1: entered promiscuous mode [ 370.422585][T10707] debugfs: 'hsr0' already exists in 'hsr' [ 370.434425][T10707] Cannot create hsr debugfs directory [ 370.767161][ T12] bridge_slave_1: left allmulticast mode [ 370.773039][ T12] bridge_slave_1: left promiscuous mode [ 370.805676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.856976][ T12] bridge_slave_0: left allmulticast mode [ 370.874426][ T12] bridge_slave_0: left promiscuous mode [ 370.880218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.704487][ T5851] Bluetooth: hci4: command tx timeout [ 372.010878][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.054839][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.086304][ T12] bond0 (unregistering): Released all slaves [ 372.545900][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2285'. [ 372.888914][T10781] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 372.912391][T10781] team0: Failed to send options change via netlink (err -105) [ 372.919983][T10781] team0: Port device dummy0 added [ 372.943623][T10781] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 372.953241][T10781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 372.989480][T10781] team0: Failed to send options change via netlink (err -105) [ 372.997264][T10781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.008134][T10781] team0: Port device dummy0 removed [ 373.018936][T10781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.242174][ T12] hsr_slave_0: left promiscuous mode [ 373.263164][ T12] hsr_slave_1: left promiscuous mode [ 373.271298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.301597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.370874][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.394565][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.480046][ T12] veth1_macvtap: left promiscuous mode [ 373.495812][ T12] veth0_macvtap: left promiscuous mode [ 373.504764][ T12] veth1_vlan: left promiscuous mode [ 373.510263][ T12] veth0_vlan: left promiscuous mode [ 373.796569][ T5851] Bluetooth: hci4: command tx timeout [ 374.694196][ T12] team0 (unregistering): Port device team_slave_1 removed [ 374.749219][ T12] team0 (unregistering): Port device team_slave_0 removed [ 374.904589][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 375.063115][ T48] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 375.089787][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.129754][ T48] usb 4-1: config 0 descriptor?? [ 375.145200][ T48] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 375.357000][ T48] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 375.373822][ T48] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71 [ 375.427614][ T48] usb 4-1: USB disconnect, device number 6 [ 375.865679][ T5851] Bluetooth: hci4: command tx timeout [ 375.936130][T10707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.976847][T10707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.042121][T10707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.125001][T10707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.429387][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.471802][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.526274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.533486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.582712][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.589948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.160562][T10878] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 377.168927][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.172474][T10878] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 377.172513][T10878] CPU: 1 UID: 0 PID: 10878 Comm: syz.3.2313 Not tainted syzkaller #0 PREEMPT(full) [ 377.196982][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.206650][T10707] veth0_vlan: entered promiscuous mode [ 377.207031][T10878] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 377.217471][T10878] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 377.237067][T10878] RSP: 0018:ffffc90018407960 EFLAGS: 00010206 [ 377.243136][T10878] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 377.251092][T10878] RDX: ffffc9000bde9000 RSI: 00000000000414a0 RDI: 00000000000414a1 [ 377.259056][T10878] RBP: 0000000000000007 R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 377.267027][T10878] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: dffffc0000000000 [ 377.275005][T10878] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88806038c1b4 [ 377.282962][T10878] FS: 00007f1efbee26c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 377.291871][T10878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.298437][T10878] CR2: 00007f619d5da368 CR3: 0000000034f1c000 CR4: 00000000003526f0 [ 377.306396][T10878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.314347][T10878] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 377.322302][T10878] Call Trace: [ 377.325703][T10878] [ 377.328628][T10878] nsproxy_free+0x20f/0x7c0 [ 377.333123][T10878] create_new_namespaces+0x47a/0x540 [ 377.338396][T10878] ? copy_namespaces+0x5c/0x4b0 [ 377.343236][T10878] copy_namespaces+0x438/0x4b0 [ 377.347985][T10878] copy_process+0x168f/0x3930 [ 377.352650][T10878] ? copy_process+0x915/0x3930 [ 377.357404][T10878] ? __pfx_copy_process+0x10/0x10 [ 377.362419][T10878] ? futex_private_hash_put+0x13b/0x170 [ 377.367946][T10878] kernel_clone+0x21e/0x850 [ 377.372437][T10878] ? __pfx_futex_wake+0x10/0x10 [ 377.377270][T10878] ? __pfx_kernel_clone+0x10/0x10 [ 377.382275][T10878] ? __lock_acquire+0xab9/0xd20 [ 377.387114][T10878] ? do_futex+0x395/0x420 [ 377.391432][T10878] __x64_sys_clone+0x18b/0x1e0 [ 377.396179][T10878] ? __pfx___x64_sys_clone+0x10/0x10 [ 377.401460][T10878] ? rcu_is_watching+0x15/0xb0 [ 377.406210][T10878] ? do_syscall_64+0xbe/0xfa0 [ 377.410870][T10878] do_syscall_64+0xfa/0xfa0 [ 377.415352][T10878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.421399][T10878] ? clear_bhb_loop+0x60/0xb0 [ 377.426064][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.431938][T10878] RIP: 0033:0x7f1efaf8f6c9 [ 377.436345][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.455930][T10878] RSP: 002b:00007f1efbee1fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 377.464327][T10878] RAX: ffffffffffffffda RBX: 00007f1efb1e5fa0 RCX: 00007f1efaf8f6c9 [ 377.472280][T10878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a809000 [ 377.480233][T10878] RBP: 00007f1efb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.488190][T10878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 377.496140][T10878] R13: 00007f1efb1e6038 R14: 00007f1efb1e5fa0 R15: 00007ffd2fcda8f8 [ 377.504098][T10878] [ 377.507107][T10878] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.511854][ T870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 377.512003][T10878] ---[ end trace 0000000000000000 ]--- [ 377.529227][T10707] veth1_vlan: entered promiscuous mode [ 377.565115][T10707] veth0_macvtap: entered promiscuous mode [ 377.570889][T10878] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 377.579067][T10707] veth1_macvtap: entered promiscuous mode [ 377.617382][T10878] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 377.744414][T10878] RSP: 0018:ffffc90018407960 EFLAGS: 00010206 [ 377.797350][ T870] usb 3-1: Using ep0 maxpacket: 16 [ 377.894743][T10878] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 377.902775][T10878] RDX: ffffc9000bde9000 RSI: 00000000000414a0 RDI: 00000000000414a1 [ 377.951045][T10878] RBP: 0000000000000007 R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 377.995671][T10878] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: dffffc0000000000 [ 378.003682][T10878] R13: 0000000000000017 R14: 00000000000000ba R15: ffff88806038c1b4 [ 378.021260][T10878] FS: 00007f1efbee26c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 378.030643][T10878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.037455][T10878] CR2: 00007f619d4c5286 CR3: 0000000034f1c000 CR4: 00000000003526f0 [ 378.057927][T10878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.070262][T10878] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 378.094466][T10878] Kernel panic - not syncing: Fatal exception [ 378.100820][T10878] Kernel Offset: disabled [ 378.105133][T10878] Rebooting in 86400 seconds..