last executing test programs: 13m35.473401722s ago: executing program 32 (id=9992): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c) 11m36.770761149s ago: executing program 33 (id=11982): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 11m31.021416731s ago: executing program 34 (id=12042): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x0, 0x0) 9m26.083057315s ago: executing program 35 (id=14271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x17}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 9m8.645932004s ago: executing program 36 (id=14463): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000004000), 0x0) 8m58.364511674s ago: executing program 37 (id=14539): add_key$keyring(&(0x7f00000003c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1100c08) keyctl$describe(0x6, r0, 0x0, 0x0) 8m48.636966285s ago: executing program 38 (id=14649): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'cpuset'}]}, 0x8) 8m35.214929009s ago: executing program 39 (id=14773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x82, 0x0, 0x0) 8m34.217253673s ago: executing program 40 (id=14783): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8, 0xfffe, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200]}}]}}]}, 0x8c}}, 0x0) 8m31.68690893s ago: executing program 41 (id=14803): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff0200000000000000000000800000010000000000000007000000000000000004000300"], 0xc0}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 8m14.11612335s ago: executing program 42 (id=14882): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x8000000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440)={0x0, 0xfffc}, 0x8) 8m1.838877388s ago: executing program 43 (id=15034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001400)=""/158, 0x9e}], 0x1}, 0x7fffffff}], 0x2, 0x0, 0x0) 8m0.665149149s ago: executing program 44 (id=15043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8) 7m57.674319355s ago: executing program 45 (id=15068): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) eventfd(0x40) 7m44.0287602s ago: executing program 46 (id=15151): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001140)={[&(0x7f0000000080)='#! ']}) 7m19.632975189s ago: executing program 47 (id=15465): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) 7m16.849045296s ago: executing program 48 (id=15493): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) 7m10.167577975s ago: executing program 49 (id=15548): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="02", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@chain) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r0) 6m32.713840433s ago: executing program 50 (id=15915): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m17.473684213s ago: executing program 51 (id=16031): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 6m13.671302936s ago: executing program 52 (id=16056): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0x0, 0x100}, 0x0, &(0x7f00000001c0)) io_uring_enter(r0, 0x189f, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x199, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000e7e5210cd060f0143a801020301090287010100000000090448"], 0x0) 5m58.684303754s ago: executing program 53 (id=16095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e799d0d4f4efe44e9cec6256aaf10255"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}]}, 0x3c}}, 0x0) 5m43.103405815s ago: executing program 54 (id=16214): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ebebbea5a6bc54a5cf79050aa689c7c0a4feeec8a95f84b6", "56261dcf421246c7fa0f68f32aea17b14d6285984901f27cfcfc7d9f632ca88e"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m35.92706442s ago: executing program 55 (id=16263): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}]}}]}, 0x44}}, 0x0) 5m20.606394728s ago: executing program 56 (id=16372): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') 4m57.519823096s ago: executing program 57 (id=16426): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x48}}, 0x0) 4m57.018699719s ago: executing program 58 (id=16429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0700000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x10001, @mcast1, 0x4}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 4m56.02671467s ago: executing program 59 (id=16435): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 4m52.016800756s ago: executing program 60 (id=16439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a1"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 1m27.009747134s ago: executing program 3 (id=16463): r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x15, r0, 0xffffffffffffffff, 0x0) 1m26.801630255s ago: executing program 3 (id=16464): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x7b6951291079817b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1m25.229807998s ago: executing program 3 (id=16469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xe, 0x7, 0x1, 0x4, 0x80000001, 0x387d}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={r2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, {0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}}, &(0x7f00000000c0)=0xb0) 1m25.046722079s ago: executing program 3 (id=16472): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x104) 1m24.861785046s ago: executing program 3 (id=16474): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) 1m21.924293508s ago: executing program 3 (id=16482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0) 1m21.602547744s ago: executing program 61 (id=16482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0) 1m0.40229987s ago: executing program 6 (id=16693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) 52.417184108s ago: executing program 6 (id=16730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4000) 52.251037118s ago: executing program 6 (id=16731): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 52.003812708s ago: executing program 6 (id=16735): mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x210011, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 51.640146607s ago: executing program 6 (id=16741): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 51.364336987s ago: executing program 6 (id=16742): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSOFTCAR(r1, 0x4b49, &(0x7f0000001080)) 51.02725507s ago: executing program 62 (id=16742): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSOFTCAR(r1, 0x4b49, &(0x7f0000001080)) 49.625736406s ago: executing program 8 (id=16759): r0 = memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r1, 0x0) 49.440682175s ago: executing program 8 (id=16761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) 49.245783733s ago: executing program 8 (id=16762): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 48.233353068s ago: executing program 8 (id=16765): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='mountinfo\x00') preadv(r1, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) 47.988944902s ago: executing program 8 (id=16767): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x5c}}, 0x0) 46.048510522s ago: executing program 8 (id=16771): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0xdf1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 45.69966951s ago: executing program 63 (id=16771): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0xdf1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 33.35778487s ago: executing program 5 (id=16878): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 33.153241361s ago: executing program 5 (id=16881): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 33.007347949s ago: executing program 5 (id=16883): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 32.768064475s ago: executing program 5 (id=16887): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xcf543737ff523749, 0x0, 0x15}}, 0x50) 32.665772633s ago: executing program 5 (id=16888): r0 = userfaultfd(0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 32.468298913s ago: executing program 5 (id=16891): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 32.291735129s ago: executing program 64 (id=16891): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 21.787939278s ago: executing program 1 (id=16994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="fec68371ba5461c3a0e3745a18e17899dc2b21980fe4cd4e107cc76e326db43e758b93a16b391b55f131fac10817789afa5ce40fd9d4760a6dfdae89c2c8b6f8ef55da7c0ecfc4a922368a5c06629db72071f9df7922e28e2058bdaca5fc55a1b54333e536af01719c351bcf1563a21bb97965cb52a4cca1c56c78af305154bc5d239fd352b70f717132de3dcc9154c6455cf12629f3", 0x96}, {&(0x7f0000000400)="9fdbd12b757c33fda855aca151fd719ee442cbce2c40adc4a448e80997c429cd08f15acb98d47f7b16cfd304145ca4824c43eb7f8e42238ab966", 0x3a}, {&(0x7f00000004c0)="c685595a47be5e1cb177e6ffe5da5c9037b0868c1062bf9bd25df70f48f064c9eed28d2eba3a87b257e94efd80291043ac417f4510cece09aaa985d5c7", 0x3d}, {&(0x7f00000005c0)="2c5c6808b3c4c237c97388035236f7561e9c69b029a3e2df3b41309e16d6a62f6d617d815c94ad1236de12a13d5011bca4e7f136c785e0487e86d89a6e86bcc2948a329c5055b0d26e3b7d72064d24f3a028b046a286d4a66ed742efa4c936ee2867504fec5c1e09631de8", 0x6b}, {&(0x7f00000001c0)="39e962f32ba79993467c8fe747294940cb83bbebf87b2de844a653f87bdf193fb2205597946a8d4a959d0645c3dbc75b16340a6a6830fd00fd8cb9", 0x3b}, {&(0x7f0000000800)="94f7cc82f9", 0x5}], 0x6}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001080)="1f5c7f617894d27ac695a152e9b139d5d4f01147ecebda088b0940b216", 0x1d}, {&(0x7f00000010c0)="e1f5fd60365bf9bc6ca2b1a7b404486f349829605471919ddb5a3a106796ffd2c76dee48e19078c5809014e5f9316bf49ff0ff3914dab3", 0x37}, {&(0x7f0000001100)="d5f24c752bd800c286a9f47fcada60fd6e33d8a6ca99431760117cb972fdb2925cc499d134f713c30a93673449d4cf62286d160a15210a46ef6f5a663d805e0901b517a9ca4fcd80a165366d1efe013efb3a7aa208a7f08f4831c58753dc2779bd01762b5c4fe184b0238a92e7e6e16a542e95da5726e3940c1e1f743e325582fd92bddc8e81fbfc274184d37d11490c3d01b29ee15a6b3c5ddbe8623e9a05d25fec9c9bf3a085a4ff0716988839f03f1d5ade22d5a49572f8c631b16dcf5812fe4d718431473c335b7776e59cb71d916e38ed3fb76043f063b07492a1c5", 0xde}], 0x3}}], 0x2, 0x240440c1) 21.632289558s ago: executing program 1 (id=16997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21.445251392s ago: executing program 1 (id=17001): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000a40)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') openat(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) 21.293596464s ago: executing program 1 (id=17002): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001a80)={0x2020}, 0x2020) 21.18177147s ago: executing program 1 (id=17004): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x10040) 20.907125657s ago: executing program 1 (id=17007): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 20.694125372s ago: executing program 65 (id=17007): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 10.362653457s ago: executing program 9 (id=17104): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/58, 0x3a) 10.212822985s ago: executing program 9 (id=17107): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 9.3537811s ago: executing program 9 (id=17114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=@newtaction={0xba0, 0x30, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{0x8d8, 0x1, [@m_ctinfo={0x14c, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x7ff, 0x7, 0x2, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xdd2a, 0x3, 0x2, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0xfffffff8, 0x4, 0x800, 0x401}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x9d, 0x6, "25c2ad9014e43486d15d930831913e333e8d3f19990be79665e3150d6121f0090ba28c77adba968d89cf23bb94510077191b932dcfbd7edb78122d600253bc5cc9235471bb7f018b74e72278a6bc611bfa14a6083be1bcbe16fe69f527cc7d106e1733bbacc7eb0717dca6af1102db8445fdbd17df180ac59aef8a2fb04e168b4c1c207e64bef49b2af80485415b32c40e8177e1012524f37d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xe8, 0x8, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x200, 0x5, 0x80, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}]}, {0x89, 0x6, "b4a879d555530b915b7806a74591d7f3190cfabba882df9c88de367714cd0e0dc73ffab33415e2dc3a28b91d1e1f3b2c579435575649f8f0c4271025fa47a4be73fc81f1c432cf1e6e81f46f8cacf1abd9964be1f726f7b390fa8f026685800f8253b97fa04f6af76a2cf6a69c0046afda36e34d11ddaf19e1633d58644905c6b4f0b4e7cd"}, {0xc, 0x7, {0x31698e8d54fd2dff}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xc0, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x50, 0x8, 0x1, 0xfe37}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x74}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf19b}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x1a6ea37f, 0xffffffffffffffff, 0x753, 0x100}, 0xa}}]}, {0x2d, 0x6, "12bc072b4796b17ab910f5c10492b4762a4d6e4ce237cad610b3826dd100c31c36c97d57e3e86a2d2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x284, 0xe, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x31, 0x6, {0xe, 'security\x00', 0x6, 0x0, "0666e1ae055bef"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x119, 0x6, {0x5b7, 'raw\x00', 0x6, 0x1000, "c157a4394767e165c3d0595675fc7514ebe1b6811e31e6a2e79e00008f0735729db40e704590de84ad3617324e287d14386e5374423ba356474b0f7dfb364d785038017dd3f49253378a1bbb1ab5f2bbbcf70cc93e2e0a3afaf230d64515aa6380f9ee10736c07fa2b2cf3af0c688c4c349a64e4233f154ee9f656ccdfbed5c5becef5d0e7f29c2abda93c8d746a06bfc8c2335493633a3e51e8a0b48d8c6c87df1316ef9a2fbb7baa9b54e1e8eeaea0e05a3841696d7791de81cc089ec0804fa4628f4c48118c005d4343ccac9842fcb080b6bd21d8b57b46a776c8796263a0c98ebe2729be84d3342273b657a9ac"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xd5, 0x6, "f13017300acae4509340f6215d40ce405ca83188009e07be1aaba53ac90cd51f0a65b15ce1c46287cfc83e7385983450618fd1eba6181aba516ce5f3361a38f19cb9e5e18e47778d5513f1fb367ba7d26bcdd626b9cb8ccd343fb3dd6b33cd5321ac2af17018f24a317897d8ce20ebf5a0ae7f7b8905f4546796b44222e8bc9c156dc6f0d477d3f3876d0d02ebc7c243dc27c10d1497f19ef318764f944b04c673b1684aa05d7be96b14671ba56b5366f3890d13b9563f0da0b18692295bc7669eef1af63691d4f2515e2f7c2393f8f656"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x130, 0xd, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7fff, 0x5, 0x8000, 0x9b1b}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9377}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x5}}]}, {0xa9, 0x6, "76adc489435096c016d3269a117c181a7e77ce217afcd5211d2f97753ae4451b6179391a0ac49282ff5e28ec152e2bc3544efa44bd7a29a012461615c493866baedab0061e7c656c2541ad26ba18764f610dd641987b9eec8d0da867b379a7abb1be1d0ad3cf2a3c4e919b76f73167ad18737a60d7b52bd2cb307b3f20939df53c073dadd4e49ce9b8e7186f41476ff6af434a270ee627b4cc36c11666a49878cd2aa504d8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xa4, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x20000000, 0xb, 0x6}, 0x4}}]}, {0x55, 0x6, "065ac1512fbd36841c207fda506e8382e394a901f2a2db35ae6adabb8ba017ab1f820acec1c7364952c7a6ca38527bb12ab7c4a9741047d6b641281f26f9cff6cdb08b504f59ded2e34a044763d6e1a704"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x90, 0x4, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x20000006, 0x965, 0x3ff}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0x7, 0x7, 0xfff, 0x401}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x37}, @TCA_MPLS_LABEL={0x8, 0x5, 0x11d89}]}, {0x11, 0x6, "5c7a4a9e1b2e0723535bc3ba76"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf8, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc1, 0x6, "cd0fed5748e9ccb7e3a71960a9bd109a6aea54be8cbd2b04d945746f4c2ec6eca374c7b86919480d083ce013668f6306b4867db2c3957939b27abc292892b89324f338659f8980fd78e7aeb9a3b8c63a8d2b8086f27228373b1e1a51a50f98725c2f2cb8848148158a2a485ec2dce8bf33c5dbcd05ada0aecaaa66af79ac3b1be74832eed55f6cddf31fa165df9914b5a991cafb54129bfa3dd8282fcb9eb5e1d63ec37f6d58bfc572cf24881e5054fecda103ca8896c02e6268213995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x2b4, 0x1, [@m_mpls={0x2b0, 0xf, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd0, 0x401, 0x2, 0x10, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x15}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x7, 0x1, 0x200}}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x3, 0x5, 0x9, 0x1ff}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x20e, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xba0}}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) 9.249072941s ago: executing program 9 (id=17115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') syz_clone(0x12108000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.064392547s ago: executing program 9 (id=17116): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x4000042, 0xfffffffe}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x10000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc011}, 0x0) 8.840260842s ago: executing program 9 (id=17117): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) 8.466499028s ago: executing program 66 (id=17117): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) 6.159253589s ago: executing program 4 (id=17134): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.678582087s ago: executing program 4 (id=17141): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 5.43968297s ago: executing program 4 (id=17144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40) 5.394122513s ago: executing program 7 (id=17146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b3000040"]) 5.181691527s ago: executing program 7 (id=17149): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3ff) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd, 0x8012, r0, 0x0) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.001059319s ago: executing program 7 (id=17151): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)="2fb50f4f69064cf211dd632970ccb0f0412b", 0x12}], 0x1, 0x4) 4.836261293s ago: executing program 7 (id=17152): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x106) 4.766994866s ago: executing program 7 (id=17154): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000079c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x0, [], 0x5}) 3.446544092s ago: executing program 4 (id=17161): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'fuse\x00'}}, 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x3) 3.237487001s ago: executing program 7 (id=17162): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x40000, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000100)) r2 = io_uring_setup(0x2edd, &(0x7f0000000040)={0x0, 0xfa6d, 0x0, 0x0, 0x324}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x20000000, r3) 2.971036557s ago: executing program 67 (id=17162): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x40000, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000100)) r2 = io_uring_setup(0x2edd, &(0x7f0000000040)={0x0, 0xfa6d, 0x0, 0x0, 0x324}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x20000000, r3) 2.508598013s ago: executing program 4 (id=17168): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 2.312372801s ago: executing program 2 (id=17169): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xffff, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x6, 0x0) sendfile(r0, r1, 0x0, 0x8000) 2.228922628s ago: executing program 2 (id=17170): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.081646938s ago: executing program 4 (id=17171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) 2.081153951s ago: executing program 2 (id=17172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) 1.713223001s ago: executing program 68 (id=17171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) 1.520370054s ago: executing program 0 (id=17175): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x4, 0x6, 0x6, 0x1, 0x200}, &(0x7f0000000100)=0x14) 1.394153154s ago: executing program 0 (id=17176): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r2, &(0x7f0000000040)=""/252, 0xfc) 1.229941129s ago: executing program 0 (id=17177): socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x1ffe, 0x0, 0x0, 0x0, 0x0) 1.094404815s ago: executing program 2 (id=17178): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 1.074384974s ago: executing program 0 (id=17185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 974.215174ms ago: executing program 2 (id=17179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000680)=0x1f, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x1, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 892.375055ms ago: executing program 0 (id=17180): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 777.084245ms ago: executing program 0 (id=17181): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000009c0)=""/73, 0x49) syz_usb_disconnect(r0) 0s ago: executing program 2 (id=17182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x0, 0x4) kernel console output (not intermixed with test programs): . Setting the MTU to 1560 would solve the problem. [ 1247.354102][T12683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.368609][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.377126][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.403832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.426727][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.473610][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.514043][T12676] hsr_slave_0: entered promiscuous mode [ 1247.520901][T12676] hsr_slave_1: entered promiscuous mode [ 1247.530327][T12676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.538105][T12676] Cannot create hsr debugfs directory [ 1247.553610][T12683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.560826][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.588663][T12683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.605191][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.613699][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.642003][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.698500][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.727188][T12711] chnl_net:caif_netlink_parms(): no params data found [ 1247.776061][T12683] hsr_slave_0: entered promiscuous mode [ 1247.785868][T12683] hsr_slave_1: entered promiscuous mode [ 1247.792580][T12683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.800716][T12683] Cannot create hsr debugfs directory [ 1247.904768][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.010421][ T53] Bluetooth: hci2: command tx timeout [ 1248.049343][T12681] hsr_slave_0: entered promiscuous mode [ 1248.058539][T12681] hsr_slave_1: entered promiscuous mode [ 1248.064796][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.073618][T12681] Cannot create hsr debugfs directory [ 1248.121705][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.193932][T12525] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1248.205555][T12525] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1248.279098][T12525] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1248.319844][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.329301][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.342760][T12711] bridge_slave_0: entered allmulticast mode [ 1248.350493][T12711] bridge_slave_0: entered promiscuous mode [ 1248.388752][T12525] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1248.414714][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.422237][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.430820][T12711] bridge_slave_1: entered allmulticast mode [ 1248.441254][T12711] bridge_slave_1: entered promiscuous mode [ 1248.551846][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.618706][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.718725][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.816995][ T53] Bluetooth: hci0: command tx timeout [ 1248.876334][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.887412][ T53] Bluetooth: hci3: command tx timeout [ 1248.909216][T12711] team0: Port device team_slave_0 added [ 1248.918525][T12711] team0: Port device team_slave_1 added [ 1248.968721][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.047330][ T53] Bluetooth: hci4: command tx timeout [ 1249.084109][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.091246][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.117716][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.178547][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.219828][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.230845][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.266885][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.454847][T12711] hsr_slave_0: entered promiscuous mode [ 1249.462457][T12711] hsr_slave_1: entered promiscuous mode [ 1249.470713][T12711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.479966][T12711] Cannot create hsr debugfs directory [ 1249.579964][T12525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.729682][ T12] bridge_slave_1: left allmulticast mode [ 1249.736520][ T12] bridge_slave_1: left promiscuous mode [ 1249.743808][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.760342][ T12] bridge_slave_0: left allmulticast mode [ 1249.767891][ T12] bridge_slave_0: left promiscuous mode [ 1249.774091][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.800101][ T12] bridge_slave_1: left allmulticast mode [ 1249.805772][ T12] bridge_slave_1: left promiscuous mode [ 1249.811812][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.821483][ T12] bridge_slave_0: left allmulticast mode [ 1249.827339][ T12] bridge_slave_0: left promiscuous mode [ 1249.833021][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.843446][ T12] bridge_slave_1: left allmulticast mode [ 1249.851929][ T12] bridge_slave_1: left promiscuous mode [ 1249.858210][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.867186][ T12] bridge_slave_0: left allmulticast mode [ 1249.872845][ T12] bridge_slave_0: left promiscuous mode [ 1249.879809][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.889753][ T12] bridge_slave_1: left allmulticast mode [ 1249.897699][ T12] bridge_slave_1: left promiscuous mode [ 1249.903393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.912845][ T12] bridge_slave_0: left allmulticast mode [ 1249.918673][ T12] bridge_slave_0: left promiscuous mode [ 1249.924348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.937460][ T12] bridge_slave_1: left allmulticast mode [ 1249.943120][ T12] bridge_slave_1: left promiscuous mode [ 1249.967263][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.982415][ T12] bridge_slave_0: left allmulticast mode [ 1249.989972][ T12] bridge_slave_0: left promiscuous mode [ 1249.996160][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.019259][ T12] bridge_slave_1: left allmulticast mode [ 1250.024940][ T12] bridge_slave_1: left promiscuous mode [ 1250.030986][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.041021][ T12] bridge_slave_0: left allmulticast mode [ 1250.046896][ T12] bridge_slave_0: left promiscuous mode [ 1250.052575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.063910][ T12] bridge_slave_1: left allmulticast mode [ 1250.069723][ T12] bridge_slave_1: left promiscuous mode [ 1250.075865][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.085253][ T12] bridge_slave_0: left allmulticast mode [ 1250.101523][ T12] bridge_slave_0: left promiscuous mode [ 1250.108565][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.124276][ T12] bridge_slave_1: left allmulticast mode [ 1250.132455][ T12] bridge_slave_1: left promiscuous mode [ 1250.138664][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.149916][ T12] bridge_slave_0: left allmulticast mode [ 1250.155580][ T12] bridge_slave_0: left promiscuous mode [ 1250.161928][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.897695][ T53] Bluetooth: hci0: command tx timeout [ 1252.115519][ T12] bond0 (unregistering): Released all slaves [ 1252.133024][ T12] bond0 (unregistering): Released all slaves [ 1252.147809][ T12] bond0 (unregistering): Released all slaves [ 1252.164436][ T12] bond0 (unregistering): Released all slaves [ 1252.190114][ T12] bond0 (unregistering): Released all slaves [ 1252.202874][ T12] bond0 (unregistering): Released all slaves [ 1252.219998][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.235048][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.252823][ T12] bond0 (unregistering): Released all slaves [ 1252.431861][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.449020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.463642][ T12] bond0 (unregistering): Released all slaves [ 1252.648783][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.664162][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.675633][ T12] bond0 (unregistering): Released all slaves [ 1252.895382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.911730][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.922746][ T12] bond0 (unregistering): Released all slaves [ 1252.973843][ T53] Bluetooth: hci0: command tx timeout [ 1253.117213][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.135090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.149845][ T12] bond0 (unregistering): Released all slaves [ 1253.171443][T12525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.285598][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.293999][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.397830][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.404987][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.492187][T12676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1253.520472][T12676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1253.571027][ T12] tipc: Disabling bearer [ 1253.594813][ T12] tipc: Left network mode [ 1253.612241][T12676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1253.650933][T12676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1254.144400][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.520765][T12676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.643707][T12676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.674189][T12525] veth0_vlan: entered promiscuous mode [ 1254.685811][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.694241][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.808711][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.817232][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.862621][T12525] veth1_vlan: entered promiscuous mode [ 1255.040779][T12525] veth0_macvtap: entered promiscuous mode [ 1255.082866][T12525] veth1_macvtap: entered promiscuous mode [ 1255.305691][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.318137][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.328421][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.340390][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.350582][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.361425][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.372697][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.384749][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.398824][T12525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.476598][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.492313][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.504632][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.517818][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.530529][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.543582][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.555972][T12525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.568827][T12525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.583136][T12525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.595327][T12681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1255.612605][T12681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1255.641851][ T12] hsr_slave_0: left promiscuous mode [ 1255.648023][ T12] hsr_slave_1: left promiscuous mode [ 1255.656128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.664303][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.679268][ T12] hsr_slave_0: left promiscuous mode [ 1255.686217][ T12] hsr_slave_1: left promiscuous mode [ 1255.695766][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.704893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.714887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.724507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.747456][ T12] hsr_slave_0: left promiscuous mode [ 1255.753672][ T12] hsr_slave_1: left promiscuous mode [ 1255.759876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.767746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.775636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.784070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.815209][ T12] hsr_slave_0: left promiscuous mode [ 1255.821954][ T12] hsr_slave_1: left promiscuous mode [ 1255.837299][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.844757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.853780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.863013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.877054][ T12] hsr_slave_0: left promiscuous mode [ 1255.884609][ T12] hsr_slave_1: left promiscuous mode [ 1255.892343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.901399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.920151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.930207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.030403][ T12] veth1_macvtap: left promiscuous mode [ 1256.035951][ T12] veth0_macvtap: left promiscuous mode [ 1256.042430][ T12] veth1_vlan: left promiscuous mode [ 1256.047833][ T12] veth0_vlan: left promiscuous mode [ 1256.054193][ T12] veth1_macvtap: left promiscuous mode [ 1256.059955][ T12] veth0_macvtap: left promiscuous mode [ 1256.065552][ T12] veth1_vlan: left promiscuous mode [ 1256.070987][ T12] veth0_vlan: left promiscuous mode [ 1256.077391][ T12] veth1_macvtap: left promiscuous mode [ 1256.083554][ T12] veth0_macvtap: left promiscuous mode [ 1256.089680][ T12] veth1_vlan: left promiscuous mode [ 1256.094993][ T12] veth0_vlan: left promiscuous mode [ 1256.101586][ T12] veth1_macvtap: left promiscuous mode [ 1256.107263][ T12] veth0_macvtap: left promiscuous mode [ 1256.112853][ T12] veth1_vlan: left promiscuous mode [ 1256.124504][ T12] veth0_vlan: left promiscuous mode [ 1257.162919][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1257.194997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1257.862455][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1257.919893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1258.985633][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1259.043409][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1259.955551][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1260.015266][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1260.930872][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1260.986517][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1261.573882][T12681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1261.589736][T12681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1261.611089][T12525] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.627263][T12525] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.635973][T12525] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.644716][T12525] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.683835][T12676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.816186][T12683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1261.880576][T12683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1261.897230][T12683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1261.949020][T12683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1262.000473][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.009853][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.074639][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.089100][T12676] veth0_vlan: entered promiscuous mode [ 1262.150738][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.195629][T12676] veth1_vlan: entered promiscuous mode [ 1262.202926][T12711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1262.215256][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.215575][T12711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1262.230898][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.246491][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.253654][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.264994][T12711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1262.320249][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.327397][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.340144][T12711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1262.412997][T12676] veth0_macvtap: entered promiscuous mode [ 1262.482282][T12676] veth1_macvtap: entered promiscuous mode [ 1262.559359][T12681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1262.661631][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.674585][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.688489][T12676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.707961][T12683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.715914][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16444'. [ 1262.757508][T12676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.768210][T12676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.779135][T12676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.788874][T12676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.797696][T12676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.806936][T12676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.815955][T12676] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.939775][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.965616][T12683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.989160][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.064859][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.072003][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.143302][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.171045][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.178220][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.254375][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.261543][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.290664][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.297850][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.348341][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.356206][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.416321][T12681] veth0_vlan: entered promiscuous mode [ 1263.457425][T31754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.468147][T31754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.553874][T12681] veth1_vlan: entered promiscuous mode [ 1263.634441][T12711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.724024][T12681] veth0_macvtap: entered promiscuous mode [ 1263.833274][T12681] veth1_macvtap: entered promiscuous mode [ 1263.870321][T12683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.910567][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.034023][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.045075][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.056161][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.067909][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.079725][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.105387][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.116574][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.127078][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.146243][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.170447][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.243523][T12681] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.266082][T12681] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.275017][T12681] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.284424][T12681] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.309449][T12683] veth0_vlan: entered promiscuous mode [ 1264.345404][T12711] veth0_vlan: entered promiscuous mode [ 1264.360000][T12683] veth1_vlan: entered promiscuous mode [ 1264.495791][T12711] veth1_vlan: entered promiscuous mode [ 1264.549027][T12683] veth0_macvtap: entered promiscuous mode [ 1264.570510][T12683] veth1_macvtap: entered promiscuous mode [ 1264.629631][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.659144][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.684810][T12711] veth0_macvtap: entered promiscuous mode [ 1264.721777][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.746870][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.765051][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.802758][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.817708][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.830733][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.841358][ T5908] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1264.853637][T12683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.883830][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.886830][T12711] veth1_macvtap: entered promiscuous mode [ 1264.893230][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.974892][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.006847][ T5908] usb 9-1: config 0 has no interfaces? [ 1265.013578][ T5908] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1265.018224][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.026882][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1265.053235][ T5908] usb 9-1: SerialNumber: syz [ 1265.059182][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.079850][ T5908] usb 9-1: config 0 descriptor?? [ 1265.094854][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.124409][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.156763][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.178650][T12683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.224208][T12683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.253883][T12683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.266813][T12683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.285827][T12683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.346768][ T5908] usb 9-1: USB disconnect, device number 4 [ 1265.413452][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.479315][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.502734][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.536734][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.556914][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.577506][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.596762][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.612981][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.648581][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.750542][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.770170][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.797134][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.810275][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.851776][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.866807][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.878696][T12711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.891832][T12711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.907284][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.922190][ T29] audit: type=1326 audit(1730133285.196:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12779 comm="syz.6.16455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f239d77e719 code=0x0 [ 1265.932844][T12711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.969843][T12711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.979448][T12711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.988374][T12711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.245444][T12784] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1266.261070][T12784] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1266.263424][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.306448][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.312192][T12784] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1266.365825][T12784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1266.372807][T12784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1266.375892][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.395345][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.496623][T12784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1266.559175][T12784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1266.579070][T12784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1266.598790][T12784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1266.629882][T12784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1266.644868][T12784] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1266.743880][T12784] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1266.798880][T12784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1266.804860][T12784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1266.844986][T12784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1267.020950][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.050490][T31754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.077888][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.094388][T31754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.208046][T28429] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1267.389982][ T12] bridge_slave_1: left allmulticast mode [ 1267.408509][ T12] bridge_slave_1: left promiscuous mode [ 1267.415320][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.426862][T28429] usb 6-1: Using ep0 maxpacket: 16 [ 1267.436113][T28429] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1267.459473][ T12] bridge_slave_0: left allmulticast mode [ 1267.464741][T28429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1267.465294][ T12] bridge_slave_0: left promiscuous mode [ 1267.491325][T28429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1267.496427][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.521095][ T12] bridge_slave_1: left allmulticast mode [ 1267.528156][ T12] bridge_slave_1: left promiscuous mode [ 1267.531717][T28429] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1267.534071][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.560913][ T12] bridge_slave_0: left allmulticast mode [ 1267.566772][T28429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.573537][ T12] bridge_slave_0: left promiscuous mode [ 1267.585609][T28429] usb 6-1: config 0 descriptor?? [ 1267.593952][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.604749][ T12] bridge_slave_1: left allmulticast mode [ 1267.628733][ T12] bridge_slave_1: left promiscuous mode [ 1267.634592][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.654212][ T12] bridge_slave_0: left allmulticast mode [ 1267.666940][ T12] bridge_slave_0: left promiscuous mode [ 1267.681601][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.696660][ T12] bridge_slave_1: left allmulticast mode [ 1267.706089][ T12] bridge_slave_1: left promiscuous mode [ 1267.715560][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.728215][ T12] bridge_slave_0: left allmulticast mode [ 1267.734004][ T12] bridge_slave_0: left promiscuous mode [ 1267.741545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.090261][T28429] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.00BA/input/input188 [ 1268.257222][ T53] Bluetooth: hci8: command 0x0c1a tx timeout [ 1268.294892][T28429] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5005.00BA/input/input189 [ 1268.362801][T28429] kye 0003:0458:5005.00BA: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 1268.398507][T28429] usb 6-1: USB disconnect, device number 39 [ 1268.407082][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 1268.416716][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.459605][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.491370][ T12] bond0 (unregistering): Released all slaves [ 1268.526054][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.577042][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 1268.598085][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.620395][ T12] bond0 (unregistering): Released all slaves [ 1268.657264][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 1268.665552][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.713299][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.757228][ T12] bond0 (unregistering): Released all slaves [ 1268.791633][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.852818][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.897086][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 1268.935679][ T12] bond0 (unregistering): Released all slaves [ 1269.008969][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16461'. [ 1269.210348][ T12] hsr_slave_0: left promiscuous mode [ 1269.265104][ T12] hsr_slave_1: left promiscuous mode [ 1269.315566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.343740][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.362043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.390711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.425980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.452155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.502709][ T12] hsr_slave_0: left promiscuous mode [ 1269.519096][ T12] hsr_slave_1: left promiscuous mode [ 1269.589451][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.606593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.979108][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1270.067177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1270.347700][ T53] Bluetooth: hci8: command 0x0c1a tx timeout [ 1270.498129][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 1270.543387][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1270.657233][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 1270.697937][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1270.726985][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 1270.975179][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 1271.064706][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1271.114247][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1271.657012][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1271.775959][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1272.091855][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16471'. [ 1272.110288][T12883] netlink: 'syz.5.16473': attribute type 10 has an invalid length. [ 1272.127566][T12883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.178329][T12883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.212650][T12883] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1272.413444][ T53] Bluetooth: hci8: command 0x0c1a tx timeout [ 1272.587543][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 1272.597479][T12981] VFS: Mount too revealing [ 1272.726884][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 1272.821774][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 1273.198819][T12465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.209800][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16488'. [ 1273.237995][T12465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.252774][T12465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.261234][T12465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.272149][T12465] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1273.279754][T12465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1273.822770][T13011] chnl_net:caif_netlink_parms(): no params data found [ 1274.377937][T13042] sock: sock_set_timeout: `syz.6.16497' (pid 13042) tries to set negative timeout [ 1274.483571][T13011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.506007][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.526997][T13011] bridge_slave_0: entered allmulticast mode [ 1274.534601][T13011] bridge_slave_0: entered promiscuous mode [ 1274.593467][T13011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.607683][T13011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.621554][T13011] bridge_slave_1: entered allmulticast mode [ 1274.634995][T13011] bridge_slave_1: entered promiscuous mode [ 1274.706614][ T5908] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1274.738401][T13011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.759971][T13011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.880238][ T5908] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1274.914259][ T5908] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.952406][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1274.967674][T13011] team0: Port device team_slave_0 added [ 1274.983271][ T5908] usb 9-1: SerialNumber: syz [ 1275.010483][T13011] team0: Port device team_slave_1 added [ 1275.079942][T13011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.099225][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.144794][T13011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.205900][T13011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.231434][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.313318][T13011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.369000][ T53] Bluetooth: hci0: command tx timeout [ 1275.570807][T13011] hsr_slave_0: entered promiscuous mode [ 1275.593723][T13011] hsr_slave_1: entered promiscuous mode [ 1275.662607][ T5908] cdc_ether 9-1:1.0 eth12: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1275.864188][ T5908] usb 9-1: USB disconnect, device number 5 [ 1275.876427][ T5908] cdc_ether 9-1:1.0 eth12: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1276.121919][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.299116][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.562068][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.762344][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.986934][ T5908] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1277.156762][ T12] bridge_slave_1: left allmulticast mode [ 1277.175893][ T12] bridge_slave_1: left promiscuous mode [ 1277.189793][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.197460][ T5908] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1277.205617][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1277.224616][ T12] bridge_slave_0: left allmulticast mode [ 1277.235103][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1277.256987][ T12] bridge_slave_0: left promiscuous mode [ 1277.257907][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1277.286895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.307243][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1277.337260][ T5908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1277.367444][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.397699][ T5908] usb 9-1: config 0 descriptor?? [ 1277.403856][T13138] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1277.465510][ T53] Bluetooth: hci0: command tx timeout [ 1277.853728][ T5908] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0xd [ 1277.884031][ T5908] plantronics 0003:047F:FFFF.00BB: No inputs registered, leaving [ 1277.937493][ T5908] plantronics 0003:047F:FFFF.00BB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1278.208982][T28429] usb 9-1: USB disconnect, device number 6 [ 1278.291612][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.305115][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.320262][ T12] bond0 (unregistering): Released all slaves [ 1278.684391][T13011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1278.770579][T13011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1278.827477][T13011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1278.850059][T13011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1278.911045][ T12] hsr_slave_0: left promiscuous mode [ 1278.920655][ T12] hsr_slave_1: left promiscuous mode [ 1278.931649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.939627][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.947475][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.955113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.984402][ T12] veth1_macvtap: left promiscuous mode [ 1278.991552][ T12] veth0_macvtap: left promiscuous mode [ 1278.998189][ T12] veth1_vlan: left promiscuous mode [ 1279.003560][ T12] veth0_vlan: left promiscuous mode [ 1279.531045][ T53] Bluetooth: hci0: command tx timeout [ 1279.725390][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1279.779518][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1280.393433][T13240] netlink: 'syz.8.16545': attribute type 9 has an invalid length. [ 1280.434980][T13240] netlink: 134660 bytes leftover after parsing attributes in process `syz.8.16545'. [ 1280.506511][T13011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.609423][T13011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.654784][T31754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.661957][T31754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.680416][ T29] audit: type=1326 audit(1730133299.976:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13252 comm="syz.5.16548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2034f7e719 code=0x0 [ 1280.702328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.702807][T31754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.715868][T31754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.927601][T13011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.004772][T13011] veth0_vlan: entered promiscuous mode [ 1281.032459][T13011] veth1_vlan: entered promiscuous mode [ 1281.071342][T13011] veth0_macvtap: entered promiscuous mode [ 1281.088272][T13011] veth1_macvtap: entered promiscuous mode [ 1281.113239][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.134051][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.147040][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.162088][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.173218][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.188861][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.204250][T13011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.225999][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.242842][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.280481][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.301806][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.322370][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.350994][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.381333][T13011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.426984][T13011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.458165][T13011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.491736][T13011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.516017][T13011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.551317][T13011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.576033][T13011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.606913][ T53] Bluetooth: hci0: command tx timeout [ 1281.939567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.959012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.012670][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16561'. [ 1282.038477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.078930][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.576997][ T5908] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1282.736784][ T5908] usb 9-1: Using ep0 maxpacket: 8 [ 1282.751152][ T5908] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1282.761822][ T5908] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.793253][ T5908] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.843351][ T5908] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1282.882529][ T5908] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.938304][ T5908] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1282.966215][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.241926][T13367] netlink: 'syz.4.16580': attribute type 3 has an invalid length. [ 1283.263117][ T5908] usb 9-1: usb_control_msg returned -32 [ 1283.268866][ T5908] usbtmc 9-1:16.0: can't read capabilities [ 1283.625105][T13388] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 2 [ 1283.853587][T12743] usb 9-1: USB disconnect, device number 7 [ 1283.989918][T13406] netlink: 'syz.5.16588': attribute type 11 has an invalid length. [ 1284.006790][T13406] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16588'. [ 1284.776882][T12743] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1284.950554][T12743] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1284.967485][T12743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.995630][T12743] usb 9-1: Product: syz [ 1285.010977][T12743] usb 9-1: Manufacturer: syz [ 1285.015612][T12743] usb 9-1: SerialNumber: syz [ 1285.044815][T12743] usb 9-1: config 0 descriptor?? [ 1285.482350][T12743] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1285.502531][T12743] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1285.530175][T12743] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 1285.663846][T13476] input: syz0 as /devices/virtual/input/input191 [ 1285.693347][T31961] usb 9-1: USB disconnect, device number 8 [ 1287.371221][T13556] sctp: [Deprecated]: syz.5.16624 (pid 13556) Use of int in max_burst socket option deprecated. [ 1287.371221][T13556] Use struct sctp_assoc_value instead [ 1287.776820][T12743] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1287.938307][T12743] usb 5-1: Using ep0 maxpacket: 32 [ 1287.961914][T12743] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1287.999913][T12743] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1288.027096][T12743] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1288.077391][T12743] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1288.091896][T12743] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1288.113737][T12743] usb 5-1: Product: syz [ 1288.121231][T12743] usb 5-1: Manufacturer: syz [ 1288.137118][T12743] usb 5-1: SerialNumber: syz [ 1288.186170][T13566] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1288.257811][T12743] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input192 [ 1288.324265][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1288.556876][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1288.574934][T12743] usb 5-1: USB disconnect, device number 123 [ 1288.598555][T12743] appletouch 5-1:1.0: input: appletouch disconnected [ 1289.026926][T28429] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1289.210736][T28429] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.226872][T28429] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.251085][T28429] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.264149][T28429] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1289.273430][T28429] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.318072][T28429] usb 9-1: config 0 descriptor?? [ 1289.546239][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16643'. [ 1289.837475][T28429] plantronics 0003:047F:FFFF.00BC: unknown main item tag 0x0 [ 1289.845709][T28429] plantronics 0003:047F:FFFF.00BC: No inputs registered, leaving [ 1289.860497][T28429] plantronics 0003:047F:FFFF.00BC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1289.916136][T13647] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1290.119464][T28429] usb 9-1: USB disconnect, device number 9 [ 1290.830179][T13683] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 1291.316178][T13703] bond_slave_0: entered promiscuous mode [ 1291.322591][T13703] bond_slave_1: entered promiscuous mode [ 1291.341505][T13703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1291.367481][T13703] bond_slave_0: left promiscuous mode [ 1291.372965][T13703] bond_slave_1: left promiscuous mode [ 1291.821297][T13733] team0: entered promiscuous mode [ 1291.836888][T13733] team_slave_0: entered promiscuous mode [ 1291.848043][T13733] team_slave_1: entered promiscuous mode [ 1291.865520][T13731] team0: left promiscuous mode [ 1291.879270][T13731] team_slave_0: left promiscuous mode [ 1291.895253][T13731] team_slave_1: left promiscuous mode [ 1292.598278][T13772] netlink: 576 bytes leftover after parsing attributes in process `syz.8.16674'. [ 1293.617965][T28429] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1293.633918][T13817] netlink: 104 bytes leftover after parsing attributes in process `syz.7.16687'. [ 1293.839489][T28429] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.874690][T28429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.897172][T28429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1293.934348][T28429] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.978521][T28429] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1294.037093][T28429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.073308][T28429] usb 6-1: config 0 descriptor?? [ 1294.494146][T28429] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1294.523411][T28429] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1294.556813][T28429] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 1294.564826][T28429] plantronics 0003:047F:FFFF.00BD: No inputs registered, leaving [ 1294.612479][T28429] plantronics 0003:047F:FFFF.00BD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1295.527381][T28429] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1295.697378][T28429] usb 9-1: Using ep0 maxpacket: 16 [ 1295.705147][T28429] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.736729][T28429] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.749104][T28429] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1295.767444][T28429] usb 9-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1295.787231][T28429] usb 9-1: Product: syz [ 1295.791424][T28429] usb 9-1: Manufacturer: syz [ 1295.812154][T28429] usb 9-1: config 0 descriptor?? [ 1296.308364][T28429] kovaplus 0003:1E7D:2D50.00BE: unknown main item tag 0xd [ 1296.318082][T28429] kovaplus 0003:1E7D:2D50.00BE: hidraw1: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.8-1/input0 [ 1296.827453][ T5906] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 1296.851935][ T5906] usb 6-1: device reset changed ep0 maxpacket size! [ 1296.888294][T27115] usb 6-1: USB disconnect, device number 40 [ 1296.909104][T28429] kovaplus 0003:1E7D:2D50.00BE: couldn't init struct kovaplus_device [ 1296.921927][T28429] kovaplus 0003:1E7D:2D50.00BE: couldn't install mouse [ 1296.940938][T28429] kovaplus 0003:1E7D:2D50.00BE: probe with driver kovaplus failed with error -71 [ 1296.973815][T28429] usb 9-1: USB disconnect, device number 10 [ 1297.051586][T27115] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1297.179604][T13932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1297.227224][T27115] usb 6-1: Using ep0 maxpacket: 8 [ 1297.242233][T27115] usb 6-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d [ 1297.262074][T27115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.279505][T27115] usb 6-1: Product: syz [ 1297.306896][T27115] usb 6-1: Manufacturer: syz [ 1297.311538][T27115] usb 6-1: SerialNumber: syz [ 1297.342470][T27115] usb 6-1: config 0 descriptor?? [ 1297.363692][T27115] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 1297.689177][T13950] netlink: 'syz.8.16711': attribute type 9 has an invalid length. [ 1297.697309][T13950] netlink: 134660 bytes leftover after parsing attributes in process `syz.8.16711'. [ 1298.494616][T27115] gspca_sonixj: reg_w1 err -71 [ 1298.517091][T27115] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1298.547198][T27115] usb 6-1: USB disconnect, device number 41 [ 1300.344053][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.352801][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.300702][T14047] binder: 14045:14047 ioctl c0306201 200001c0 returned -14 [ 1302.357098][T27115] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1302.526785][T27115] usb 9-1: Using ep0 maxpacket: 16 [ 1302.546472][T27115] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.579264][T27115] usb 9-1: config 0 has no interfaces? [ 1302.584836][T27115] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1302.626749][T27115] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.663792][T27115] usb 9-1: config 0 descriptor?? [ 1302.903203][ T5908] usb 9-1: USB disconnect, device number 11 [ 1303.129994][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.545386][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.880092][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.059992][T12465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.074318][T12465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.086035][T12465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.106005][T14128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.117770][T12465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.126527][T12465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1304.134700][T12465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.190826][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.379043][T14140] loop9: detected capacity change from 0 to 2 [ 1304.407563][T14140] Dev loop9: unable to read RDB block 2 [ 1304.413200][T14140] loop9: unable to read partition table [ 1304.424854][T14140] loop9: partition table beyond EOD, truncated [ 1304.431501][T14140] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1304.431501][T14140] ) failed (rc=-5) [ 1304.583142][ T11] bridge_slave_1: left allmulticast mode [ 1304.616860][ T11] bridge_slave_1: left promiscuous mode [ 1304.622619][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.671061][ T11] bridge_slave_0: left allmulticast mode [ 1304.677479][ T11] bridge_slave_0: left promiscuous mode [ 1304.684300][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.846800][T27115] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1304.996904][T27115] usb 5-1: Using ep0 maxpacket: 16 [ 1305.003534][T27115] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.037554][T27115] usb 5-1: config 0 has no interface number 0 [ 1305.067058][T27115] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1305.081603][T27115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.093845][T27115] usb 5-1: Product: syz [ 1305.106786][T27115] usb 5-1: Manufacturer: syz [ 1305.117130][T27115] usb 5-1: SerialNumber: syz [ 1305.123710][T27115] usb 5-1: config 0 descriptor?? [ 1305.149278][T27115] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1305.588460][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.602228][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.622384][ T11] bond0 (unregistering): Released all slaves [ 1305.647608][T14166] tipc: Started in network mode [ 1305.652736][T14166] tipc: Node identity 7f000001, cluster identity 4711 [ 1305.660387][T14166] tipc: Enabled bearer , priority 10 [ 1305.952845][T14133] chnl_net:caif_netlink_parms(): no params data found [ 1306.167128][T12465] Bluetooth: hci1: command tx timeout [ 1306.172600][T27115] gspca_spca1528: reg_w err -71 [ 1306.190321][T27115] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1306.262171][T27115] usb 5-1: USB disconnect, device number 124 [ 1306.506766][ T11] hsr_slave_0: left promiscuous mode [ 1306.522037][ T11] hsr_slave_1: left promiscuous mode [ 1306.532022][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.542928][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.556619][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.569982][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.611728][ T11] veth1_macvtap: left promiscuous mode [ 1306.624365][ T11] veth0_macvtap: left promiscuous mode [ 1306.630672][ T11] veth1_vlan: left promiscuous mode [ 1306.643690][ T11] veth0_vlan: left promiscuous mode [ 1306.747400][T27115] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1306.776816][T12743] tipc: Node number set to 2130706433 [ 1306.919446][T27115] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.937752][T27115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1306.960298][T27115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1306.986453][T27115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.001733][T27115] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.021963][T27115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.036097][T27115] usb 6-1: config 0 descriptor?? [ 1307.383409][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1307.439029][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1307.472694][T27115] plantronics 0003:047F:FFFF.00BF: unknown main item tag 0x5 [ 1307.486242][T27115] plantronics 0003:047F:FFFF.00BF: No inputs registered, leaving [ 1307.530927][T27115] plantronics 0003:047F:FFFF.00BF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1307.752015][T31961] usb 6-1: USB disconnect, device number 42 [ 1308.017682][T27115] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1308.095444][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.102751][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.113347][T14133] bridge_slave_0: entered allmulticast mode [ 1308.121837][T14133] bridge_slave_0: entered promiscuous mode [ 1308.152327][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.161822][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.169407][T27115] usb 5-1: Using ep0 maxpacket: 8 [ 1308.174716][T14133] bridge_slave_1: entered allmulticast mode [ 1308.185509][T27115] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1308.195589][T14133] bridge_slave_1: entered promiscuous mode [ 1308.201679][T27115] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1308.218469][T27115] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1308.228154][T27115] usb 5-1: config 250 has no interface number 0 [ 1308.234468][T27115] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1308.248016][T12465] Bluetooth: hci1: command tx timeout [ 1308.273882][T27115] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1308.285165][T27115] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 1308.305718][T14133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.330922][T14133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.347253][T27115] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1308.368627][T27115] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1308.383613][T27115] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1308.393393][T27115] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1308.401978][T27115] usb 5-1: Product: syz [ 1308.406237][T27115] usb 5-1: SerialNumber: syz [ 1308.420280][T27115] hub 5-1:250.228: bad descriptor, ignoring hub [ 1308.426730][T27115] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1308.493066][T14133] team0: Port device team_slave_0 added [ 1308.542962][T14133] team0: Port device team_slave_1 added [ 1308.557354][T14221] netlink: 'syz.5.16772': attribute type 34 has an invalid length. [ 1308.627993][T27115] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 125 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1308.651325][T14133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.667281][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.756574][T14133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.789217][T14133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.809223][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.882186][T14133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.013574][ C1] usblp0: nonzero read bulk status received: -71 [ 1309.048288][T14133] hsr_slave_0: entered promiscuous mode [ 1309.055367][T14133] hsr_slave_1: entered promiscuous mode [ 1309.071121][T14133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.081003][T14133] Cannot create hsr debugfs directory [ 1309.100695][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1309.113002][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1309.122037][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1309.137242][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1309.150466][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1309.157964][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1309.162591][T14217] usblp0: error -71 reading from printer [ 1309.217990][ C0] usblp0: nonzero read bulk status received: -71 [ 1309.257657][T31961] usb 5-1: USB disconnect, device number 125 [ 1309.268226][T31961] usblp0: removed [ 1309.380872][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.529887][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.633759][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.733772][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.947597][T14246] chnl_net:caif_netlink_parms(): no params data found [ 1310.115156][ T11] bridge_slave_1: left allmulticast mode [ 1310.124863][ T11] bridge_slave_1: left promiscuous mode [ 1310.135319][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.149541][ T11] bridge_slave_0: left allmulticast mode [ 1310.161718][ T11] bridge_slave_0: left promiscuous mode [ 1310.173575][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.328244][T30980] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1310.336858][T12465] Bluetooth: hci1: command tx timeout [ 1310.494046][T30980] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1310.513431][T30980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1310.525895][T30980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1310.539495][T30980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1310.550714][T30980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1310.563640][T30980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1310.574781][T30980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.584960][T30980] usb 5-1: config 0 descriptor?? [ 1310.591163][T14261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1310.741496][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.753937][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.765115][ T11] bond0 (unregistering): Released all slaves [ 1310.789992][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16781'. [ 1310.807271][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16781'. [ 1311.025257][T30980] plantronics 0003:047F:FFFF.00C0: unknown main item tag 0xd [ 1311.037509][T30980] plantronics 0003:047F:FFFF.00C0: No inputs registered, leaving [ 1311.053926][T30980] plantronics 0003:047F:FFFF.00C0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1311.076331][T14246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.083624][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.091778][T14246] bridge_slave_0: entered allmulticast mode [ 1311.099046][T14246] bridge_slave_0: entered promiscuous mode [ 1311.142202][T14246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.150458][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.157780][T14246] bridge_slave_1: entered allmulticast mode [ 1311.164452][T14246] bridge_slave_1: entered promiscuous mode [ 1311.203910][T14246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.220339][T12465] Bluetooth: hci2: command tx timeout [ 1311.242393][T14246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.282218][T14133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1311.308435][ T5906] usb 5-1: USB disconnect, device number 126 [ 1311.384672][T14246] team0: Port device team_slave_0 added [ 1311.393795][T14133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1311.429415][T14246] team0: Port device team_slave_1 added [ 1311.435460][T14133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1311.465394][T14133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1311.500866][T14246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.507943][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.534093][T14246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.546586][T14246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.553717][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.579868][T14246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.601190][ T11] hsr_slave_0: left promiscuous mode [ 1311.608109][ T11] hsr_slave_1: left promiscuous mode [ 1311.624581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.637087][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.647484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.654914][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.668972][T14294] ptrace attach of "./syz-executor exec"[14295] was attempted by ""[14294] [ 1311.707809][ T11] veth1_macvtap: left promiscuous mode [ 1311.715663][ T11] veth0_macvtap: left promiscuous mode [ 1311.725784][ T11] veth1_vlan: left promiscuous mode [ 1311.734917][ T11] veth0_vlan: left promiscuous mode [ 1312.087851][T14306] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1312.407041][T12465] Bluetooth: hci1: command tx timeout [ 1312.896441][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1312.996591][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1313.287100][T12465] Bluetooth: hci2: command tx timeout [ 1314.082373][T14246] hsr_slave_0: entered promiscuous mode [ 1314.148969][T14246] hsr_slave_1: entered promiscuous mode [ 1314.183043][T14246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.198387][T14246] Cannot create hsr debugfs directory [ 1314.289233][T14333] netlink: 76 bytes leftover after parsing attributes in process `syz.7.16804'. [ 1314.465144][T14133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.516591][T14133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.529770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.536910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.575478][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.582609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.662715][T14133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.750287][T14133] veth0_vlan: entered promiscuous mode [ 1314.780293][T14133] veth1_vlan: entered promiscuous mode [ 1314.858856][T14246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1314.870925][T14246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1314.883569][T14133] veth0_macvtap: entered promiscuous mode [ 1314.893498][T14246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1314.902605][T14246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1314.914602][T14133] veth1_macvtap: entered promiscuous mode [ 1314.945979][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.956884][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.967966][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.980434][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.991897][T14133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.005561][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.016189][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.027489][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.038327][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.049061][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.059668][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.070433][T14133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.108307][T14133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.118859][T14133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.128032][T14133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.137312][T14133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.199703][T14246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.233178][T14246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.248641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.257874][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.272246][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.279344][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.289038][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.296106][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.336209][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.355453][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.366057][T14246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1315.366955][T12465] Bluetooth: hci2: command tx timeout [ 1315.376623][T14246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.483537][T14246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.546170][ T29] audit: type=1326 audit(1730133334.836:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.7.16815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7696b7e719 code=0x0 [ 1315.627548][T14246] veth0_vlan: entered promiscuous mode [ 1315.661749][T14246] veth1_vlan: entered promiscuous mode [ 1315.723921][T14246] veth0_macvtap: entered promiscuous mode [ 1315.745475][T14246] veth1_macvtap: entered promiscuous mode [ 1315.780629][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.800610][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.812976][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.823915][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.836551][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.847780][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.859035][T14246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.885891][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.896789][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.906635][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.918135][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.928684][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.939486][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.956164][T14246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.966760][T14246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.982200][T14246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.005174][T14246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.034222][T14246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.043926][T14246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.053658][T14246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.191680][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.216172][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.240473][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.258528][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.377451][T30980] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1316.547364][T30980] usb 5-1: Using ep0 maxpacket: 8 [ 1316.575818][T30980] usb 5-1: config 0 has no interfaces? [ 1316.599038][T30980] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 1316.620670][T30980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.640930][T30980] usb 5-1: Product: syz [ 1316.658529][T30980] usb 5-1: Manufacturer: syz [ 1316.679471][T30980] usb 5-1: SerialNumber: syz [ 1316.710724][T30980] usb 5-1: config 0 descriptor?? [ 1316.988112][ T5906] usb 5-1: USB disconnect, device number 127 [ 1317.314328][ T29] audit: type=1326 audit(1730133336.596:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.7.16826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7696b7e719 code=0x0 [ 1317.336588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.447257][T12465] Bluetooth: hci2: command tx timeout [ 1317.954421][T14437] delete_channel: no stack [ 1320.346882][T12743] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1320.516761][T12743] usb 5-1: Using ep0 maxpacket: 32 [ 1320.535056][T12743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.556482][T12743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.577132][T12743] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1320.604452][T12743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.625076][T12743] usb 5-1: config 0 descriptor?? [ 1320.644318][T12743] hub 5-1:0.0: USB hub found [ 1320.856335][T12743] hub 5-1:0.0: 1 port detected [ 1321.136780][T12743] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1321.143174][T12743] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1321.236364][T12743] usbhid 5-1:0.0: can't add hid device: -71 [ 1321.242679][T12743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1321.335315][T12743] usb 5-1: USB disconnect, device number 2 [ 1321.352358][T14606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.514270][T14615] netlink: 165 bytes leftover after parsing attributes in process `syz.5.16883'. [ 1321.963389][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16892'. [ 1322.399753][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1322.463138][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1322.474419][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1322.482639][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1322.501613][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1322.511360][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1322.652934][T14671] tipc: Started in network mode [ 1322.658446][T14671] tipc: Node identity 7f000001, cluster identity 4711 [ 1322.665680][T14671] tipc: Enabled bearer , priority 10 [ 1322.934487][T14665] chnl_net:caif_netlink_parms(): no params data found [ 1323.085228][T12465] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1323.129840][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.146607][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.154902][T14665] bridge_slave_0: entered allmulticast mode [ 1323.171153][T14665] bridge_slave_0: entered promiscuous mode [ 1323.204099][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.227112][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.234461][T14665] bridge_slave_1: entered allmulticast mode [ 1323.270505][T14665] bridge_slave_1: entered promiscuous mode [ 1323.359034][T14665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.390083][T14665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.420908][ T29] audit: type=1326 audit(1730133342.716:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14708 comm="syz.4.16912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc03837e719 code=0x0 [ 1323.468318][T14665] team0: Port device team_slave_0 added [ 1323.494628][T14665] team0: Port device team_slave_1 added [ 1323.571099][T14665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.582950][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.620794][T14665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.643556][T14665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.657342][T31961] tipc: Node number set to 2130706433 [ 1323.669797][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.703969][T14665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.790536][T31754] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.866833][ T5906] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1323.881496][T14665] hsr_slave_0: entered promiscuous mode [ 1323.888513][T14665] hsr_slave_1: entered promiscuous mode [ 1323.894755][T14665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.904006][T14665] Cannot create hsr debugfs directory [ 1323.928914][T31754] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.029816][T31754] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.037515][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 1324.049609][ T5906] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.066733][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.093501][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.106194][T31754] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.119845][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.134460][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.151884][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.162957][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.436917][ T5906] usb 2-1: usb_control_msg returned -32 [ 1324.442533][ T5906] usbtmc 2-1:16.0: can't read capabilities [ 1324.569402][T12465] Bluetooth: hci4: command tx timeout [ 1324.685087][T31754] bridge_slave_1: left allmulticast mode [ 1324.693205][T31754] bridge_slave_1: left promiscuous mode [ 1324.699092][T31754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.729945][T31754] bridge_slave_0: left allmulticast mode [ 1324.740991][T31754] bridge_slave_0: left promiscuous mode [ 1324.746725][T31754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.900623][T14757] input: syz1 as /devices/virtual/input/input194 [ 1325.964220][T31754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.000051][T31754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.019155][T14802] netlink: 'syz.0.16929': attribute type 9 has an invalid length. [ 1326.030289][T31754] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1326.039077][T14802] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.16929'. [ 1326.039143][T14802] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 1326.070264][T31754] bond0 (unregistering): Released all slaves [ 1326.194104][T31754] tipc: Disabling bearer [ 1326.209616][T31754] tipc: Left network mode [ 1326.632894][T14537] usb 2-1: USB disconnect, device number 111 [ 1326.661047][T12465] Bluetooth: hci4: command tx timeout [ 1326.805861][T14665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1326.847086][T14665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1326.873802][T14665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1326.950749][T14665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1327.086414][T31754] hsr_slave_0: left promiscuous mode [ 1327.100833][T31754] hsr_slave_1: left promiscuous mode [ 1327.121485][T31754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.129887][T31754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.223382][T31754] veth1_macvtap: left promiscuous mode [ 1327.246505][T31754] veth0_macvtap: left promiscuous mode [ 1327.276896][T31754] veth1_vlan: left promiscuous mode [ 1327.287065][T31754] veth0_vlan: left promiscuous mode [ 1327.564724][T14830] openvswitch: netlink: Actions may not be safe on all matching packets [ 1328.169678][T31754] team0 (unregistering): Port device team_slave_1 removed [ 1328.222466][T31754] team0 (unregistering): Port device team_slave_0 removed [ 1328.727199][T12465] Bluetooth: hci4: command tx timeout [ 1329.018324][T14665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.083706][T14665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.109127][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.116270][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.147834][ T5906] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1329.174299][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.181451][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.328111][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1329.334989][ T5906] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1329.343702][ T5906] usb 2-1: config 0 has no interface number 0 [ 1329.358621][ T5906] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1329.370153][ T5906] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1329.382575][ T5906] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1329.406750][ T5906] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1329.422729][T14665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.438117][ T5906] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1329.466974][ T5906] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1329.509891][ T5906] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1329.519416][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.527657][ T5906] usb 2-1: Product: syz [ 1329.535197][ T5906] usb 2-1: Manufacturer: syz [ 1329.548680][T14665] veth0_vlan: entered promiscuous mode [ 1329.556997][ T5906] usb 2-1: SerialNumber: syz [ 1329.579616][ T5906] usb 2-1: config 0 descriptor?? [ 1329.589120][T14868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1329.602469][T14665] veth1_vlan: entered promiscuous mode [ 1329.609203][T14868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1329.683093][T14665] veth0_macvtap: entered promiscuous mode [ 1329.701790][T14665] veth1_macvtap: entered promiscuous mode [ 1329.740500][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.763445][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.818183][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.834531][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.845673][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.856815][ T5906] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 1329.866296][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.876770][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.886961][ T5906] etas_es58x 2-1:0.219: could not retrieve the product info string [ 1329.893221][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.909821][T14665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.979628][ T5906] usb 2-1: USB disconnect, device number 112 [ 1329.987355][ T5906] etas_es58x 2-1:0.219: Disconnecting syz syz [ 1330.017235][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.037852][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.058196][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.070082][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.086923][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.107014][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.122081][T14665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.133083][T14665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.146344][T14665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.170872][T14665] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.202054][T14665] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.215886][T12743] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1330.245177][T14665] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.266406][T14665] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.376361][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.384606][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.416781][T12743] usb 5-1: Using ep0 maxpacket: 32 [ 1330.424499][T12743] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1330.442755][T12743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1330.468860][T12743] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1330.478289][T12743] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1330.496823][T12743] usb 5-1: Product: syz [ 1330.514168][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.517676][T12743] usb 5-1: Manufacturer: syz [ 1330.540078][T12743] usb 5-1: SerialNumber: syz [ 1330.553085][T12743] usb 5-1: config 0 descriptor?? [ 1330.567414][T12743] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1330.578723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.584554][T12743] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1330.806923][T12465] Bluetooth: hci4: command tx timeout [ 1330.831182][ T5906] usb 5-1: USB disconnect, device number 3 [ 1330.837184][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1330.888158][ T5906] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1331.012155][T14940] loop2: detected capacity change from 0 to 7 [ 1331.022477][T14940] Dev loop2: unable to read RDB block 7 [ 1331.046292][T14940] loop2: unable to read partition table [ 1331.083103][T14940] loop2: partition table beyond EOD, truncated [ 1331.113612][T14940] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1331.785633][T14981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.511839][T15024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.998886][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1333.194438][T15049] binder: 15048:15049 ioctl 4018620d 0 returned -22 [ 1333.238206][ T5906] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 1333.246575][ T5906] usb 5-1: config 0 has no interface number 0 [ 1333.253223][ T5906] usb 5-1: config 0 interface 104 has no altsetting 0 [ 1333.268518][ T5906] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1333.278432][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.286581][ T5906] usb 5-1: Product: syz [ 1333.291610][ T5906] usb 5-1: Manufacturer: syz [ 1333.299008][ T5906] usb 5-1: SerialNumber: syz [ 1333.318016][ T5906] usb 5-1: config 0 descriptor?? [ 1333.347379][ T5906] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1333.577312][ T5906] gspca_vc032x: reg_r err -71 [ 1333.582043][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.595256][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.602186][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.610962][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.616310][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.628217][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.633696][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.642836][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.650865][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.656178][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.665630][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.676950][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.683466][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.703929][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.709669][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.733195][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.742003][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.750834][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.756369][ T5906] gspca_vc032x: Unknown sensor... [ 1333.764733][ T5906] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 1333.794845][ T5906] usb 5-1: USB disconnect, device number 4 [ 1333.802648][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.976411][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.988337][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1334.003262][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1334.005260][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.042875][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1334.077013][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1334.102128][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1334.220896][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.383871][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.625028][T15090] veth1_macvtap: entered allmulticast mode [ 1334.672427][T15072] chnl_net:caif_netlink_parms(): no params data found [ 1334.757093][T14537] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1334.801266][T15097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.804161][ T12] bridge_slave_1: left allmulticast mode [ 1334.824690][ T12] bridge_slave_1: left promiscuous mode [ 1334.856140][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.866407][ T12] bridge_slave_0: left allmulticast mode [ 1334.886230][ T12] bridge_slave_0: left promiscuous mode [ 1334.893367][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.926820][T14537] usb 5-1: Using ep0 maxpacket: 16 [ 1334.933875][T14537] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.944399][T14537] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1334.951372][T14537] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1334.960674][T14537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.978792][T14537] usb 5-1: config 0 descriptor?? [ 1335.402344][T14537] hid (null): unknown global tag 0xc [ 1335.432146][T14537] cougar 0003:060B:500A.00C1: usage count exceeds max: fixing up report descriptor [ 1335.442285][T14537] cougar 0003:060B:500A.00C1: unexpected long global item [ 1335.450781][T14537] cougar 0003:060B:500A.00C1: parse failed [ 1335.463511][T14537] cougar 0003:060B:500A.00C1: probe with driver cougar failed with error -22 [ 1335.512031][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.525885][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.542867][ T12] bond0 (unregistering): Released all slaves [ 1335.634026][T14537] usb 5-1: USB disconnect, device number 5 [ 1335.644628][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.675574][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.683727][T15072] bridge_slave_0: entered allmulticast mode [ 1335.691206][T15072] bridge_slave_0: entered promiscuous mode [ 1335.738178][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.746405][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.754597][T15072] bridge_slave_1: entered allmulticast mode [ 1335.761705][T15072] bridge_slave_1: entered promiscuous mode [ 1335.841155][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.913675][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.029893][T15072] team0: Port device team_slave_0 added [ 1336.085792][ T12] hsr_slave_0: left promiscuous mode [ 1336.105008][ T12] hsr_slave_1: left promiscuous mode [ 1336.128283][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.145930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.194417][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17034'. [ 1336.206518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.240785][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.247986][ T53] Bluetooth: hci1: command tx timeout [ 1336.333037][ T12] veth1_macvtap: left promiscuous mode [ 1336.355872][ T12] veth0_macvtap: left promiscuous mode [ 1336.369613][ T12] veth1_vlan: left promiscuous mode [ 1336.386756][ T12] veth0_vlan: left promiscuous mode [ 1336.677388][T31961] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1336.859146][T31961] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1336.884367][T31961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1336.905690][T31961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1336.938061][T31961] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1336.980664][T31961] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1336.992686][T31961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.019036][T31961] usb 10-1: config 0 descriptor?? [ 1337.035035][T15139] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1337.491072][T31961] plantronics 0003:047F:FFFF.00C2: unknown main item tag 0xd [ 1337.501728][T31961] plantronics 0003:047F:FFFF.00C2: No inputs registered, leaving [ 1337.520762][T31961] plantronics 0003:047F:FFFF.00C2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1337.838357][T31961] usb 10-1: USB disconnect, device number 15 [ 1337.985614][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1338.060774][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1338.335121][ T53] Bluetooth: hci1: command tx timeout [ 1338.672083][T15203] program syz.9.17058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.061840][T15072] team0: Port device team_slave_1 added [ 1339.080072][T15185] batadv0: entered promiscuous mode [ 1339.087382][T15185] batadv_slave_0: entered promiscuous mode [ 1339.093429][T15185] batadv_slave_0: left promiscuous mode [ 1339.100176][T15185] batadv0: left promiscuous mode [ 1339.172123][T31961] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1339.220324][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.238413][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.358936][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.372701][T31961] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1339.396881][T31961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1339.415249][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.436112][T31961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1339.450202][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.486732][T31961] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1339.529467][T31961] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.564520][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.576692][T31961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.607633][T31961] usb 10-1: config 0 descriptor?? [ 1339.751268][T15072] hsr_slave_0: entered promiscuous mode [ 1339.794390][T15072] hsr_slave_1: entered promiscuous mode [ 1339.811484][T15072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.825864][T15072] Cannot create hsr debugfs directory [ 1339.896778][ T9260] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1340.028390][T31961] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1340.048369][T31961] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1340.055849][T31961] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1340.070089][ T9260] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1340.070852][T31961] plantronics 0003:047F:FFFF.00C3: No inputs registered, leaving [ 1340.104532][ T9260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1340.128918][T31961] plantronics 0003:047F:FFFF.00C3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1340.146087][ T9260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1340.196774][ T9260] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1340.231788][ T9260] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1340.262382][ T9260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.294877][ T9260] usb 5-1: config 0 descriptor?? [ 1340.327488][T15228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1340.407593][ T53] Bluetooth: hci1: command tx timeout [ 1340.801341][ T9260] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0xd [ 1340.827241][ T9260] plantronics 0003:047F:FFFF.00C4: No inputs registered, leaving [ 1340.871407][ T9260] plantronics 0003:047F:FFFF.00C4: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1341.340081][ T5906] usb 5-1: USB disconnect, device number 6 [ 1341.621096][T15072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1341.655824][T15072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1341.684304][T15072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1341.722247][T15072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1341.875651][T15302] ALSA: seq fatal error: cannot create timer (-22) [ 1341.879038][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.990364][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.062884][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.070044][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.104439][T31754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.111628][T31754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.168351][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17087'. [ 1342.171374][ T9260] usb 10-1: USB disconnect, device number 16 [ 1342.387925][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.507549][ T53] Bluetooth: hci1: command tx timeout [ 1342.553315][T15072] veth0_vlan: entered promiscuous mode [ 1342.594303][T15072] veth1_vlan: entered promiscuous mode [ 1342.673002][T15072] veth0_macvtap: entered promiscuous mode [ 1342.705618][T15072] veth1_macvtap: entered promiscuous mode [ 1342.767359][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.807975][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.822751][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.837326][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.864190][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.897052][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.920762][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.946685][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.963629][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.991288][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17090'. [ 1343.029534][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.059897][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.076129][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.088287][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.099486][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.110133][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.120272][T15072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.131647][T15072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.144506][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.176557][T15072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.186258][T15072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.203509][T15072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.225191][T15072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.428213][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.475730][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.571451][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.611987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.834328][T15381] binder: 15380:15381 ioctl 4018620d 0 returned -22 [ 1343.851556][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17101'. [ 1343.874266][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17101'. [ 1344.668357][T31961] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1344.770878][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17111'. [ 1344.854070][T31961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1344.861068][T31961] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1344.901954][T31961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.932352][T31961] usb 5-1: config 0 descriptor?? [ 1345.307499][ T5891] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1345.487853][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 1345.503822][ T5891] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1345.515487][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.528419][ T5891] usb 3-1: Product: syz [ 1345.532679][ T5891] usb 3-1: Manufacturer: syz [ 1345.542371][ T5891] usb 3-1: SerialNumber: syz [ 1345.557863][ T5891] usb 3-1: config 0 descriptor?? [ 1345.578876][ T5891] as10x_usb: device has been detected [ 1345.585031][ T5891] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1345.647948][ T5891] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1345.649558][ T81] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.714495][ T5891] as10x_usb: error during firmware upload part1 [ 1345.737538][ T5891] Registered device Abilis Systems DVB-Titan [ 1345.826310][ T81] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.844249][ T9260] usb 3-1: USB disconnect, device number 48 [ 1345.879322][ T9260] Unregistered device Abilis Systems DVB-Titan [ 1345.882339][ T9260] as10x_usb: device has been disconnected [ 1346.003621][T31961] video4linux radio48: keene_cmd_set failed (-71) [ 1346.010318][T31961] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1346.045709][T31961] usb 5-1: USB disconnect, device number 7 [ 1346.091951][ T81] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.245138][ T81] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.300635][T12465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1346.311715][T12465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1346.320541][T12465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1346.337742][T12465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1346.346085][T12465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1346.354015][T12465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1346.758888][ T81] bridge_slave_1: left allmulticast mode [ 1346.764582][ T81] bridge_slave_1: left promiscuous mode [ 1346.802964][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.860385][ T81] bridge_slave_0: left allmulticast mode [ 1346.866067][ T81] bridge_slave_0: left promiscuous mode [ 1346.872562][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.077014][T14555] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1347.238836][T14555] usb 3-1: Using ep0 maxpacket: 8 [ 1347.268517][T14555] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1347.301460][T14555] usb 3-1: config 179 has no interface number 0 [ 1347.324662][T14555] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1347.346489][T14555] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1347.374268][T14555] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1347.390039][T14555] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1347.403108][T14555] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1347.424804][T14555] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1347.436531][T14555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.453920][T15493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1347.751201][T14555] usb 3-1: USB disconnect, device number 49 [ 1347.757266][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1347.757311][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1347.866417][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.882782][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.895250][ T81] bond0 (unregistering): Released all slaves [ 1347.913178][T15507] geneve2: entered promiscuous mode [ 1347.922278][T15507] geneve2: entered allmulticast mode [ 1348.132081][T15475] chnl_net:caif_netlink_parms(): no params data found [ 1348.407749][ T53] Bluetooth: hci4: command tx timeout [ 1348.629033][ T81] hsr_slave_0: left promiscuous mode [ 1348.659242][ T81] hsr_slave_1: left promiscuous mode [ 1348.691744][T15556] input: syz1 as /devices/virtual/input/input197 [ 1348.727678][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.735105][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.806513][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.815853][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.855966][T12745] udevd[12745]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1348.867597][T12745] udevd[12745]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1348.895940][ T81] veth1_macvtap: left promiscuous mode [ 1348.908005][ T81] veth0_macvtap: left promiscuous mode [ 1348.913545][ T81] veth1_vlan: left promiscuous mode [ 1348.919377][ T81] veth0_vlan: left promiscuous mode [ 1349.263637][T15577] input: syz0 as /devices/virtual/input/input198 [ 1349.369737][ T9260] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1349.541487][ T9260] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1349.551009][ T9260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.578073][ T9260] usb 3-1: config 0 descriptor?? [ 1349.607548][ T9260] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1350.138117][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1350.226034][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1350.227840][ T9260] gp8psk: usb in 146 operation failed. [ 1350.256879][ T9260] gp8psk: failed to get FW version [ 1350.262749][ T9260] gp8psk: usb in 149 operation failed. [ 1350.270989][ T9260] gp8psk: failed to get FPGA version [ 1350.298177][ T9260] gp8psk: usb out operation failed. [ 1350.307174][ T9260] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1350.335631][ T9260] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1350.373165][ T9260] usb 3-1: USB disconnect, device number 50 [ 1350.486787][ T53] Bluetooth: hci4: command tx timeout [ 1350.977048][T15601] vlan2: entered promiscuous mode [ 1350.998992][T15601] veth0_to_hsr: entered promiscuous mode [ 1351.017908][T15601] veth0_to_hsr: left promiscuous mode [ 1351.081879][T15475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.089700][T15475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.107311][T15475] bridge_slave_0: entered allmulticast mode [ 1351.137082][T15475] bridge_slave_0: entered promiscuous mode [ 1351.167055][T15475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.174686][T15475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.211431][T15475] bridge_slave_1: entered allmulticast mode [ 1351.229275][T15475] bridge_slave_1: entered promiscuous mode [ 1351.313421][T15475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.336522][T15475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.441763][T15475] team0: Port device team_slave_0 added [ 1351.460295][T15475] team0: Port device team_slave_1 added [ 1351.598871][T15475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.605853][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.631800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.719615][T15475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.753992][T15475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.776803][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.802698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.863285][T15475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.913259][T12465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1351.931190][T12465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1351.944347][T12465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1351.964404][T12465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1351.975965][T12465] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1351.983433][T12465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1352.182195][T15475] hsr_slave_0: entered promiscuous mode [ 1352.196400][T15475] hsr_slave_1: entered promiscuous mode [ 1352.220810][T15475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.246762][T15475] Cannot create hsr debugfs directory [ 1352.520719][ T81] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.581809][ T53] Bluetooth: hci4: command tx timeout [ 1352.762756][ T81] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.910692][ T81] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.096562][ T81] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.172182][T12465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1353.181890][T12465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1353.195504][T12465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1353.205213][T12465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1353.213738][T12465] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1353.223377][T12465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1353.830863][T15639] chnl_net:caif_netlink_parms(): no params data found [ 1353.909490][ T81] bridge_slave_1: left allmulticast mode [ 1353.915222][ T81] bridge_slave_1: left promiscuous mode [ 1353.941458][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.958750][ T81] bridge_slave_0: left allmulticast mode [ 1353.964450][ T81] bridge_slave_0: left promiscuous mode [ 1353.976517][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.095486][ T53] Bluetooth: hci3: command tx timeout [ 1354.505541][T15707] [ 1354.507886][T15707] ====================================================== [ 1354.514897][T15707] WARNING: possible circular locking dependency detected [ 1354.521898][T15707] 6.12.0-rc5-syzkaller #0 Not tainted [ 1354.527252][T15707] ------------------------------------------------------ [ 1354.534273][T15707] syz.2.17182/15707 is trying to acquire lock: [ 1354.540419][T15707] ffff88806651ea18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1354.550106][T15707] [ 1354.550106][T15707] but task is already holding lock: [ 1354.557458][T15707] ffff888032a471d0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 1354.568167][T15707] [ 1354.568167][T15707] which lock already depends on the new lock. [ 1354.568167][T15707] [ 1354.578557][T15707] [ 1354.578557][T15707] the existing dependency chain (in reverse order) is: [ 1354.587555][T15707] [ 1354.587555][T15707] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1354.596242][T15707] lock_acquire+0x1ed/0x550 [ 1354.601266][T15707] down_write+0x99/0x220 [ 1354.606020][T15707] process_measurement+0x439/0x1fb0 [ 1354.611733][T15707] ima_file_mmap+0x13d/0x2b0 [ 1354.616837][T15707] security_mmap_file+0x7e7/0xa40 [ 1354.622369][T15707] __se_sys_remap_file_pages+0x6e6/0xa50 [ 1354.628513][T15707] do_syscall_64+0xf3/0x230 [ 1354.633531][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.639938][T15707] [ 1354.639938][T15707] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1354.647499][T15707] validate_chain+0x18ef/0x5920 [ 1354.652868][T15707] __lock_acquire+0x1384/0x2050 [ 1354.658234][T15707] lock_acquire+0x1ed/0x550 [ 1354.663248][T15707] down_read_killable+0xca/0xd30 [ 1354.668695][T15707] mmap_read_lock_killable+0x1d/0x70 [ 1354.674488][T15707] lock_mm_and_find_vma+0x29c/0x2f0 [ 1354.680200][T15707] exc_page_fault+0x1bf/0x8c0 [ 1354.685384][T15707] asm_exc_page_fault+0x26/0x30 [ 1354.690746][T15707] fault_in_readable+0x173/0x2d0 [ 1354.696197][T15707] fault_in_iov_iter_readable+0x229/0x280 [ 1354.702427][T15707] generic_perform_write+0x259/0x6d0 [ 1354.708221][T15707] shmem_file_write_iter+0xf9/0x120 [ 1354.713931][T15707] vfs_write+0xaeb/0xd30 [ 1354.718684][T15707] ksys_write+0x183/0x2b0 [ 1354.723518][T15707] do_syscall_64+0xf3/0x230 [ 1354.728532][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.734938][T15707] [ 1354.734938][T15707] other info that might help us debug this: [ 1354.734938][T15707] [ 1354.745153][T15707] Possible unsafe locking scenario: [ 1354.745153][T15707] [ 1354.752591][T15707] CPU0 CPU1 [ 1354.757941][T15707] ---- ---- [ 1354.763294][T15707] lock(&sb->s_type->i_mutex_key#12); [ 1354.768754][T15707] lock(&mm->mmap_lock); [ 1354.775594][T15707] lock(&sb->s_type->i_mutex_key#12); [ 1354.783569][T15707] rlock(&mm->mmap_lock); [ 1354.787977][T15707] [ 1354.787977][T15707] *** DEADLOCK *** [ 1354.787977][T15707] [ 1354.796103][T15707] 3 locks held by syz.2.17182/15707: [ 1354.801371][T15707] #0: ffff888077221278 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 1354.810418][T15707] #1: ffff888035682420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1354.819296][T15707] #2: ffff888032a471d0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 1354.830435][T15707] [ 1354.830435][T15707] stack backtrace: [ 1354.836318][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.2.17182 Not tainted 6.12.0-rc5-syzkaller #0 [ 1354.845413][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1354.855453][T15707] Call Trace: [ 1354.858720][T15707] [ 1354.861642][T15707] dump_stack_lvl+0x241/0x360 [ 1354.866311][T15707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.871497][T15707] ? __pfx__printk+0x10/0x10 [ 1354.876078][T15707] print_circular_bug+0x13a/0x1b0 [ 1354.881092][T15707] check_noncircular+0x36a/0x4a0 [ 1354.886026][T15707] ? __pfx_check_noncircular+0x10/0x10 [ 1354.891478][T15707] ? lockdep_lock+0x123/0x2b0 [ 1354.896147][T15707] ? __pfx_validate_chain+0x10/0x10 [ 1354.901336][T15707] validate_chain+0x18ef/0x5920 [ 1354.906184][T15707] ? __pfx_validate_chain+0x10/0x10 [ 1354.911372][T15707] ? mark_lock+0x9a/0x360 [ 1354.915689][T15707] ? __pfx_validate_chain+0x10/0x10 [ 1354.920876][T15707] ? __lock_acquire+0x1384/0x2050 [ 1354.925897][T15707] ? mark_lock+0x9a/0x360 [ 1354.930215][T15707] ? __lock_acquire+0x1384/0x2050 [ 1354.935234][T15707] ? mark_lock+0x9a/0x360 [ 1354.939550][T15707] __lock_acquire+0x1384/0x2050 [ 1354.944398][T15707] lock_acquire+0x1ed/0x550 [ 1354.948893][T15707] ? mmap_read_lock_killable+0x1d/0x70 [ 1354.954345][T15707] ? __pfx_lock_acquire+0x10/0x10 [ 1354.959364][T15707] ? __pfx___might_resched+0x10/0x10 [ 1354.964641][T15707] ? __folio_batch_add_and_move+0x845/0xf00 [ 1354.970522][T15707] ? __pfx_lru_add+0x10/0x10 [ 1354.975098][T15707] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 1354.981327][T15707] down_read_killable+0xca/0xd30 [ 1354.986254][T15707] ? mmap_read_lock_killable+0x1d/0x70 [ 1354.991701][T15707] ? folio_add_lru+0x28f/0x870 [ 1354.996451][T15707] ? cmp_ex_search+0x74/0xa0 [ 1355.001027][T15707] ? mmap_read_lock_killable+0x1d/0x70 [ 1355.006474][T15707] ? bsearch+0x98/0xc0 [ 1355.010529][T15707] ? __pfx_down_read_killable+0x10/0x10 [ 1355.016067][T15707] ? search_extable+0xb3/0x100 [ 1355.020820][T15707] ? __pfx_search_extable+0x10/0x10 [ 1355.026006][T15707] ? fault_in_readable+0x173/0x2d0 [ 1355.031114][T15707] ? __pfx_down_read_trylock+0x10/0x10 [ 1355.036562][T15707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1355.042881][T15707] ? shmem_allowable_huge_orders+0x1f2/0x3d0 [ 1355.048851][T15707] mmap_read_lock_killable+0x1d/0x70 [ 1355.054127][T15707] lock_mm_and_find_vma+0x29c/0x2f0 [ 1355.059337][T15707] exc_page_fault+0x1bf/0x8c0 [ 1355.064008][T15707] asm_exc_page_fault+0x26/0x30 [ 1355.068847][T15707] RIP: 0010:fault_in_readable+0x173/0x2d0 [ 1355.074559][T15707] Code: 00 fc ff df 4c 89 e8 4f 8d ac 25 ff 0f 00 00 49 81 e5 00 f0 ff ff 49 39 c5 72 7a e8 b7 bf b3 ff 4c 39 eb 74 7d 4c 89 64 24 08 <44> 8a 23 43 0f b6 04 3e 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 1355.094150][T15707] RSP: 0018:ffffc90004eafa40 EFLAGS: 00050287 [ 1355.100212][T15707] RAX: ffffffff81e118d9 RBX: 0000000020401000 RCX: 0000000000040000 [ 1355.108171][T15707] RDX: ffffc90011791000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1355.116129][T15707] RBP: ffffc90004eafaf8 R08: ffffffff81e1186c R09: ffffffff84ba85c9 [ 1355.124088][T15707] R10: 0000000000000002 R11: ffff8880266e8000 R12: 0000000000200000 [ 1355.132045][T15707] R13: 0000000020601000 R14: 1ffff920009d5f50 R15: dffffc0000000000 [ 1355.140008][T15707] ? fault_in_iov_iter_readable+0x49/0x280 [ 1355.145809][T15707] ? fault_in_readable+0xfc/0x2d0 [ 1355.150823][T15707] ? fault_in_readable+0x169/0x2d0 [ 1355.155930][T15707] ? __pfx_fault_in_readable+0x10/0x10 [ 1355.161385][T15707] ? folio_unlock+0x126/0x2f0 [ 1355.166056][T15707] ? inode_to_bdi+0x69/0xf0 [ 1355.170546][T15707] fault_in_iov_iter_readable+0x229/0x280 [ 1355.176256][T15707] generic_perform_write+0x259/0x6d0 [ 1355.181534][T15707] ? __pfx_generic_perform_write+0x10/0x10 [ 1355.187329][T15707] ? __pfx_generic_write_checks+0x10/0x10 [ 1355.193037][T15707] ? rcu_read_lock_any_held+0xb7/0x160 [ 1355.198482][T15707] ? file_update_time+0x2a0/0x430 [ 1355.203497][T15707] shmem_file_write_iter+0xf9/0x120 [ 1355.208689][T15707] vfs_write+0xaeb/0xd30 [ 1355.212927][T15707] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1355.218731][T15707] ? __pfx_vfs_write+0x10/0x10 [ 1355.223491][T15707] ? fdget_pos+0x24e/0x320 [ 1355.227899][T15707] ksys_write+0x183/0x2b0 [ 1355.232215][T15707] ? __pfx_ksys_write+0x10/0x10 [ 1355.237051][T15707] ? do_syscall_64+0x100/0x230 [ 1355.241804][T15707] ? do_syscall_64+0xb6/0x230 [ 1355.246466][T15707] do_syscall_64+0xf3/0x230 [ 1355.250962][T15707] ? clear_bhb_loop+0x35/0x90 [ 1355.255629][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.261508][T15707] RIP: 0033:0x7f0cd6d7e719 [ 1355.265909][T15707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.285504][T15707] RSP: 002b:00007f0cd7b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.293906][T15707] RAX: ffffffffffffffda RBX: 00007f0cd6f35f80 RCX: 00007f0cd6d7e719 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1355.301865][T15707] RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000003 [ 1355.309826][T15707] RBP: 00007f0cd6df132e R08: 0000000000000000 R09: 0000000000000000 [ 1355.317782][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.325740][T15707] R13: 0000000000000000 R14: 00007f0cd6f35f80 R15: 00007f0cd705fa28 [ 1355.333705][T15707] [ 1355.356677][ T53] Bluetooth: hci4: command tx timeout [ 1355.373713][ T53] Bluetooth: hci0: command tx timeout [ 1355.407520][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.459331][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.475617][ T81] bond0 (unregistering): Released all slaves [ 1356.072191][ T81] hsr_slave_0: left promiscuous mode [ 1356.078850][ T81] hsr_slave_1: left promiscuous mode [ 1356.113470][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.137567][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.180340][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.213288][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.236444][ T81] veth1_macvtap: left promiscuous mode [ 1356.246758][ T81] veth0_macvtap: left promiscuous mode [ 1356.252331][ T81] veth1_vlan: left promiscuous mode [ 1356.263987][ T81] veth0_vlan: left promiscuous mode [ 1356.559685][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1356.600339][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1357.094360][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.145869][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.196522][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.243090][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.336014][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.385079][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.431228][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.481958][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.556248][ T81] bridge_slave_1: left allmulticast mode [ 1357.571657][ T81] bridge_slave_1: left promiscuous mode [ 1357.577608][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.585705][ T81] bridge_slave_0: left allmulticast mode [ 1357.594112][ T81] bridge_slave_0: left promiscuous mode [ 1357.600730][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.613129][ T81] bridge_slave_1: left allmulticast mode [ 1357.619182][ T81] bridge_slave_1: left promiscuous mode [ 1357.624963][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.634154][ T81] bridge_slave_0: left allmulticast mode [ 1357.641362][ T81] bridge_slave_0: left promiscuous mode [ 1357.647169][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.656043][ T81] bridge_slave_1: left allmulticast mode [ 1357.663315][ T81] bridge_slave_1: left promiscuous mode [ 1357.669124][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.680849][ T81] bridge_slave_0: left allmulticast mode [ 1357.686508][ T81] bridge_slave_0: left promiscuous mode [ 1357.692357][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.039494][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.049497][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.059329][ T81] bond0 (unregistering): Released all slaves [ 1358.067661][ T81] bond0 (unregistering): Released all slaves [ 1358.080317][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.090744][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.101773][ T81] bond0 (unregistering): Released all slaves [ 1358.113684][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.123719][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.133516][ T81] bond0 (unregistering): Released all slaves [ 1358.478425][ T81] hsr_slave_0: left promiscuous mode [ 1358.484084][ T81] hsr_slave_1: left promiscuous mode [ 1358.492350][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.501075][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.510669][ T81] hsr_slave_0: left promiscuous mode [ 1358.516316][ T81] hsr_slave_1: left promiscuous mode [ 1358.523140][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.530591][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.540194][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.548092][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.558061][ T81] hsr_slave_0: left promiscuous mode [ 1358.563744][ T81] hsr_slave_1: left promiscuous mode [ 1358.569816][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.577255][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.584750][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.592479][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.602668][ T81] veth1_macvtap: left promiscuous mode [ 1358.608262][ T81] veth0_macvtap: left promiscuous mode [ 1358.613784][ T81] veth1_vlan: left promiscuous mode [ 1358.619356][ T81] veth0_vlan: left promiscuous mode [ 1358.625153][ T81] veth1_macvtap: left promiscuous mode [ 1358.630711][ T81] veth0_macvtap: left promiscuous mode [ 1358.636226][ T81] veth1_vlan: left promiscuous mode [ 1358.641560][ T81] veth0_vlan: left promiscuous mode [ 1358.797586][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1358.824111][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1359.010008][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1359.035013][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1359.221315][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1359.252576][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1361.769633][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.775939][ T1302] ieee802154 phy1 wpan1: encryption failed: -22