last executing test programs: 3m4.989366179s ago: executing program 32 (id=145): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) dup(r0) r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x1}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000000)) io_uring_enter(r1, 0x567, 0x20, 0x0, 0x0, 0x0) 1m49.403060037s ago: executing program 4 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1m49.241955562s ago: executing program 4 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885630182700008"], 0xffdd) 1m48.894712151s ago: executing program 4 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)={{0x1, 0x0, 0xff13, {0xd000, 0x1}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f302664670f01c4baf80c66b801f5c08a66efbafc0cec2e0fc7b600000f01c1f20f20540f07f00fb3730f2ef365f0089e0000660f382a5d50", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.776256247s ago: executing program 33 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)={{0x1, 0x0, 0xff13, {0xd000, 0x1}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f302664670f01c4baf80c66b801f5c08a66efbafc0cec2e0fc7b600000f01c1f20f20540f07f00fb3730f2ef365f0089e0000660f382a5d50", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m40.22414691s ago: executing program 0 (id=605): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1m38.740151137s ago: executing program 0 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m38.494189558s ago: executing program 34 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m3.848243105s ago: executing program 6 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, {0xa, 0x4e24, 0x7fffffff, @private2, 0x1e2}}}, 0x32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.37616623s ago: executing program 6 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000002000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.14763887s ago: executing program 6 (id=818): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000011c0)=0x7c6b, 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "978e8676a8cfd89c"}, 0x10}}, 0x20008081) 1m3.062515588s ago: executing program 6 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m3.007308132s ago: executing program 6 (id=820): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x40004, 0x1000000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 1m2.772001943s ago: executing program 6 (id=821): munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000040)={0x206361100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m2.601588198s ago: executing program 35 (id=821): munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000040)={0x206361100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m2.032100218s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 51.437981118s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 44.843188148s ago: executing program 8 (id=901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) 43.204000142s ago: executing program 8 (id=908): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x99, 0x5a, 0x34, 0x40, 0x451, 0xf430, 0x427a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x0, 0xe5, 0x4f, 0xb0}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 41.445816948s ago: executing program 8 (id=917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x9, 0x8, 0x8000000000000001, 0x2, 0xfffb, 0x101, 0x5, 0x1], 0xeeee0000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.267306121s ago: executing program 8 (id=918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) 40.445989757s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 38.827773002s ago: executing program 8 (id=931): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 38.60973569s ago: executing program 8 (id=932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 35.090954562s ago: executing program 3 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000860000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 34.675765012s ago: executing program 3 (id=954): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_io_uring_setup(0x16d0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 34.604531519s ago: executing program 3 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xb8126c1eaec961b2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) dup3(r2, r0, 0x80000) getdents(r2, 0x0, 0x0) 34.432209818s ago: executing program 3 (id=956): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x50, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}, {0x4, 0x6, 0x4, 0x8, 'GPL\x00'}]}, 0x0, 0x0, 0x0, 0x0}) 34.189162263s ago: executing program 3 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x1e6, @time}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 32.406762673s ago: executing program 3 (id=959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 32.322498875s ago: executing program 5 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.963678168s ago: executing program 5 (id=962): r0 = io_uring_setup(0x6a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xaa}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.276653027s ago: executing program 5 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x400000000000000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00') 31.215591524s ago: executing program 5 (id=965): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/98, 0x62) 31.036102846s ago: executing program 5 (id=966): r0 = fanotify_init(0x200, 0x40800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xc00, 0x0) fanotify_mark(r0, 0x1, 0x4800003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus\x00', 0x0) 30.773249561s ago: executing program 5 (id=967): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 30.555040453s ago: executing program 36 (id=967): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 26.569319927s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 23.46278063s ago: executing program 37 (id=932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 17.592512901s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 15.713490712s ago: executing program 38 (id=959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 5.410846329s ago: executing program 7 (id=1049): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xfff7fffc, 0x0, 0xffffffff, 0x0, "fb00"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 4.868037181s ago: executing program 9 (id=1053): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) 4.773509375s ago: executing program 9 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x6, r3, 0x1, 0x1, 0x6, @remote}, 0x14) close(r2) 4.701043343s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 2.750623744s ago: executing program 7 (id=1055): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d3c0206067c", 0x17}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001401) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20000000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) close(r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2.750240712s ago: executing program 9 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000006c0)="b9bf0300009a00000000b500f3ac0f01f09a019e7e6f7a000f3067670f79b827d3c744ce000f563d01c2c2c22402702d0000c744240600000000c4c3ed79ccb2bb9b01e90000009cc74911ba5f6dbd56093c3e0f1bebb9990a0000b8c1000000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.750107568s ago: executing program 4 (id=1001): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200), 0x8) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x121040, 0x0) 1.016950127s ago: executing program 7 (id=1064): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a67dfa1aff54135abe90913a7bb3930c14e8d1808269d29578d92871b8681b42a7a264d4c578a7c26845616d90fc09729e3d8c0aa68e95af732c067f9dd1d9f11f203fc856100a690de676b5802e305593c4d8e1210616923248e20f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b4983e260090d619f74", 0x97}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x40000102) 937.288596ms ago: executing program 1 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 844.083258ms ago: executing program 7 (id=1067): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 783.361582ms ago: executing program 1 (id=1068): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) 754.693357ms ago: executing program 1 (id=1069): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 651.591393ms ago: executing program 1 (id=1070): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 564.743026ms ago: executing program 7 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x204a, 0x3}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 563.546944ms ago: executing program 9 (id=1072): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) getdents(r3, 0x0, 0x0) 559.812872ms ago: executing program 4 (id=1073): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29420987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f31096c060890e0878f0e1ac6e7049b096e959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074b0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040c01}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 376.121307ms ago: executing program 9 (id=1074): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x7f, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 351.204309ms ago: executing program 7 (id=1075): openat$rfkill(0xffffffffffffff9c, &(0x7f0000001700), 0x48680, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x8000}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 347.629151ms ago: executing program 9 (id=1076): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 278.11907ms ago: executing program 4 (id=1077): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='smb3\x00', 0x0, &(0x7f00000003c0)='nolazytime') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 261.063386ms ago: executing program 1 (id=1078): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1079): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x20000050) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) kernel console output (not intermixed with test programs): ][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.163829][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.171003][ T5867] usb 4-1: config 0 descriptor?? [ 202.176437][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.183402][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.190754][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.198271][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.205545][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.212417][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.219736][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.226460][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.232857][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.241153][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.247619][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.254165][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.260546][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.266995][ T9] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 202.273030][ T9] input input16: Timeout waiting for response from device. [ 202.285272][ T9] usb 8-1: USB disconnect, device number 4 [ 202.296543][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.307925][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.328187][ T5866] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 202.359663][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.382094][ T5866] usb 6-1: config 0 descriptor?? [ 202.438715][ T8466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.450107][ T8466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.468241][ T8466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.481829][ T8466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.579525][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.599346][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.611659][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.618841][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.644720][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.651852][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.821482][ T5866] hid (null): bogus close delimiter [ 202.940896][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.027996][ T5866] usb 6-1: language id specifier not provided by device, defaulting to English [ 203.038355][ T8466] veth0_vlan: entered promiscuous mode [ 203.061274][ T8466] veth1_vlan: entered promiscuous mode [ 203.123838][ T8466] veth0_macvtap: entered promiscuous mode [ 203.139835][ T8466] veth1_macvtap: entered promiscuous mode [ 203.160169][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.171741][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.182278][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.195155][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.205132][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.216418][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.226527][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.245772][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.256337][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.267463][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.278625][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.311615][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.323281][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.334238][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.346053][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.358568][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.370322][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.380260][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.390855][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.401287][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.411819][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.423159][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.439173][ T8466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.448765][ T8466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.462242][ T5866] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input17 [ 203.485140][ T8466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.493894][ T8466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.558769][ T5866] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input18 [ 203.610865][ T5866] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input19 [ 203.643082][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.656242][ T5866] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input20 [ 203.669486][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.692876][ T5866] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 203.710456][ T5866] usb 6-1: USB disconnect, device number 13 [ 203.775485][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.791650][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.834717][ T5867] pegasus 4-1:0.0: setup Pegasus II specific registers [ 203.958780][ T5867] pegasus 4-1:0.0: can't locate MII phy, using default [ 203.975708][ T5867] pegasus 4-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, d6:44:08:d9:e2:b4 [ 203.986803][ T5867] usb 4-1: USB disconnect, device number 13 [ 205.771510][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.932946][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.117176][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.341336][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.494014][ T32] bridge_slave_1: left allmulticast mode [ 207.503645][ T32] bridge_slave_1: left promiscuous mode [ 207.513147][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.526432][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.540450][ T32] bridge_slave_0: left allmulticast mode [ 207.543593][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.554517][ T32] bridge_slave_0: left promiscuous mode [ 207.562251][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.562253][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.577387][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.586189][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.594002][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.659944][ T5865] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 207.829691][ T5865] usb 6-1: config 0 has no interfaces? [ 207.836375][ T5865] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 207.856876][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.870967][ T5865] usb 6-1: config 0 descriptor?? [ 208.209003][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.238894][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.283577][ T32] bond0 (unregistering): Released all slaves [ 208.284130][ T29] audit: type=1326 audit(1733889600.805:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.310902][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.325951][ T29] audit: type=1326 audit(1733889600.805:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.347251][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.353577][ T29] audit: type=1326 audit(1733889600.845:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.445046][ T29] audit: type=1326 audit(1733889600.845:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.490175][ T29] audit: type=1326 audit(1733889600.845:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.511788][ T29] audit: type=1326 audit(1733889600.905:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.533969][ T29] audit: type=1326 audit(1733889600.905:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.555635][ T29] audit: type=1326 audit(1733889600.905:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.654493][ T8746] kvm: apic: phys broadcast and lowest prio [ 208.717642][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 208.913938][ T29] audit: type=1326 audit(1733889601.435:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 208.944008][ T29] audit: type=1326 audit(1733889601.465:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66f7ff19 code=0x7ffc0000 [ 209.165359][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.172471][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.184427][ T8727] bridge_slave_0: entered allmulticast mode [ 209.191801][ T8727] bridge_slave_0: entered promiscuous mode [ 209.216394][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.223605][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.237316][ T8727] bridge_slave_1: entered allmulticast mode [ 209.254804][ T8727] bridge_slave_1: entered promiscuous mode [ 209.334292][ T32] hsr_slave_0: left promiscuous mode [ 209.354859][ T32] hsr_slave_1: left promiscuous mode [ 209.370959][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.398720][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.435285][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.443325][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.512914][ T32] veth1_macvtap: left promiscuous mode [ 209.522039][ T32] veth0_macvtap: left promiscuous mode [ 209.533185][ T32] veth1_vlan: left promiscuous mode [ 209.543550][ T32] veth0_vlan: left promiscuous mode [ 209.638933][ T5133] Bluetooth: hci2: command tx timeout [ 210.114216][ T5897] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 210.143870][ T32] team0 (unregistering): Port device team_slave_1 removed [ 210.192572][ T32] team0 (unregistering): Port device team_slave_0 removed [ 210.294141][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 210.340435][ T5897] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 210.353025][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.372780][ T5897] usb 8-1: Product: syz [ 210.390270][ T5897] usb 8-1: Manufacturer: syz [ 210.395721][ T5897] usb 8-1: SerialNumber: syz [ 210.414678][ T5897] usb 8-1: config 0 descriptor?? [ 210.451869][ T52] usb 6-1: USB disconnect, device number 14 [ 210.633502][ T5897] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 210.870030][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.899472][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.959099][ T8727] team0: Port device team_slave_0 added [ 210.969189][ T8727] team0: Port device team_slave_1 added [ 211.025235][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.042833][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.079459][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.114805][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.129491][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.183525][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.258566][ T8727] hsr_slave_0: entered promiscuous mode [ 211.265163][ T8727] hsr_slave_1: entered promiscuous mode [ 211.271460][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.279498][ T8727] Cannot create hsr debugfs directory [ 211.723612][ T5133] Bluetooth: hci2: command tx timeout [ 211.824585][ T8727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.875366][ T8727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.892065][ T8727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.918279][ T8727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.995781][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.013615][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.029612][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.036785][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.065983][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.073142][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.396102][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.465922][ T8727] veth0_vlan: entered promiscuous mode [ 212.494597][ T8727] veth1_vlan: entered promiscuous mode [ 212.510828][ T5897] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 212.528229][ T5897] dvbdev: DVB: registering new adapter (Terratec H7) [ 212.537191][ T5897] usb 8-1: media controller created [ 212.547380][ T8727] veth0_macvtap: entered promiscuous mode [ 212.561893][ T8727] veth1_macvtap: entered promiscuous mode [ 212.582895][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.594260][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.604881][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.616373][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.626505][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.664093][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.674005][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.697032][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.713762][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.731404][ T5897] usb read operation failed. (-71) [ 212.738917][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.749931][ T5897] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 212.760554][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.770255][ T5897] usb 8-1: USB disconnect, device number 5 [ 212.789970][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.801909][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.813047][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.823689][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.833795][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.854100][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.863947][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.884722][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.895564][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.911319][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.922930][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.951377][ T8727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.961332][ T8727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.994222][ T8727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.003789][ T8727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.061865][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.072637][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.117885][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.126854][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.221312][ T8827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.504779][ T5895] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.666136][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.678140][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.688258][ T5895] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.697490][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.707640][ T5895] usb 4-1: config 0 descriptor?? [ 213.793037][ T1108] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.000459][ T1108] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.149586][ T5895] hid (null): bogus close delimiter [ 214.178010][ T1108] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.303921][ T1108] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.442441][ T8865] syz.7.827[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.442537][ T8865] syz.7.827[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.470348][ T8865] syz.7.827[8865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.544591][ T5895] usb 4-1: language id specifier not provided by device, defaulting to English [ 214.586821][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.597194][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.610988][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.622121][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.631913][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.639358][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.687411][ T1108] bridge_slave_1: left allmulticast mode [ 214.693195][ T1108] bridge_slave_1: left promiscuous mode [ 214.699126][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.721846][ T1108] bridge_slave_0: left allmulticast mode [ 214.728131][ T1108] bridge_slave_0: left promiscuous mode [ 214.735952][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.870023][ T5895] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 215.088044][ T5897] usb 4-1: USB disconnect, device number 14 [ 215.119429][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.131061][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.141328][ T1108] bond0 (unregistering): Released all slaves [ 215.348930][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 215.390619][ T1108] hsr_slave_0: left promiscuous mode [ 215.397547][ T1108] hsr_slave_1: left promiscuous mode [ 215.403377][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.411047][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.425162][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.432606][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.453268][ T1108] veth1_macvtap: left promiscuous mode [ 215.459132][ T1108] veth0_macvtap: left promiscuous mode [ 215.465256][ T1108] veth1_vlan: left promiscuous mode [ 215.470552][ T1108] veth0_vlan: left promiscuous mode [ 216.077251][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.091213][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.099881][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.109905][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.129756][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.137229][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.303861][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 216.348700][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 216.679772][ T5133] Bluetooth: hci0: command tx timeout [ 216.981411][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.989457][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.996751][ T8864] bridge_slave_0: entered allmulticast mode [ 217.003652][ T8864] bridge_slave_0: entered promiscuous mode [ 217.033181][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.040407][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.049733][ T8864] bridge_slave_1: entered allmulticast mode [ 217.056845][ T8864] bridge_slave_1: entered promiscuous mode [ 217.141600][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.153679][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.270782][ T8864] team0: Port device team_slave_0 added [ 217.302667][ T8864] team0: Port device team_slave_1 added [ 217.354151][ T5895] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 217.460128][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.468303][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.496820][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.512738][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.519793][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.545905][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 217.551136][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.569037][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.584269][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.597247][ T5895] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.607173][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.634672][ T5895] usb 8-1: config 0 descriptor?? [ 217.642038][ T5895] hub 8-1:0.0: USB hub found [ 217.686197][ T8864] hsr_slave_0: entered promiscuous mode [ 217.704771][ T8864] hsr_slave_1: entered promiscuous mode [ 217.711145][ T8864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.721340][ T8864] Cannot create hsr debugfs directory [ 217.761410][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 217.853614][ T5895] hub 8-1:0.0: 1 port detected [ 217.881080][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.020772][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.119030][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.181920][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.201027][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.204558][ T5133] Bluetooth: hci2: command tx timeout [ 218.213457][ T8884] bridge_slave_0: entered allmulticast mode [ 218.231110][ T8884] bridge_slave_0: entered promiscuous mode [ 218.283781][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.308845][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.320646][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.332919][ T8884] bridge_slave_1: entered allmulticast mode [ 218.347966][ T8884] bridge_slave_1: entered promiscuous mode [ 218.422950][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.465143][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.487411][ T52] hub 8-1:0.0: activate --> -90 [ 218.598506][ T8884] team0: Port device team_slave_0 added [ 218.627802][ T8884] team0: Port device team_slave_1 added [ 218.722029][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.734505][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.760466][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.774193][ T5133] Bluetooth: hci0: command tx timeout [ 218.817496][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.848583][ T8864] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.860629][ T8864] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.871946][ T1108] bridge_slave_1: left allmulticast mode [ 218.884259][ T1108] bridge_slave_1: left promiscuous mode [ 218.890022][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.919960][ T1108] bridge_slave_0: left allmulticast mode [ 218.929456][ T1108] bridge_slave_0: left promiscuous mode [ 218.941791][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.113067][ T5897] usb 8-1: USB disconnect, device number 6 [ 219.245218][ T52] usb 8-1-port1: config error [ 219.450264][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.461085][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.472577][ T1108] bond0 (unregistering): Released all slaves [ 219.483633][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.491348][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 219.499172][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.533135][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.563599][ T8864] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.616018][ T8864] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.668606][ T8884] hsr_slave_0: entered promiscuous mode [ 219.682158][ T8884] hsr_slave_1: entered promiscuous mode [ 219.694838][ T8884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.704270][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 219.713002][ T8884] Cannot create hsr debugfs directory [ 219.713021][ T5866] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.737509][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.753858][ T5866] usb 4-1: Product: syz [ 219.758234][ T5866] usb 4-1: Manufacturer: syz [ 219.762923][ T5866] usb 4-1: SerialNumber: syz [ 219.772954][ T5866] usb 4-1: config 0 descriptor?? [ 219.851973][ T1108] hsr_slave_0: left promiscuous mode [ 219.859840][ T1108] hsr_slave_1: left promiscuous mode [ 219.870660][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.878893][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.887705][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.895229][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.933887][ T1108] veth1_macvtap: left promiscuous mode [ 219.949715][ T1108] veth0_macvtap: left promiscuous mode [ 219.955848][ T1108] veth1_vlan: left promiscuous mode [ 219.961454][ T1108] veth0_vlan: left promiscuous mode [ 219.994689][ T5895] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 219.994867][ T5866] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.144663][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 220.159707][ T5895] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 220.179041][ T5895] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.191220][ T5895] usb 8-1: config 0 interface 0 has no altsetting 0 [ 220.198155][ T5895] usb 8-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 220.207595][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.223508][ T5895] usb 8-1: config 0 descriptor?? [ 220.284257][ T5133] Bluetooth: hci2: command tx timeout [ 220.584265][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 220.641771][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 220.652167][ T5895] wacom 0003:056A:00C4.000A: unknown main item tag 0x0 [ 220.694759][ T5895] wacom 0003:056A:00C4.000A: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.7-1/input0 [ 220.837083][ T5133] Bluetooth: hci0: command tx timeout [ 221.381961][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.418950][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.420829][ T5866] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 221.452218][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.459380][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.468113][ T5866] usb 4-1: USB disconnect, device number 15 [ 221.478560][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.485725][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.762375][ T8884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.775507][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.782929][ T8884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.805428][ T8884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.818128][ T8884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.937166][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.966905][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.986942][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.994105][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.015850][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.023009][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.087542][ T8884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.099281][ T8884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.197358][ T8864] veth0_vlan: entered promiscuous mode [ 222.235898][ T8864] veth1_vlan: entered promiscuous mode [ 222.301454][ T8864] veth0_macvtap: entered promiscuous mode [ 222.346643][ T8864] veth1_macvtap: entered promiscuous mode [ 222.363228][ T5133] Bluetooth: hci2: command tx timeout [ 222.383618][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.395064][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.404967][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.416427][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.426344][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.438028][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.447921][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.458579][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.469654][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.481514][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.492242][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.502244][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.512723][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.531927][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.542479][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.552367][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.562927][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.573970][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.590996][ T8864] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.600606][ T8864] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.610775][ T8864] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.620212][ T8864] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.660200][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.714481][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.722665][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.755270][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.763577][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.788424][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.788491][ T8884] veth0_vlan: entered promiscuous mode [ 222.817231][ T8884] veth1_vlan: entered promiscuous mode [ 222.867058][ T8884] veth0_macvtap: entered promiscuous mode [ 222.896420][ T8884] veth1_macvtap: entered promiscuous mode [ 222.916064][ T5133] Bluetooth: hci0: command tx timeout [ 222.934296][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 222.945258][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.960523][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 222.969730][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.986602][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.010165][ T5867] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.019808][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.022607][ T8979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 223.033688][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.058455][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.085740][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.094800][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.111852][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 223.116809][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.124482][ T5865] usb 8-1: USB disconnect, device number 7 [ 223.130360][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.136329][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 223.154790][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.170268][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.181155][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.196777][ T5867] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.198774][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.209485][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.227787][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.237088][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.241665][ T5867] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 223.256954][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.275110][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.290357][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 223.296978][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.302431][ T5867] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.325426][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.338859][ T5867] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.350809][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.357991][ T5867] usb 4-1: string descriptor 0 read error: -22 [ 223.367944][ T5867] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 223.372430][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.377724][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.400727][ T5867] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.420389][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.434079][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.446516][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.489997][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.529723][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.568905][ T8884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.577850][ T8884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.586753][ T8884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.595592][ T8884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.632548][ T52] usb 4-1: USB disconnect, device number 16 [ 223.724173][ T5867] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 223.724443][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.752425][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.800935][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.809793][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.894310][ T5867] usb 8-1: Using ep0 maxpacket: 8 [ 223.901744][ T5867] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.920210][ T5867] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.931721][ T5867] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.945170][ T5867] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.959452][ T5867] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.968610][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.182524][ T5867] usb 8-1: GET_CAPABILITIES returned 0 [ 224.194352][ T5867] usbtmc 8-1:16.0: can't read capabilities [ 224.405960][ T5867] usb 8-1: USB disconnect, device number 8 [ 225.512809][ T1087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.557677][ T9027] : renamed from ipvlan1 [ 225.664203][ T5895] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 225.816096][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.827760][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.837649][ T5895] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.846778][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.856729][ T5895] usb 8-1: config 0 descriptor?? [ 226.129595][ T1087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.269979][ T5895] hid (null): bogus close delimiter [ 226.392781][ T1087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.448660][ T1087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.472908][ T5895] usb 8-1: language id specifier not provided by device, defaulting to English [ 226.548801][ T1087] bridge_slave_1: left allmulticast mode [ 226.554692][ T1087] bridge_slave_1: left promiscuous mode [ 226.560511][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.573090][ T1087] bridge_slave_0: left allmulticast mode [ 226.579135][ T1087] bridge_slave_0: left promiscuous mode [ 226.585068][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.937945][ T5895] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input24 [ 227.062110][ T5895] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input25 [ 227.125973][ T5895] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input26 [ 227.162019][ T5895] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.000B/input/input27 [ 227.245163][ T5895] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 227.262370][ T5895] usb 8-1: USB disconnect, device number 9 [ 227.337256][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.379129][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.401096][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.422746][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.432913][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.443959][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.591815][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.602376][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.616143][ T1087] bond0 (unregistering): Released all slaves [ 228.069371][ T1087] hsr_slave_0: left promiscuous mode [ 228.086681][ T1087] hsr_slave_1: left promiscuous mode [ 228.113378][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.153295][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.163255][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.174950][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.217315][ T1087] veth1_macvtap: left promiscuous mode [ 228.222875][ T1087] veth0_macvtap: left promiscuous mode [ 228.228669][ T1087] veth1_vlan: left promiscuous mode [ 228.233983][ T1087] veth0_vlan: left promiscuous mode [ 228.287017][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 229.477566][ T5133] Bluetooth: hci2: command tx timeout [ 229.524341][ T5865] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 229.651886][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 229.696263][ T5865] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.703225][ T5865] usb 8-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 229.722051][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.742927][ T5865] usb 8-1: config 0 descriptor?? [ 229.750808][ T5865] ti_usb_3410_5052 8-1:0.0: required endpoints missing [ 229.762490][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 230.424488][ T9068] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (9) [ 230.508248][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 230.510377][ T5865] usb 8-1: USB disconnect, device number 10 [ 230.703289][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.724910][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.732193][ T9039] bridge_slave_0: entered allmulticast mode [ 230.739484][ T9039] bridge_slave_0: entered promiscuous mode [ 230.808411][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.817087][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.825661][ T9039] bridge_slave_1: entered allmulticast mode [ 230.853185][ T9039] bridge_slave_1: entered promiscuous mode [ 230.892231][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.917562][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.948130][ T9039] team0: Port device team_slave_0 added [ 230.972436][ T9039] team0: Port device team_slave_1 added [ 231.014815][ T5865] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.023271][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.030804][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.057112][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.099971][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.107090][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.133799][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.183367][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 231.194680][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.214862][ T9039] hsr_slave_0: entered promiscuous mode [ 231.221785][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.234382][ T9039] hsr_slave_1: entered promiscuous mode [ 231.246720][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.258602][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.267916][ T9039] Cannot create hsr debugfs directory [ 231.277230][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.308707][ T5865] usb 4-1: config 0 descriptor?? [ 231.329986][ T5865] hub 4-1:0.0: USB hub found [ 231.543055][ T5865] hub 4-1:0.0: 1 port detected [ 231.564303][ T5133] Bluetooth: hci2: command tx timeout [ 231.908207][ T9039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.926631][ T9039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.937973][ T9039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.949080][ T9039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.028457][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.046903][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.062541][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.069829][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.142008][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.149214][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.166504][ T5865] hub 4-1:0.0: activate --> -90 [ 232.841024][ T5866] usb 4-1: USB disconnect, device number 17 [ 232.894961][ T5865] usb 4-1-port1: config error [ 233.212514][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.309025][ T9039] veth0_vlan: entered promiscuous mode [ 233.343032][ T9039] veth1_vlan: entered promiscuous mode [ 233.372442][ T9039] veth0_macvtap: entered promiscuous mode [ 233.396644][ T9039] veth1_macvtap: entered promiscuous mode [ 233.488116][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.543183][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.596570][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.636330][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.637383][ T5133] Bluetooth: hci2: command tx timeout [ 233.659570][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.692332][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.724119][ T52] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 233.731774][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.757175][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.778123][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.801628][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.833625][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.867102][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.878848][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.879520][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.892105][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.926716][ T52] usb 9-1: config 0 interface 0 has no altsetting 0 [ 233.933352][ T52] usb 9-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 233.942571][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.952452][ T52] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.964555][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.976008][ T52] usb 9-1: config 0 descriptor?? [ 233.983358][ T52] ti_usb_3410_5052 9-1:0.0: required endpoints missing [ 233.987842][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.000515][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.011299][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.031234][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.042336][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.070796][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 234.089793][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.097696][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.116020][ T5867] usb 4-1: config 0 descriptor?? [ 234.123689][ T9039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.143384][ T9039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.155129][ T5867] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 234.168609][ T9039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.180414][ T9039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.263942][ T9155] syz.5.913[9155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.264297][ T9155] syz.5.913[9155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.303445][ T9155] syz.5.913[9155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.470292][ T5865] usb 9-1: USB disconnect, device number 2 [ 234.571950][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.621272][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.765096][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.773627][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.336320][ T9174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.351975][ T9174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 235.455878][ T5867] gspca_stv06xx: I2C: Read error writing address: -71 [ 235.465467][ T5867] usb 4-1: USB disconnect, device number 18 [ 235.554478][ T5865] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 235.664863][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.7.921'. [ 235.730570][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.744282][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.764648][ T5865] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.773745][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.835064][ T5865] usb 9-1: config 0 descriptor?? [ 236.203541][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.251323][ T5865] hid (null): bogus close delimiter [ 236.276057][ T9180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 236.452621][ T5865] usb 9-1: language id specifier not provided by device, defaulting to English [ 236.887028][ T5865] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000C/input/input28 [ 236.896197][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.920611][ T5865] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000C/input/input29 [ 236.943739][ T5865] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000C/input/input30 [ 236.963188][ T5865] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000C/input/input31 [ 236.980507][ T5865] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 237.036539][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.137258][ T5865] usb 9-1: USB disconnect, device number 3 [ 237.147446][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.267922][ T11] bridge_slave_1: left allmulticast mode [ 237.273788][ T11] bridge_slave_1: left promiscuous mode [ 237.280817][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.290554][ T11] bridge_slave_0: left allmulticast mode [ 237.296496][ T11] bridge_slave_0: left promiscuous mode [ 237.302148][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.894851][ T52] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 237.913609][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.923500][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.932948][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.969506][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.989542][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.998013][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.075248][ T52] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 238.092739][ T52] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.126548][ T52] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.136287][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.144915][ T52] usb 6-1: Product: syz [ 238.149115][ T52] usb 6-1: Manufacturer: syz [ 238.153722][ T52] usb 6-1: SerialNumber: syz [ 238.245594][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.259593][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.280839][ T11] bond0 (unregistering): Released all slaves [ 238.374948][ T52] usb 6-1: 0:2 : does not exist [ 238.416624][ T9217] loop7: detected capacity change from 0 to 16384 [ 238.418050][ T52] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 238.541456][ T52] usb 6-1: USB disconnect, device number 15 [ 238.844795][ T9218] loop7: detected capacity change from 16384 to 16383 [ 238.857973][ T9217] I/O error, dev loop7, sector 8640 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 238.878500][ T9217] I/O error, dev loop7, sector 8640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.964780][ T9217] buffer_io_error: 217 callbacks suppressed [ 238.964867][ T9217] Buffer I/O error on dev loop7, logical block 1080, async page read [ 239.237236][ T9217] I/O error, dev loop7, sector 8640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.262612][ T9217] Buffer I/O error on dev loop7, logical block 1080, async page read [ 239.352832][ T11] hsr_slave_0: left promiscuous mode [ 239.384943][ T11] hsr_slave_1: left promiscuous mode [ 239.396439][ T9216] I/O error, dev loop7, sector 3328 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 239.414800][ T9216] Buffer I/O error on dev loop7, logical block 416, lost async page write [ 239.423402][ T9216] Buffer I/O error on dev loop7, logical block 417, lost async page write [ 239.443608][ T9216] Buffer I/O error on dev loop7, logical block 418, lost async page write [ 239.452229][ T9216] Buffer I/O error on dev loop7, logical block 419, lost async page write [ 239.460806][ T9216] Buffer I/O error on dev loop7, logical block 420, lost async page write [ 239.469404][ T9216] Buffer I/O error on dev loop7, logical block 421, lost async page write [ 239.478487][ T9216] Buffer I/O error on dev loop7, logical block 422, lost async page write [ 239.487452][ T9216] Buffer I/O error on dev loop7, logical block 423, lost async page write [ 239.499880][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.507458][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.518638][ T9216] I/O error, dev loop7, sector 4352 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 239.533983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.537173][ T9216] I/O error, dev loop7, sector 5376 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 239.541618][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.582452][ T9216] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 239.592819][ T11] veth1_macvtap: left promiscuous mode [ 239.598565][ T11] veth0_macvtap: left promiscuous mode [ 239.604370][ T11] veth1_vlan: left promiscuous mode [ 239.609765][ T11] veth0_vlan: left promiscuous mode [ 239.611346][ T9216] I/O error, dev loop7, sector 7424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 239.615243][ T975] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 239.639966][ T9216] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x800 phys_seg 24 prio class 0 [ 239.787209][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.811149][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.822237][ T975] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 239.842088][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.862046][ T975] usb 6-1: config 0 descriptor?? [ 240.044465][ T5133] Bluetooth: hci2: command tx timeout [ 240.099083][ T9240] Bluetooth: MGMT ver 1.23 [ 240.107832][ T9240] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 240.316655][ T975] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 240.325825][ T975] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 240.395562][ T11] team0 (unregistering): Port device team_slave_1 removed [ 240.476039][ T11] team0 (unregistering): Port device team_slave_0 removed [ 240.526691][ T975] cp2112 0003:10C4:EA90.000D: error requesting version [ 240.545883][ T975] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 240.558428][ T975] usb 6-1: USB disconnect, device number 16 [ 241.141585][ T9205] chnl_net:caif_netlink_parms(): no params data found [ 241.179516][ T9253] vlan2: entered promiscuous mode [ 241.188099][ T9253] syz_tun: entered promiscuous mode [ 241.193617][ T9253] vlan2: entered allmulticast mode [ 241.203621][ T9253] syz_tun: entered allmulticast mode [ 241.222190][ T9253] syz_tun: left allmulticast mode [ 241.232087][ T9253] syz_tun: left promiscuous mode [ 241.381899][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.414536][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.421797][ T9205] bridge_slave_0: entered allmulticast mode [ 241.432867][ T9205] bridge_slave_0: entered promiscuous mode [ 241.443938][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.460270][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.469866][ T9205] bridge_slave_1: entered allmulticast mode [ 241.482794][ T9205] bridge_slave_1: entered promiscuous mode [ 241.545994][ T9205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.575390][ T9205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.673982][ T9205] team0: Port device team_slave_0 added [ 241.690070][ T9205] team0: Port device team_slave_1 added [ 241.740170][ T9266] syzkaller0: entered promiscuous mode [ 241.746038][ T52] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 241.757149][ T9266] syzkaller0: entered allmulticast mode [ 241.974265][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 241.981342][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.998749][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.008834][ T52] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 242.017965][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.048455][ T52] usb 6-1: config 0 descriptor?? [ 242.116436][ T5133] Bluetooth: hci2: command tx timeout [ 242.476229][ T52] kone 0003:1E7D:2CED.000E: report_id 1944628200 is invalid [ 242.496015][ T52] kone 0003:1E7D:2CED.000E: item 0 4 1 8 parsing failed [ 242.503533][ T52] kone 0003:1E7D:2CED.000E: parse failed [ 242.519187][ T52] kone 0003:1E7D:2CED.000E: probe with driver kone failed with error -22 [ 242.685149][ T5899] usb 6-1: USB disconnect, device number 17 [ 244.020638][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.027719][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.053827][ T9205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.083567][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.090920][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.190975][ T9205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.201803][ T5133] Bluetooth: hci2: command tx timeout [ 244.341199][ T9205] hsr_slave_0: entered promiscuous mode [ 244.353232][ T9205] hsr_slave_1: entered promiscuous mode [ 244.360269][ T9205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.368310][ T9205] Cannot create hsr debugfs directory [ 245.345891][ T9205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.360096][ T9205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.378888][ T9205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.395336][ T9205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.476794][ T9205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.499405][ T9205] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.511503][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.518710][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.585622][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.592798][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.729460][ T9205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.770489][ T9205] veth0_vlan: entered promiscuous mode [ 245.789822][ T9205] veth1_vlan: entered promiscuous mode [ 245.831460][ T9205] veth0_macvtap: entered promiscuous mode [ 245.846362][ T9205] veth1_macvtap: entered promiscuous mode [ 245.864964][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.887089][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.898173][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.909137][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.919317][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.929985][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.940191][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.950895][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.961237][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.973111][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.984949][ T9205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.013601][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.030960][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.042033][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.053786][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.063754][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.075843][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.085786][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.096590][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.113099][ T9205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.126607][ T9205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.145816][ T9205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.166833][ T9205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.189011][ T9205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.201805][ T9205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.210776][ T9205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.291436][ T5835] Bluetooth: hci2: command tx timeout [ 246.365619][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.377987][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.397303][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.408555][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.425490][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.439570][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.448006][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.476377][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.490660][ T5818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.498748][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.753054][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 246.882694][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.892817][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.901894][ T9318] bridge_slave_0: entered allmulticast mode [ 246.910117][ T9318] bridge_slave_0: entered promiscuous mode [ 246.935683][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.943539][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.953767][ T9318] bridge_slave_1: entered allmulticast mode [ 246.967167][ T9318] bridge_slave_1: entered promiscuous mode [ 247.059641][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.072089][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.172521][ T9318] team0: Port device team_slave_0 added [ 247.190741][ T9318] team0: Port device team_slave_1 added [ 247.217036][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.225551][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.252299][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.274876][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.281857][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.321736][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.386502][ T9318] hsr_slave_0: entered promiscuous mode [ 247.392772][ T9318] hsr_slave_1: entered promiscuous mode [ 247.404264][ T9318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.412633][ T9318] Cannot create hsr debugfs directory [ 247.713514][ T9318] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 247.724678][ T9318] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 247.739063][ T9318] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 247.748207][ T9318] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 247.810378][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.831715][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.842370][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.849535][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.884904][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.892054][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.934246][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 247.934265][ T29] audit: type=1326 audit(1733889640.455:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.7.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0237ff19 code=0x7fc00000 [ 248.060478][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.232186][ T9318] veth0_vlan: entered promiscuous mode [ 248.244536][ T9318] veth1_vlan: entered promiscuous mode [ 248.271205][ T9318] veth0_macvtap: entered promiscuous mode [ 248.281994][ T9318] veth1_macvtap: entered promiscuous mode [ 248.299290][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.310658][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.321576][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.332168][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.342435][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.353170][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.365523][ T5818] Bluetooth: hci2: command 0x0405 tx timeout [ 248.375211][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.389415][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.399322][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.411489][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.421537][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.432613][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.458229][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.491278][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.502004][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.512318][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.523655][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.524204][ T5818] Bluetooth: hci1: command tx timeout [ 248.535422][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.550790][ T29] audit: type=1326 audit(1733889641.085:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.7.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a0237ff19 code=0x7fc00000 [ 248.574802][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.590040][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.600983][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.611181][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.621682][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.632735][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.643193][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.655556][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.669896][ T9318] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.683538][ T9318] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.693500][ T9318] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.703725][ T9318] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.764010][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.778752][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.802411][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.810479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.973497][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.604574][ T5818] Bluetooth: hci1: command tx timeout [ 250.611365][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.742210][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.819946][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.903858][ T11] bridge_slave_1: left allmulticast mode [ 250.910298][ T11] bridge_slave_1: left promiscuous mode [ 250.916392][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.927571][ T11] bridge_slave_0: left allmulticast mode [ 250.933238][ T11] bridge_slave_0: left promiscuous mode [ 250.939033][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.302318][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.313307][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.324448][ T11] bond0 (unregistering): Released all slaves [ 251.581262][ T11] hsr_slave_0: left promiscuous mode [ 251.591398][ T11] hsr_slave_1: left promiscuous mode [ 251.598526][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.606124][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.613821][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.621277][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.643425][ T11] veth1_macvtap: left promiscuous mode [ 251.649968][ T11] veth0_macvtap: left promiscuous mode [ 251.655628][ T11] veth1_vlan: left promiscuous mode [ 251.660862][ T11] veth0_vlan: left promiscuous mode [ 252.072777][ T11] team0 (unregistering): Port device team_slave_1 removed [ 252.121552][ T11] team0 (unregistering): Port device team_slave_0 removed [ 252.511308][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.532607][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.554304][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.565605][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.580727][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.603242][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.674531][ T5133] Bluetooth: hci1: command tx timeout [ 252.805698][ T9387] binder: 9386:9387 ioctl c0306201 0 returned -14 [ 253.327802][ T9381] chnl_net:caif_netlink_parms(): no params data found [ 253.468779][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.483073][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.492745][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.502606][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.518597][ T5895] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 253.521639][ T5818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.548197][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.660215][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.680314][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.693820][ T9381] bridge_slave_0: entered allmulticast mode [ 253.702340][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 253.715335][ T9381] bridge_slave_0: entered promiscuous mode [ 253.715514][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 253.755638][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.759004][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.783248][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.789273][ T5895] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.793395][ T9381] bridge_slave_1: entered allmulticast mode [ 253.799734][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.813664][ T5895] usb 10-1: Product: syz [ 253.818085][ T5895] usb 10-1: Manufacturer: syz [ 253.822781][ T5895] usb 10-1: SerialNumber: syz [ 253.832282][ T5895] usb 10-1: config 0 descriptor?? [ 253.834222][ T9381] bridge_slave_1: entered promiscuous mode [ 253.843827][ T5895] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 253.853976][ T5895] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 253.936405][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.960781][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.022920][ T9381] team0: Port device team_slave_0 added [ 254.045893][ T9381] team0: Port device team_slave_1 added [ 254.095878][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.102895][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.129984][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.173735][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.182043][ T9404] block nbd7: NBD_DISCONNECT [ 254.182043][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.192963][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.216936][ T9404] block nbd7: Disconnected due to user request. [ 254.232923][ T9404] block nbd7: shutting down sockets [ 254.316581][ T9381] hsr_slave_0: entered promiscuous mode [ 254.337678][ T9381] hsr_slave_1: entered promiscuous mode [ 254.352456][ T9381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.363975][ T9381] Cannot create hsr debugfs directory [ 254.373265][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 254.459596][ T5895] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 254.468053][ T5895] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 254.552832][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.575978][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.583259][ T9397] bridge_slave_0: entered allmulticast mode [ 254.592501][ T9397] bridge_slave_0: entered promiscuous mode [ 254.624988][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.639563][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.647076][ T9397] bridge_slave_1: entered allmulticast mode [ 254.654652][ T9397] bridge_slave_1: entered promiscuous mode [ 254.674415][ T5818] Bluetooth: hci2: command tx timeout [ 254.721056][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.755556][ T5818] Bluetooth: hci1: command tx timeout [ 254.783042][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.871336][ T9397] team0: Port device team_slave_0 added [ 254.886330][ T9397] team0: Port device team_slave_1 added [ 254.942636][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.950162][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.977775][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.991595][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.998709][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.024589][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.031225][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.092492][ T9397] hsr_slave_0: entered promiscuous mode [ 255.098976][ T9397] hsr_slave_1: entered promiscuous mode [ 255.105344][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.112925][ T9397] Cannot create hsr debugfs directory [ 255.274416][ T9381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.290048][ T9381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.303466][ T5895] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 255.312808][ T5895] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 255.339094][ T5895] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 255.355061][ T5895] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 255.364990][ T5895] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 255.375202][ T5895] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 255.397810][ T5895] usb 10-1: USB disconnect, device number 2 [ 255.453968][ T9381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.468050][ T9381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.649348][ T5818] Bluetooth: hci5: command tx timeout [ 255.740849][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.772210][ T9381] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.861946][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.869122][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.880202][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.887354][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.957331][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.963664][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132989][ T9397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.167433][ T9397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.219111][ T9397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.242475][ T9397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.254647][ T5866] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 256.424249][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 256.427130][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.451994][ T5866] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 256.454392][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.498644][ T5866] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.535103][ T5866] usb 10-1: config 0 interface 0 has no altsetting 0 [ 256.539016][ T9381] veth0_vlan: entered promiscuous mode [ 256.552790][ T5866] usb 10-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 256.556959][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.573313][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.598590][ T9381] veth1_vlan: entered promiscuous mode [ 256.606657][ T5866] usb 10-1: config 0 descriptor?? [ 256.621000][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.628169][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.663168][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.670368][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.755671][ T5818] Bluetooth: hci2: command tx timeout [ 256.806511][ T9381] veth0_macvtap: entered promiscuous mode [ 256.836019][ T9381] veth1_macvtap: entered promiscuous mode [ 256.885843][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.906039][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.935442][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.953210][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.973358][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.993153][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.014256][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.031363][ T5866] wacom 0003:056A:00C4.000F: unknown main item tag 0x0 [ 257.034218][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.056039][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.059173][ T5866] wacom 0003:056A:00C4.000F: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.9-1/input0 [ 257.073038][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.100887][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.112730][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.135708][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.177949][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.214167][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.234879][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.253282][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.267390][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.278122][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.288184][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.298755][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.322300][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.341667][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.351754][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.371853][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.416099][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.442524][ T9381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.460074][ T9381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.473090][ T9381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.493180][ T9381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.575759][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.714679][ T5818] Bluetooth: hci5: command tx timeout [ 257.770081][ T9397] veth0_vlan: entered promiscuous mode [ 257.813291][ T9397] veth1_vlan: entered promiscuous mode [ 257.832867][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.852147][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.912643][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.923114][ T9397] veth0_macvtap: entered promiscuous mode [ 257.935782][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.951997][ T9397] veth1_macvtap: entered promiscuous mode [ 257.981171][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.997394][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.015165][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.037461][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.056766][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.078865][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.096471][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.114101][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.124002][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.148343][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.167748][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.187895][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.207053][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.224068][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.245619][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.278125][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.312910][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.336965][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.364662][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.391683][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.419227][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.446456][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.474400][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.508166][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.528732][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.539046][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.564524][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.584076][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.604065][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.626606][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.762634][ T9397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.781059][ T9397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.790109][ T9397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.814088][ T9397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.947725][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.966048][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.098666][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.160640][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.196021][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.259289][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.395944][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.475793][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.538191][ T25] usb 10-1: USB disconnect, device number 3 [ 259.622153][ T1108] bridge_slave_1: left allmulticast mode [ 259.635337][ T1108] bridge_slave_1: left promiscuous mode [ 259.641092][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.662744][ T1108] bridge_slave_0: left allmulticast mode [ 259.671262][ T1108] bridge_slave_0: left promiscuous mode [ 259.683936][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.796803][ T5818] Bluetooth: hci5: command tx timeout [ 260.416289][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.437587][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.464552][ T1108] bond0 (unregistering): Released all slaves [ 260.960589][ T1108] hsr_slave_0: left promiscuous mode [ 260.995059][ T1108] hsr_slave_1: left promiscuous mode [ 261.034464][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.041949][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.145014][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.152480][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.170784][ T9606] loop7: detected capacity change from 0 to 16384 [ 261.299768][ T1108] veth1_macvtap: left promiscuous mode [ 261.337787][ T1108] veth0_macvtap: left promiscuous mode [ 261.343505][ T1108] veth1_vlan: left promiscuous mode [ 261.377228][ T9609] loop7: detected capacity change from 16384 to 16383 [ 261.394722][ T1108] veth0_vlan: left promiscuous mode [ 261.416242][ T9606] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 261.470269][ T9606] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.517878][ T9606] buffer_io_error: 656 callbacks suppressed [ 261.517902][ T9606] Buffer I/O error on dev loop7, logical block 256, async page read [ 261.659696][ T9605] I/O error, dev loop7, sector 952 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 261.707763][ T9605] Buffer I/O error on dev loop7, logical block 119, lost async page write [ 261.775933][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.788980][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.799770][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.851355][ T9605] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 261.860041][ T9605] Buffer I/O error on dev loop7, logical block 121, lost async page write [ 261.868667][ T9605] Buffer I/O error on dev loop7, logical block 122, lost async page write [ 261.877321][ T5133] Bluetooth: hci5: command tx timeout [ 261.883044][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.884228][ T9605] Buffer I/O error on dev loop7, logical block 123, lost async page write [ 261.902424][ T9605] Buffer I/O error on dev loop7, logical block 124, lost async page write [ 261.911349][ T9605] Buffer I/O error on dev loop7, logical block 125, lost async page write [ 261.920107][ T9605] Buffer I/O error on dev loop7, logical block 126, lost async page write [ 261.928929][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.928970][ T9605] Buffer I/O error on dev loop7, logical block 127, lost async page write [ 261.949582][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.974343][ T9605] I/O error, dev loop7, sector 1976 op 0x1:(WRITE) flags 0x800 phys_seg 9 prio class 0 [ 262.031070][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.045353][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.056592][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.083004][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.092591][ T5818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 262.100692][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.463183][ T9633] cgroup: fork rejected by pids controller in /syz7 [ 263.037812][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 263.093567][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 264.023260][ T9617] chnl_net:caif_netlink_parms(): no params data found [ 264.034421][ T5133] Bluetooth: hci2: command tx timeout [ 264.194532][ T5133] Bluetooth: hci6: command tx timeout [ 264.440537][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.475420][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.482740][ T9617] bridge_slave_0: entered allmulticast mode [ 264.509165][ T9617] bridge_slave_0: entered promiscuous mode [ 264.529058][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 264.572387][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.588385][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.612088][ T9617] bridge_slave_1: entered allmulticast mode [ 264.623769][ T9617] bridge_slave_1: entered promiscuous mode [ 264.753264][ T9617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.858212][ T9617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.128567][ T9617] team0: Port device team_slave_0 added [ 265.165275][ T9617] team0: Port device team_slave_1 added [ 265.191862][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.209430][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.234426][ T9624] bridge_slave_0: entered allmulticast mode [ 265.257374][ T9624] bridge_slave_0: entered promiscuous mode [ 265.312597][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.335901][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.356082][ T9624] bridge_slave_1: entered allmulticast mode [ 265.363192][ T9624] bridge_slave_1: entered promiscuous mode [ 265.521853][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.530523][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.618600][ T9617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.649352][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.651668][ T9768] serio: Serial port ptm0 [ 265.691628][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.726032][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.733813][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.784201][ T9617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.979815][ T9624] team0: Port device team_slave_0 added [ 266.015615][ T9624] team0: Port device team_slave_1 added [ 266.114338][ T5133] Bluetooth: hci2: command tx timeout [ 266.136268][ T9617] hsr_slave_0: entered promiscuous mode [ 266.184685][ T9617] hsr_slave_1: entered promiscuous mode [ 266.214893][ T9617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.232797][ T9617] Cannot create hsr debugfs directory [ 266.275819][ T5133] Bluetooth: hci6: command tx timeout [ 266.283783][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.291168][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.318768][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.369502][ T9796] pim6reg1: entered promiscuous mode [ 266.375128][ T9796] pim6reg1: entered allmulticast mode [ 266.382701][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.397050][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.428479][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.487751][ T5866] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 266.527861][ T9624] hsr_slave_0: entered promiscuous mode [ 266.545338][ T9624] hsr_slave_1: entered promiscuous mode [ 266.558504][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.591397][ T9624] Cannot create hsr debugfs directory [ 266.654681][ T5866] usb 10-1: Using ep0 maxpacket: 8 [ 266.682188][ T5866] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 266.701780][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.728791][ T5866] usb 10-1: config 0 descriptor?? [ 267.404476][ T9617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.415814][ T9617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.519284][ T9617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.562388][ T9617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.574359][ T52] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 267.764272][ T52] usb 8-1: Using ep0 maxpacket: 16 [ 267.771504][ T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.818358][ T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.850491][ T52] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.884264][ T52] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.907829][ T52] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.957041][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.979426][ T52] usb 8-1: config 0 descriptor?? [ 268.022158][ T9617] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.058806][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.065990][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.136730][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.143913][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.195481][ T5133] Bluetooth: hci2: command tx timeout [ 268.229827][ T9624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.240506][ T9624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.253849][ T9624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.281191][ T9624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.354489][ T5133] Bluetooth: hci6: command tx timeout [ 268.396830][ T9617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.466865][ T52] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0010/input/input35 [ 268.575645][ T52] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 268.579860][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.599314][ T5866] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 268.629799][ T5866] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 268.675272][ T52] usb 8-1: USB disconnect, device number 11 [ 268.676895][ T5866] asix 10-1:0.0: probe with driver asix failed with error -71 [ 268.699356][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.736949][ T5866] usb 10-1: USB disconnect, device number 4 [ 268.746186][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.753378][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.785802][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.792995][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.885429][ T9617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.031479][ T9617] veth0_vlan: entered promiscuous mode [ 269.057017][ T9617] veth1_vlan: entered promiscuous mode [ 269.141380][ T9617] veth0_macvtap: entered promiscuous mode [ 269.171823][ T9617] veth1_macvtap: entered promiscuous mode [ 269.247806][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.296951][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.334311][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.374342][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.392613][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.404177][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.416773][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.427827][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.451315][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.462120][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.492701][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.524222][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.543651][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.555198][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.576531][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.622051][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.652220][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.685359][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.697221][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.715027][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.735445][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1039'. [ 269.740683][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.780908][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.802138][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.822485][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.846359][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.863990][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.887360][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.914241][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.925009][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.938276][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.973391][ T9894] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.982988][ T9894] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.992117][ T9894] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.001200][ T9894] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.015355][ T9894] vxlan0: entered promiscuous mode [ 270.057753][ T9617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.077129][ T9617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.090966][ T9617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.106825][ T9617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.164454][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.275137][ T5133] Bluetooth: hci2: command tx timeout [ 270.434394][ T5133] Bluetooth: hci6: command tx timeout [ 270.442641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.481071][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.620624][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.661304][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.906800][ T9624] veth0_vlan: entered promiscuous mode [ 270.923001][ T9624] veth1_vlan: entered promiscuous mode [ 270.995619][ T9624] veth0_macvtap: entered promiscuous mode [ 271.019735][ T9624] veth1_macvtap: entered promiscuous mode [ 271.119454][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.177017][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.190572][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.211281][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.221395][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.242050][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.253918][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.279340][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.293816][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.321263][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.338540][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.349403][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.359389][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.371357][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.391374][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.403292][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.415007][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.501874][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.526501][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.538384][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.564162][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.591172][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.605018][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.615630][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.626387][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.636801][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.647565][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.658949][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.672576][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.682704][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.693462][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.706381][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.717066][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.745600][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.779892][ T9624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.816872][ T9624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.854085][ T9624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.873890][ T9624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.168197][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.297319][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.348874][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.364158][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.387180][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.428815][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.444882][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.480764][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.610220][ T1108] bridge_slave_1: left allmulticast mode [ 272.624202][ T1108] bridge_slave_1: left promiscuous mode [ 272.629968][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.645937][ T1108] bridge_slave_0: left allmulticast mode [ 272.651605][ T1108] bridge_slave_0: left promiscuous mode [ 272.662200][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.143271][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.154306][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.170690][ T1108] bond0 (unregistering): Released all slaves [ 273.411707][ T1108] hsr_slave_0: left promiscuous mode [ 273.420525][ T1108] hsr_slave_1: left promiscuous mode [ 273.429342][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.438846][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.449149][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.457368][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.478957][ T1108] veth1_macvtap: left promiscuous mode [ 273.484612][ T1108] veth0_macvtap: left promiscuous mode [ 273.490213][ T1108] veth1_vlan: left promiscuous mode [ 273.496089][ T1108] veth0_vlan: left promiscuous mode [ 274.585828][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 274.690441][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 275.426506][ T9984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.444243][ T9984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.471418][ T9984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.494210][ T9984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.502847][ T9984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.547854][ T9984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.583135][ T9984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 275.598479][ T9984] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 275.664371][ T9984] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 275.722434][ T9984] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 275.759269][ T9984] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 275.779476][ T9984] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 275.868044][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.891138][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.900516][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.927358][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.936874][ T5818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.944230][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.326936][T10047] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 276.360025][T10002] chnl_net:caif_netlink_parms(): no params data found [ 276.422528][T10047] CIFS mount error: No usable UNC path provided in device string! [ 276.422528][T10047] [ 276.484631][ T9290] ================================================================== [ 276.492734][ T9290] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 276.500991][ T9290] Read of size 8 at addr ffff888028c87058 by task syz.3.959/9290 [ 276.508704][ T9290] [ 276.511044][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.3.959 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 276.521727][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.531922][ T9290] Call Trace: [ 276.535212][ T9290] [ 276.538168][ T9290] dump_stack_lvl+0x241/0x360 [ 276.542875][ T9290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.548098][ T9290] ? __pfx__printk+0x10/0x10 [ 276.552721][ T9290] ? _printk+0xd5/0x120 [ 276.556907][ T9290] ? __virt_addr_valid+0x183/0x530 [ 276.562037][ T9290] ? __virt_addr_valid+0x183/0x530 [ 276.567169][ T9290] print_report+0x169/0x550 [ 276.571694][ T9290] ? __virt_addr_valid+0x183/0x530 [ 276.577000][ T9290] ? __virt_addr_valid+0x183/0x530 [ 276.582125][ T9290] ? __virt_addr_valid+0x45f/0x530 [ 276.587266][ T9290] ? __phys_addr+0xba/0x170 [ 276.591792][ T9290] ? skb_queue_purge_reason+0xb9/0x500 [ 276.597275][ T9290] kasan_report+0x143/0x180 [ 276.601807][ T9290] ? skb_queue_purge_reason+0xb9/0x500 [ 276.607304][ T9290] skb_queue_purge_reason+0xb9/0x500 [ 276.612623][ T9290] ? mark_lock+0x9a/0x360 [ 276.616986][ T9290] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 276.622899][ T9290] ? drain_workqueue+0x2d3/0x3a0 [ 276.627848][ T9290] ? hci_conn_hash_flush+0x1da/0x240 [ 276.633165][ T9290] vhci_flush+0x44/0x50 [ 276.637351][ T9290] ? __pfx_vhci_flush+0x10/0x10 [ 276.642221][ T9290] hci_dev_reset+0x42a/0x5d0 [ 276.646834][ T9290] sock_do_ioctl+0x158/0x460 [ 276.651448][ T9290] ? __pfx_smack_log+0x10/0x10 [ 276.656243][ T9290] ? __pfx_sock_do_ioctl+0x10/0x10 [ 276.661377][ T9290] ? smk_tskacc+0x300/0x370 [ 276.665907][ T9290] ? smack_file_ioctl+0x29e/0x3a0 [ 276.670951][ T9290] sock_ioctl+0x626/0x8e0 [ 276.675302][ T9290] ? __pfx_sock_ioctl+0x10/0x10 [ 276.680179][ T9290] ? __fget_files+0x2a/0x410 [ 276.684795][ T9290] ? __fget_files+0x2a/0x410 [ 276.689404][ T9290] ? __pfx_sock_ioctl+0x10/0x10 [ 276.694277][ T9290] __se_sys_ioctl+0xf5/0x170 [ 276.698896][ T9290] do_syscall_64+0xf3/0x230 [ 276.703421][ T9290] ? clear_bhb_loop+0x35/0x90 [ 276.708130][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.714046][ T9290] RIP: 0033:0x7f7f66f7ff19 [ 276.718492][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.738125][ T9290] RSP: 002b:00007f7f64dd5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.746576][ T9290] RAX: ffffffffffffffda RBX: 00007f7f67146080 RCX: 00007f7f66f7ff19 [ 276.754666][ T9290] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 276.762671][ T9290] RBP: 00007f7f66ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 276.770665][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.776373][T10047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 276.778634][ T9290] R13: 0000000000000000 R14: 00007f7f67146080 R15: 00007ffefb835158 [ 276.795393][ T9290] [ 276.798428][ T9290] [ 276.800756][ T9290] Allocated by task 8864: [ 276.805091][ T9290] kasan_save_track+0x3f/0x80 [ 276.809793][ T9290] __kasan_kmalloc+0x98/0xb0 [ 276.814408][ T9290] __kmalloc_cache_noprof+0x243/0x390 [ 276.819810][ T9290] vhci_open+0x57/0x360 [ 276.823981][ T9290] misc_open+0x2cc/0x340 [ 276.828237][ T9290] chrdev_open+0x521/0x600 [ 276.832664][ T9290] do_dentry_open+0xbe1/0x1b70 [ 276.837429][ T9290] vfs_open+0x3e/0x330 [ 276.841516][ T9290] path_openat+0x2c84/0x3590 [ 276.846112][ T9290] do_filp_open+0x27f/0x4e0 [ 276.850607][ T9290] do_sys_openat2+0x13e/0x1d0 [ 276.855276][ T9290] __x64_sys_openat+0x247/0x2a0 [ 276.860115][ T9290] do_syscall_64+0xf3/0x230 [ 276.864698][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.870592][ T9290] [ 276.872909][ T9290] Freed by task 8864: [ 276.876871][ T9290] kasan_save_track+0x3f/0x80 [ 276.881543][ T9290] kasan_save_free_info+0x40/0x50 [ 276.886645][ T9290] __kasan_slab_free+0x59/0x70 [ 276.891407][ T9290] kfree+0x196/0x430 [ 276.895299][ T9290] vhci_release+0xbc/0xd0 [ 276.899625][ T9290] __fput+0x23c/0xa50 [ 276.903597][ T9290] task_work_run+0x24f/0x310 [ 276.908184][ T9290] do_exit+0xa2f/0x28e0 [ 276.912328][ T9290] do_group_exit+0x207/0x2c0 [ 276.916907][ T9290] get_signal+0x16b2/0x1750 [ 276.921403][ T9290] arch_do_signal_or_restart+0x96/0x860 [ 276.926940][ T9290] syscall_exit_to_user_mode+0xce/0x340 [ 276.932478][ T9290] do_syscall_64+0x100/0x230 [ 276.937084][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.942970][ T9290] [ 276.945280][ T9290] The buggy address belongs to the object at ffff888028c87000 [ 276.945280][ T9290] which belongs to the cache kmalloc-1k of size 1024 [ 276.959320][ T9290] The buggy address is located 88 bytes inside of [ 276.959320][ T9290] freed 1024-byte region [ffff888028c87000, ffff888028c87400) [ 276.973100][ T9290] [ 276.975415][ T9290] The buggy address belongs to the physical page: [ 276.981808][ T9290] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c80 [ 276.990555][ T9290] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 276.999043][ T9290] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 277.006575][ T9290] page_type: f5(slab) [ 277.010551][ T9290] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 277.019120][ T9290] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 277.027700][ T9290] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 277.036363][ T9290] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 277.045023][ T9290] head: 00fff00000000003 ffffea0000a32001 ffffffffffffffff 0000000000000000 [ 277.053682][ T9290] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 277.062428][ T9290] page dumped because: kasan: bad access detected [ 277.068931][ T9290] page_owner tracks the page as allocated [ 277.074805][ T9290] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7830, tgid 7829 (syz.4.489), ts 157181721084, free_ts 156658241379 [ 277.096072][ T9290] post_alloc_hook+0x1f3/0x230 [ 277.100834][ T9290] get_page_from_freelist+0x3651/0x37a0 [ 277.106461][ T9290] __alloc_pages_noprof+0x292/0x710 [ 277.111652][ T9290] alloc_pages_mpol_noprof+0x3e8/0x680 [ 277.117103][ T9290] alloc_slab_page+0x6a/0x110 [ 277.121777][ T9290] allocate_slab+0x5a/0x2b0 [ 277.126271][ T9290] ___slab_alloc+0xc27/0x14a0 [ 277.130940][ T9290] __slab_alloc+0x58/0xa0 [ 277.135265][ T9290] __kmalloc_cache_noprof+0x27b/0x390 [ 277.140622][ T9290] __vb2_init_fileio+0x1e9/0xf90 [ 277.145549][ T9290] vb2_core_poll+0x46c/0x7b0 [ 277.150126][ T9290] vb2_fop_poll+0x170/0x360 [ 277.154620][ T9290] v4l2_poll+0x140/0x2b0 [ 277.158853][ T9290] __io_arm_poll_handler+0x34b/0x9d0 [ 277.164154][ T9290] io_arm_poll_handler+0x792/0xb70 [ 277.169257][ T9290] io_queue_async+0xa4/0x4e0 [ 277.173839][ T9290] page last free pid 7830 tgid 7829 stack trace: [ 277.180162][ T9290] free_unref_page+0xd2c/0x1000 [ 277.185024][ T9290] __put_partials+0x160/0x1c0 [ 277.189705][ T9290] put_cpu_partial+0x17c/0x250 [ 277.194493][ T9290] __slab_free+0x290/0x380 [ 277.198912][ T9290] qlist_free_all+0x9a/0x140 [ 277.203511][ T9290] kasan_quarantine_reduce+0x14f/0x170 [ 277.208969][ T9290] __kasan_slab_alloc+0x23/0x80 [ 277.213824][ T9290] __kmalloc_cache_noprof+0x1d9/0x390 [ 277.219189][ T9290] __vb2_init_fileio+0x1e9/0xf90 [ 277.224118][ T9290] vb2_core_poll+0x46c/0x7b0 [ 277.228703][ T9290] vb2_fop_poll+0x170/0x360 [ 277.233202][ T9290] v4l2_poll+0x140/0x2b0 [ 277.237440][ T9290] __io_arm_poll_handler+0x34b/0x9d0 [ 277.242722][ T9290] io_arm_poll_handler+0x792/0xb70 [ 277.247828][ T9290] io_queue_async+0xa4/0x4e0 [ 277.252409][ T9290] io_handle_tw_list+0x380/0x500 [ 277.257349][ T9290] [ 277.259675][ T9290] Memory state around the buggy address: [ 277.265293][ T9290] ffff888028c86f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.273443][ T9290] ffff888028c86f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.281580][ T9290] >ffff888028c87000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.289630][ T9290] ^ [ 277.296556][ T9290] ffff888028c87080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.304621][ T9290] ffff888028c87100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.312685][ T9290] ================================================================== [ 277.396322][ T9290] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 277.403561][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.3.959 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 277.414171][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.424240][ T9290] Call Trace: [ 277.427509][ T9290] [ 277.430424][ T9290] dump_stack_lvl+0x241/0x360 [ 277.435101][ T9290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.440368][ T9290] ? __pfx__printk+0x10/0x10 [ 277.444949][ T9290] ? preempt_schedule+0xe1/0xf0 [ 277.449791][ T9290] ? vscnprintf+0x5d/0x90 [ 277.454114][ T9290] panic+0x349/0x880 [ 277.458020][ T9290] ? check_panic_on_warn+0x21/0xb0 [ 277.463146][ T9290] ? __pfx_panic+0x10/0x10 [ 277.467574][ T9290] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 277.473538][ T9290] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.479847][ T9290] ? print_report+0x502/0x550 [ 277.484513][ T9290] check_panic_on_warn+0x86/0xb0 [ 277.489442][ T9290] ? skb_queue_purge_reason+0xb9/0x500 [ 277.494965][ T9290] end_report+0x77/0x160 [ 277.499217][ T9290] kasan_report+0x154/0x180 [ 277.503723][ T9290] ? skb_queue_purge_reason+0xb9/0x500 [ 277.509197][ T9290] skb_queue_purge_reason+0xb9/0x500 [ 277.514509][ T9290] ? mark_lock+0x9a/0x360 [ 277.518889][ T9290] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 277.524777][ T9290] ? drain_workqueue+0x2d3/0x3a0 [ 277.529706][ T9290] ? hci_conn_hash_flush+0x1da/0x240 [ 277.534988][ T9290] vhci_flush+0x44/0x50 [ 277.539136][ T9290] ? __pfx_vhci_flush+0x10/0x10 [ 277.543970][ T9290] hci_dev_reset+0x42a/0x5d0 [ 277.548548][ T9290] sock_do_ioctl+0x158/0x460 [ 277.553144][ T9290] ? __pfx_smack_log+0x10/0x10 [ 277.557915][ T9290] ? __pfx_sock_do_ioctl+0x10/0x10 [ 277.563046][ T9290] ? smk_tskacc+0x300/0x370 [ 277.567561][ T9290] ? smack_file_ioctl+0x29e/0x3a0 [ 277.572575][ T9290] sock_ioctl+0x626/0x8e0 [ 277.576935][ T9290] ? __pfx_sock_ioctl+0x10/0x10 [ 277.581770][ T9290] ? __fget_files+0x2a/0x410 [ 277.586344][ T9290] ? __fget_files+0x2a/0x410 [ 277.590920][ T9290] ? __pfx_sock_ioctl+0x10/0x10 [ 277.595764][ T9290] __se_sys_ioctl+0xf5/0x170 [ 277.600343][ T9290] do_syscall_64+0xf3/0x230 [ 277.604847][ T9290] ? clear_bhb_loop+0x35/0x90 [ 277.609549][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.615462][ T9290] RIP: 0033:0x7f7f66f7ff19 [ 277.619890][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.639509][ T9290] RSP: 002b:00007f7f64dd5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.647929][ T9290] RAX: ffffffffffffffda RBX: 00007f7f67146080 RCX: 00007f7f66f7ff19 [ 277.655920][ T9290] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000006 [ 277.663908][ T9290] RBP: 00007f7f66ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 277.671872][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.679834][ T9290] R13: 0000000000000000 R14: 00007f7f67146080 R15: 00007ffefb835158 [ 277.687816][ T9290] [ 277.691014][ T9290] Kernel Offset: disabled [ 277.695349][ T9290] Rebooting in 86400 seconds..