last executing test programs: 1m49.740443226s ago: executing program 0 (id=1104): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)='\v\x00', 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) pwrite64(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x0) 1m46.871491525s ago: executing program 0 (id=1110): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x58, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) 1m46.240795893s ago: executing program 0 (id=1112): syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_emit_vhci(0x0, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) io_setup(0x0, &(0x7f00000004c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000006000000000000000000000000000000ff0700000000000003000000000000000000000000000000000000000000000000000000000000000e0000000300000002000000000000000f00000000000000070000000000000093ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd6410f200"/619]) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000a40)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}) 1m41.383038768s ago: executing program 0 (id=1117): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) acct(0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x6f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0xb, 0x148, 0x300, 0x148, 0x3b8, 0x230, 0x242, 0x3b8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0x98, 0xb8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "bd81"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xa017, 0x4800) 1m35.754865077s ago: executing program 0 (id=1129): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xb8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/171) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}, @NFTA_RULE_USERDATA={0xc9, 0x7, 0x1, 0x0, "baa6931798f0ecac41ffd34196a61f75e53b5ae28c80541baf9eac3daa881e53b92c53762e98a809161d3d0d3d1b22b3768f5ba6deae1f4f7e6ebe8740c46df74add130e0f9e2d6de63087294e0477e8ac7d94312bc978220f5b79123fd258a96c09dcfe214db6430b9f1929d8a15f9a5552d28f50e86802e1a122f05af2de40e57622edaba98b77231c896e637b7f9a7eaa068e6b6abaecbea6575a532ea4441982972e3983514395b7431350aca15a1a8d747d454ff6400c1f4a4384dcf966da6a8c98c5"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20048884}, 0x410) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x18) 1m17.836537487s ago: executing program 3 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c00000c00000014000180100004"], 0x2c}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x983, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x4, 0x8, 0x1ff, 0x1, 0xe5}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x4}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015050a005300000800ff"], 0x17) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xb6f8}]}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="0a005a8000000000000013"], 0x28}}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m17.169941841s ago: executing program 3 (id=1159): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 1m16.73087289s ago: executing program 3 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000014000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40086602, &(0x7f0000000540)={'\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) openat$cgroup_ro(r4, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x241, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) 1m16.600059805s ago: executing program 3 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000200)='cgroup.events\x00', 0x275a, 0x0) getdents(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES64], 0x0, 0x0, 0x5b, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x73) 1m14.191293184s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000001580)={0xc1, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r8, 0x0, 0x2) pwrite64(r8, &(0x7f0000002640)="5d0100", 0x3, 0x0) 30.716134785s ago: executing program 0 (id=1146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r4, @ANYRESOCT], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4, 0x22a0b}}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r7, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 26.890389968s ago: executing program 3 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0xfffffffffffdffcd) r1 = socket(0x1f, 0x800, 0x0) r2 = syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0xcf6, 0x0, 0x0, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 15.516803909s ago: executing program 2 (id=1216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x937, 0x0, 0x0, 0x0, "8afbb5a85093ef768ede381361ce675f4362d2"}) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) 15.286525543s ago: executing program 1 (id=1217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x20000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x104, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b50c091f3906586d529cbd5c6fd78a7b"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 14.037422665s ago: executing program 2 (id=1218): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) rt_tgsigqueueinfo(r5, 0x0, 0x37, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x883}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@mpls_getnetconf={0x24, 0x52, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(r1, 0x0, &(0x7f00000000c0)={0x9, 0x1}, &(0x7f0000000100)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xf0, 0x1f, [{{0x9, 0x4, 0x0, 0x80, 0x0, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x8c1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x7f, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x10, 0x61}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0x55, 0x2, 0xd3, 0x20, 0x98}, 0x0, 0x0, 0x3, [{0x5f, &(0x7f00000008c0)=@string={0x5f, 0x3, "6d2bd306fd60f6b27f2646fb9c5dd4e30df338fbede1a29b8f792eb563939bcc897380a1809cc938326593d0a3c5c797b905e8102ed67cc6f35bd60cc959ba153a6015d3fe81f0dde86a0b37b8e1509305e3df6e6fb9ee0e1d67ce9186"}}, {0x2, &(0x7f0000000980)=@string={0x2}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44c}}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 11.046568472s ago: executing program 1 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x40042, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) fcntl$notify(r1, 0x402, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)='%', 0x1}, {&(0x7f0000001600)="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", 0x1fe}], 0x2}}], 0x1, 0x4000000) 8.949195638s ago: executing program 1 (id=1221): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket(0x8000000010, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x2000400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0xf50}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) 8.451085802s ago: executing program 4 (id=1223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006100)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x7, 0x13, r3, 0x0) 7.298196509s ago: executing program 4 (id=1224): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3bfe6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x44831, 0xffffffffffffffff, 0x10000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0xfffffffd, 0x0, 0x0, 0x6], [0x0, 0xc, 0x0, 0x0, 0x1], [0xffe, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x1}, {0x1ff}, {0xfffffffd}]}) socket$nl_route(0x10, 0x3, 0x0) 6.207182362s ago: executing program 4 (id=1225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0x800) inotify_init1(0x0) 6.189088186s ago: executing program 1 (id=1226): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80400}) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x10}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x35f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/162, 0xa2) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x1b0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='befs\x00', 0x0, 0x0) 6.03584392s ago: executing program 2 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20000094}}, 0x0) 4.950665669s ago: executing program 2 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000001400), &(0x7f0000000240)=@tcp6}, 0x20) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc1) r4 = syz_open_procfs(0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/44, 0x2c) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x1000000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x96, 0x0, 0x0) 3.889268677s ago: executing program 2 (id=1230): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0xfff, "fe0c9b21c872a2f28f8019c5df98ac6856a01954f2e640ad7d02e385421e1cb7", 0x2}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) 3.570221363s ago: executing program 4 (id=1231): setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 3.563751473s ago: executing program 1 (id=1239): write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x234) ioprio_set$uid(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'rose0\x00', {}, 0x2}) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000003f40)=ANY=[@ANYBLOB="180800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf82000000000000070800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="20ece6ec8ba9cfdeba363b734a22c727cd4080e057018baf7addcb4d6c1d887329485afd9fb066", 0x27}, {0x0}], 0x3, 0x0, 0x0, 0x801}, 0x10) 2.662048296s ago: executing program 2 (id=1232): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010000008b75a9ac5be690dfbc7ba76f832a00004d54477b0000060c000000000000000000000004000280000000"], 0x24}}, 0x0) r1 = getpid() setrlimit(0xb, &(0x7f0000000000)={0x3, 0x81}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f0000001100)=""/221, 0xdd) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x2000000000000058, &(0x7f0000000300)=ANY=[@ANYRES8=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r2}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409"], 0x0) 1.290808711s ago: executing program 4 (id=1233): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2931b90f}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 820.139837ms ago: executing program 1 (id=1234): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000009}) syz_io_uring_setup(0x590a, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x16, 0x0, 0x0) socket(0x10, 0x0, 0x0) io_uring_setup(0x27ff, &(0x7f0000000400)={0x0, 0x1, 0x80, 0x8000, 0x1b7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 0s ago: executing program 4 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) memfd_secret(0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$setsig(0x4203, 0x0, 0x7, &(0x7f0000000200)={0x11, 0x8, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000007700)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 87972][ T5275] usb 3-1: can't set config #1, error -71 [ 575.640066][ T5275] usb 3-1: USB disconnect, device number 14 [ 575.718469][ T4615] Bluetooth: hci2: command tx timeout [ 575.788689][ T9840] No control pipe specified [ 576.691301][ T9817] chnl_net:caif_netlink_parms(): no params data found [ 576.775007][ T29] audit: type=1400 audit(1725192852.353:25): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=9845 comm="syz.4.986" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 577.804313][ T4615] Bluetooth: hci2: command tx timeout [ 577.818826][ T4615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 577.838455][ T4615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 577.846666][ T4615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 577.854361][ T4615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 577.861990][ T4615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 577.869187][ T4615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 578.708105][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.743400][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.768886][ T9817] bridge_slave_0: entered allmulticast mode [ 578.810951][ T9817] bridge_slave_0: entered promiscuous mode [ 578.843348][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 578.878441][ T9862] macsec0: entered promiscuous mode [ 578.894149][ T9862] macsec0: entered allmulticast mode [ 578.912902][ T9862] veth1_macvtap: entered allmulticast mode [ 578.973906][ T9868] veth1_macvtap: left allmulticast mode [ 579.098547][ T9868] veth1_macvtap: left promiscuous mode [ 579.221794][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 579.527541][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.543601][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.569399][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.592781][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.607305][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 579.648868][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.782963][ T8] usb 5-1: SerialNumber: syz [ 579.790938][ T9817] bridge_slave_1: entered allmulticast mode [ 579.818860][ T9817] bridge_slave_1: entered promiscuous mode [ 579.836683][ T9852] lo speed is unknown, defaulting to 1000 [ 579.878891][ T8550] Bluetooth: hci2: command tx timeout [ 579.961375][ T8550] Bluetooth: hci6: command tx timeout [ 580.564351][ T8] usb 5-1: 0:2 : does not exist [ 580.588344][ T8] usb 5-1: unit 255 not found! [ 580.679789][ T8] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 580.777663][ T8] usb 5-1: USB disconnect, device number 13 [ 580.881236][ T1060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.910613][ T9832] udevd[9832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.168842][ T3180] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 581.240572][ T1060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.358289][ T3180] usb 2-1: Using ep0 maxpacket: 32 [ 581.367751][ T3180] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 581.389533][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.405751][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.434683][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.444061][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.485949][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.520841][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.571404][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.572598][ T1060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.600958][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.649821][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.680844][ T9817] team0: Port device team_slave_0 added [ 581.686940][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.038834][ T8550] Bluetooth: hci6: command tx timeout [ 582.141266][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.154583][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.169355][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.169928][ T9817] team0: Port device team_slave_1 added [ 582.194595][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.214995][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.234604][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.245376][ T3180] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.274603][ T3180] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.294244][ T3180] usb 2-1: New USB device found, idVendor=0eb1, idProduct=3390, bcdDevice=1b.0b [ 582.308948][ T3180] usb 2-1: New USB device strings: Mfr=178, Product=86, SerialNumber=198 [ 582.322654][ T3180] usb 2-1: Product: syz [ 582.328651][ T3180] usb 2-1: Manufacturer: syz [ 582.338884][ T3180] usb 2-1: SerialNumber: syz [ 582.349751][ T3180] usb 2-1: config 0 descriptor?? [ 582.471587][ T1060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.118348][ T8550] Bluetooth: hci6: command tx timeout [ 584.134858][ T3180] usb 2-1: USB disconnect, device number 17 [ 584.288377][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 584.310623][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.342866][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.439624][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.483747][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.501386][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 584.513126][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.533343][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 584.548394][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.561229][ T9] usb 3-1: Product: syz [ 584.566646][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.576762][ T9] usb 3-1: Manufacturer: syz [ 584.609350][ T9] usb 3-1: SerialNumber: syz [ 584.633672][ T9] usb 3-1: config 0 descriptor?? [ 584.678405][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.799588][ T9912] netlink: 'syz.4.1000': attribute type 21 has an invalid length. [ 585.807469][ T9912] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1000'. [ 585.816709][ T9912] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 585.824465][ T9912] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1000'. [ 586.133106][ T9817] hsr_slave_0: entered promiscuous mode [ 586.198357][ T8550] Bluetooth: hci6: command tx timeout [ 586.279767][ T9916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1001'. [ 587.056525][ T5273] usb 3-1: USB disconnect, device number 15 [ 587.140906][ T9817] hsr_slave_1: entered promiscuous mode [ 587.434345][ T9924] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 589.549149][ T1060] bridge_slave_1: left allmulticast mode [ 589.570961][ T1060] bridge_slave_1: left promiscuous mode [ 589.588861][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.612088][ T1060] bridge_slave_0: left allmulticast mode [ 589.628417][ T1060] bridge_slave_0: left promiscuous mode [ 589.647878][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.130323][ T5302] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 592.302826][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.471770][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.498896][ T5302] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 592.518444][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.527657][ T1060] bond0 (unregistering): Released all slaves [ 593.217290][ T5302] usb 2-1: config 0 descriptor?? [ 593.449289][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.479447][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.500227][ T9852] chnl_net:caif_netlink_parms(): no params data found [ 593.987303][ T9817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.541494][ T9817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.695439][ T5302] usb 2-1: Cannot set autoneg [ 594.708501][ T5302] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 594.744324][ T5302] usb 2-1: USB disconnect, device number 18 [ 594.819615][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.830588][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.855538][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.870368][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.878145][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 594.885816][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.937438][ T9817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.231995][ T9817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.416282][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.451139][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.490344][ T9852] bridge_slave_0: entered allmulticast mode [ 595.517073][ T9852] bridge_slave_0: entered promiscuous mode [ 595.568539][ T9970] lo speed is unknown, defaulting to 1000 [ 595.586073][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.628511][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.635805][ T9852] bridge_slave_1: entered allmulticast mode [ 595.679431][ T9852] bridge_slave_1: entered promiscuous mode [ 595.938136][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.041644][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.988409][ T4615] Bluetooth: hci0: command tx timeout [ 597.341157][T10003] netlink: 108044 bytes leftover after parsing attributes in process `syz.4.1019'. [ 597.351244][T10003] openvswitch: netlink: Message has 5 unknown bytes. [ 597.477056][ T1060] hsr_slave_0: left promiscuous mode [ 597.509856][ T1060] hsr_slave_1: left promiscuous mode [ 597.558604][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.596965][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.638061][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.657094][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.759976][ T1060] veth1_macvtap: left promiscuous mode [ 597.786831][ T1060] veth0_macvtap: left promiscuous mode [ 597.806935][ T1060] veth1_vlan: left promiscuous mode [ 597.816735][ T1060] veth0_vlan: left promiscuous mode [ 599.017715][ T4615] Bluetooth: hci0: command tx timeout [ 601.158491][ T4615] Bluetooth: hci0: command tx timeout [ 604.379102][ T4615] Bluetooth: hci0: command tx timeout [ 608.109148][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 609.264435][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 610.097841][ T29] audit: type=1400 audit(1725192885.003:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=10037 comm="syz.1.1028" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 611.758565][ T9053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 611.770177][ T9053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 611.784957][ T9053] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 611.794073][ T9053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 611.813322][ T9053] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 611.828333][ T9053] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.947638][ T9817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 611.956888][ T9817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 612.122934][ T9053] Bluetooth: hci4: command 0x0406 tx timeout [ 612.151996][ T9852] team0: Port device team_slave_0 added [ 612.210095][ T9852] team0: Port device team_slave_1 added [ 612.268589][ T9817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 612.414688][ T9817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.601006][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.607972][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.652640][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.714183][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 613.878402][ T8550] Bluetooth: hci5: command tx timeout [ 613.948315][T10045] lo speed is unknown, defaulting to 1000 [ 613.986992][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.003372][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.108920][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.417867][ T9852] hsr_slave_0: entered promiscuous mode [ 615.468960][ T9852] hsr_slave_1: entered promiscuous mode [ 615.498803][ T9852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.506396][ T9852] Cannot create hsr debugfs directory [ 615.969391][ T8550] Bluetooth: hci5: command tx timeout [ 616.145003][ T1060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.261650][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.436545][ T1060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.653028][ T9817] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.789731][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.796843][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.682174][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.689370][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.796436][ T1060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.833508][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 618.039199][ T8550] Bluetooth: hci5: command tx timeout [ 618.150560][ T1060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.441562][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.456856][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.498639][ T9970] bridge_slave_0: entered allmulticast mode [ 619.507557][ T9970] bridge_slave_0: entered promiscuous mode [ 619.824690][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.855843][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.886969][ T9970] bridge_slave_1: entered allmulticast mode [ 619.914499][ T9970] bridge_slave_1: entered promiscuous mode [ 620.066059][ T1060] bridge_slave_1: left allmulticast mode [ 620.088314][ T1060] bridge_slave_1: left promiscuous mode [ 620.103646][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.119725][ T8550] Bluetooth: hci5: command tx timeout [ 620.124833][ T9053] Bluetooth: hci4: unexpected cc 0x0c14 length: 60 < 249 [ 620.132709][ T9053] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 620.169556][ T1060] bridge_slave_0: left allmulticast mode [ 620.175213][ T1060] bridge_slave_0: left promiscuous mode [ 620.251660][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.372278][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.406203][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.437615][ T1060] bond0 (unregistering): Released all slaves [ 622.467781][T10045] chnl_net:caif_netlink_parms(): no params data found [ 622.854838][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.880984][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.122741][ T9970] team0: Port device team_slave_0 added [ 623.203570][ T9970] team0: Port device team_slave_1 added [ 624.012839][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.019962][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.068090][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.093066][T10045] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.105700][T10045] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.118082][T10045] bridge_slave_0: entered allmulticast mode [ 624.130918][T10045] bridge_slave_0: entered promiscuous mode [ 624.169451][T10145] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 624.198373][T10145] netlink: 2024 bytes leftover after parsing attributes in process `syz.1.1042'. [ 624.207668][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1042'. [ 624.264798][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.316254][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.414515][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.447917][T10045] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.456671][T10045] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.465081][T10045] bridge_slave_1: entered allmulticast mode [ 624.476467][T10045] bridge_slave_1: entered promiscuous mode [ 624.629065][ T1060] hsr_slave_0: left promiscuous mode [ 624.651013][ T1060] hsr_slave_1: left promiscuous mode [ 624.657755][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.666779][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.685349][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.697541][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.763376][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.765555][ T1060] veth1_macvtap: left promiscuous mode [ 624.769804][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.775383][ T1060] veth0_macvtap: left promiscuous mode [ 624.790988][ T1060] veth1_vlan: left promiscuous mode [ 624.796357][ T1060] veth0_vlan: left promiscuous mode [ 627.249406][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 627.370042][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 628.702250][ T9852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.792128][ T9970] hsr_slave_0: entered promiscuous mode [ 628.828777][ T9970] hsr_slave_1: entered promiscuous mode [ 628.835311][ T9970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.843129][ T9970] Cannot create hsr debugfs directory [ 628.984758][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.035387][ T9852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 629.103822][ T9852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.182124][T10045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.286502][T10045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.309549][ T9852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 629.941573][T10045] team0: Port device team_slave_0 added [ 630.003879][T10045] team0: Port device team_slave_1 added [ 630.155094][ T8550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.165194][ T8550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.174347][ T8550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.182574][ T8550] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.200416][ T8550] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 630.221539][ T8550] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.495683][T10045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.523178][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.609082][T10045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.631613][T10045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.658895][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.706644][T10045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.972639][T10167] lo speed is unknown, defaulting to 1000 [ 631.114567][T10045] hsr_slave_0: entered promiscuous mode [ 631.157455][T10045] hsr_slave_1: entered promiscuous mode [ 631.182135][T10045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.223905][T10045] Cannot create hsr debugfs directory [ 632.278983][ T9053] Bluetooth: hci2: command tx timeout [ 633.157837][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.273708][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.006790][T10209] virtio-fs: tag <(null)> not found [ 634.019147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.026310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.389029][ T9053] Bluetooth: hci2: command tx timeout [ 634.389702][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.401699][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.956570][ T9970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.577318][ T9970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 636.778344][ T9053] Bluetooth: hci2: command tx timeout [ 637.114757][T10045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.158523][ T4615] Bluetooth: hci1: command 0x0406 tx timeout [ 637.233936][ T1060] bridge_slave_1: left allmulticast mode [ 637.267733][ T1060] bridge_slave_1: left promiscuous mode [ 637.277938][ T4615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 637.328732][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.360068][ T4615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 637.370694][ T4615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 637.390274][ T4615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 637.409026][ T1060] bridge_slave_0: left allmulticast mode [ 637.414718][ T1060] bridge_slave_0: left promiscuous mode [ 637.420432][ T4615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 637.427827][ T4615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.471646][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.792336][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.804964][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.843681][ T1060] bond0 (unregistering): Released all slaves [ 638.848257][ T8550] Bluetooth: hci2: command tx timeout [ 638.885409][T10167] chnl_net:caif_netlink_parms(): no params data found [ 638.911540][ T9970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 638.944364][ T9970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 639.130909][T10045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.211252][ T1060] hsr_slave_0: left promiscuous mode [ 639.225573][ T1060] hsr_slave_1: left promiscuous mode [ 639.265516][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.273391][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.489556][ T4615] Bluetooth: hci7: command tx timeout [ 640.106864][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 640.306252][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 641.558533][ T4615] Bluetooth: hci7: command tx timeout [ 641.691569][T10045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.008739][T10045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.189958][T10231] lo speed is unknown, defaulting to 1000 [ 642.402780][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.457091][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.489097][T10167] bridge_slave_0: entered allmulticast mode [ 642.496622][T10167] bridge_slave_0: entered promiscuous mode [ 642.559577][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.566780][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.598847][T10167] bridge_slave_1: entered allmulticast mode [ 642.606195][T10167] bridge_slave_1: entered promiscuous mode [ 642.845068][T10167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.871465][T10167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.171383][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.268538][T10167] team0: Port device team_slave_0 added [ 643.314526][T10167] team0: Port device team_slave_1 added [ 643.372216][T10045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.638912][ T4615] Bluetooth: hci7: command tx timeout [ 643.675522][T10045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.725059][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.769342][T10167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.795177][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.859673][T10167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.880767][T10167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.887758][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.978346][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.048641][T10045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 644.085321][T10045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 644.235242][T10167] hsr_slave_0: entered promiscuous mode [ 644.260992][T10167] hsr_slave_1: entered promiscuous mode [ 644.691082][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.698317][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.740122][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.747242][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.838627][T10231] chnl_net:caif_netlink_parms(): no params data found [ 645.460972][ T1060] bridge_slave_1: left allmulticast mode [ 645.466674][ T1060] bridge_slave_1: left promiscuous mode [ 645.518486][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.560187][ T1060] bridge_slave_0: left allmulticast mode [ 645.576507][ T1060] bridge_slave_0: left promiscuous mode [ 645.594924][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.720494][ T4615] Bluetooth: hci7: command tx timeout [ 646.450743][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.461724][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.481946][ T1060] bond0 (unregistering): Released all slaves [ 646.798374][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.809343][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.816610][T10231] bridge_slave_0: entered allmulticast mode [ 646.899568][T10231] bridge_slave_0: entered promiscuous mode [ 646.929428][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.936737][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.999543][T10231] bridge_slave_1: entered allmulticast mode [ 647.034603][T10231] bridge_slave_1: entered promiscuous mode [ 647.152936][ T1060] hsr_slave_0: left promiscuous mode [ 647.169797][ T1060] hsr_slave_1: left promiscuous mode [ 647.239220][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.253811][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.079051][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 648.178912][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 649.463358][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.523149][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.701962][T10045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.723949][T10231] team0: Port device team_slave_0 added [ 649.751639][T10231] team0: Port device team_slave_1 added [ 650.022679][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.052255][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.079954][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.179427][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.239081][T10045] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.309256][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.316244][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.437509][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.598356][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.605514][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.791984][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.799224][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.884076][T10231] hsr_slave_0: entered promiscuous mode [ 650.891040][T10231] hsr_slave_1: entered promiscuous mode [ 650.928379][T10231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.935952][T10231] Cannot create hsr debugfs directory [ 651.024004][ T9970] veth0_vlan: entered promiscuous mode [ 651.042395][T10167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.082617][ T9970] veth1_vlan: entered promiscuous mode [ 651.209186][T10167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 651.218614][T10167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 651.282475][T10167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.000165][ T9970] veth0_macvtap: entered promiscuous mode [ 652.056553][ T9970] veth1_macvtap: entered promiscuous mode [ 652.214820][T10167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.466946][T10167] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.510413][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.517559][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.556516][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.612361][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.639166][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.651530][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.668214][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.686360][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.708362][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.729710][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.751225][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.774203][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.808383][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.819276][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.838215][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.861423][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.890317][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.918240][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.929309][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.949766][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.992192][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.999390][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.041247][ T9970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.087196][ T9970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.118404][ T9970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.138296][ T9970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.331429][T10045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.370911][T10231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.429953][T10231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 653.500382][T10231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 653.569808][T10231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.954905][T10167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.221026][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.234661][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.483788][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.577786][T10231] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.650289][T10045] veth0_vlan: entered promiscuous mode [ 654.727372][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.734583][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.833159][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.840384][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.886892][T10167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.969207][T10045] veth1_vlan: entered promiscuous mode [ 655.258042][ T8550] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.276081][ T8550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.294605][ T8550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.313350][ T8550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.321527][ T8550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 655.329800][ T8550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.579760][T10167] veth0_vlan: entered promiscuous mode [ 655.654874][T10167] veth1_vlan: entered promiscuous mode [ 655.744830][T10045] veth0_macvtap: entered promiscuous mode [ 655.924441][ T8914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.981899][T10045] veth1_macvtap: entered promiscuous mode [ 655.990734][T10379] lo speed is unknown, defaulting to 1000 [ 656.226380][ T8914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.523666][ T8914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.564886][T10167] veth0_macvtap: entered promiscuous mode [ 656.601602][T10167] veth1_macvtap: entered promiscuous mode [ 656.720723][ T8914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.827138][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.854735][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.882088][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.899520][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.938475][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.968379][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.985884][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.028227][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.038090][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.076793][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.090237][T10167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.097926][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.138368][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.168711][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.218238][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.236715][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.262957][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.298287][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.337877][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.358741][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.388919][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.408302][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.416989][ T4615] Bluetooth: hci0: command tx timeout [ 657.438977][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.465733][T10045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.639601][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.690867][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.718217][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.729457][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.739553][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.750263][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.760311][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.771591][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.801503][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.812236][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.824018][T10167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.837926][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.880897][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.924996][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.975652][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.017444][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.038830][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.058364][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.110522][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.122700][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.148288][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.168257][T10045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.179164][T10045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.200133][T10045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.224703][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.352932][T10045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.388383][T10045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.397944][T10045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.438762][T10045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.510396][T10167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.536133][T10167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.548473][T10167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.557206][T10167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.282153][ T8914] bridge_slave_1: left allmulticast mode [ 659.287857][ T8914] bridge_slave_1: left promiscuous mode [ 659.328572][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.399323][ T8914] bridge_slave_0: left allmulticast mode [ 659.404980][ T8914] bridge_slave_0: left promiscuous mode [ 659.411693][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.488384][ T4615] Bluetooth: hci0: command tx timeout [ 660.465854][ T8914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.523759][ T8914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.542991][ T8914] bond0 (unregistering): Released all slaves [ 660.572235][T10379] chnl_net:caif_netlink_parms(): no params data found [ 660.640172][T10231] veth0_vlan: entered promiscuous mode [ 660.795767][T10231] veth1_vlan: entered promiscuous mode [ 660.946544][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.963185][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.279339][ T8911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.287174][ T8911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.441633][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.458305][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.558738][ T4615] Bluetooth: hci0: command tx timeout [ 661.570990][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.578141][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.598407][T10379] bridge_slave_0: entered allmulticast mode [ 661.670072][T10379] bridge_slave_0: entered promiscuous mode [ 661.752060][T10231] veth0_macvtap: entered promiscuous mode [ 661.797730][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.825211][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.859280][T10379] bridge_slave_1: entered allmulticast mode [ 661.888393][T10379] bridge_slave_1: entered promiscuous mode [ 662.009544][T10231] veth1_macvtap: entered promiscuous mode [ 662.173941][ T8914] hsr_slave_0: left promiscuous mode [ 663.138689][ T8914] hsr_slave_1: left promiscuous mode [ 663.698393][ T4615] Bluetooth: hci0: command tx timeout [ 663.751861][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.808355][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.868500][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.927044][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.961207][ T8914] veth1_macvtap: left promiscuous mode [ 663.966783][ T8914] veth0_macvtap: left promiscuous mode [ 663.988379][ T8914] veth1_vlan: left promiscuous mode [ 663.993741][ T8914] veth0_vlan: left promiscuous mode [ 665.603276][ T8914] team0 (unregistering): Port device team_slave_1 removed [ 665.760576][ T8914] team0 (unregistering): Port device team_slave_0 removed [ 667.141836][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.161050][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.172510][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.282267][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.466800][T10379] team0: Port device team_slave_0 added [ 667.560615][T10379] team0: Port device team_slave_1 added [ 667.597916][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.614227][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.636048][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.651236][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.668551][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.078323][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.088685][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.133331][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.163842][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.227346][T10466] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 668.236340][T10466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1062'. [ 668.249784][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.300670][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.316650][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.379216][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.446899][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.464103][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.518348][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.542324][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.558429][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.578229][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.594028][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.604378][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.648249][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.658120][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.844846][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.864629][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.896566][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.939212][T10474] vivid-003: disconnect [ 668.948844][T10474] vivid-003: reconnect [ 668.986245][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.035908][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.125603][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.664642][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.819604][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.846451][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.763902][T10231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.828319][T10231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.837066][T10231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.878220][ T29] audit: type=1400 audit(1725192946.443:27): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=9 comm="kworker/0:1" saddr=172.20.20.10 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 670.887017][T10231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.933076][T10479] kvm: kvm [10478]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 671.237160][T10379] hsr_slave_0: entered promiscuous mode [ 671.314951][T10379] hsr_slave_1: entered promiscuous mode [ 671.363465][T10379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.371245][T10379] Cannot create hsr debugfs directory [ 671.794617][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.828599][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.045806][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.087942][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.804280][ T8550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 675.815573][ T8550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 675.828473][ T8550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 675.836675][ T8550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 675.847984][ T8550] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 675.856118][ T8550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 676.064256][T10542] lo speed is unknown, defaulting to 1000 [ 676.537194][T10379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 676.635991][T10379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 676.706729][T10379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 676.799901][T10379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.309695][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.591266][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.701726][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.709049][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.780473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.787640][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.058428][ T4615] Bluetooth: hci6: command tx timeout [ 679.736167][T10542] chnl_net:caif_netlink_parms(): no params data found [ 680.248324][ T4615] Bluetooth: hci6: command tx timeout [ 680.588252][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 680.598306][ T5272] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 680.657324][T10542] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.684912][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.716594][T10542] bridge_slave_0: entered allmulticast mode [ 680.747700][T10542] bridge_slave_0: entered promiscuous mode [ 680.793635][T10542] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.809456][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 680.817222][ T5272] usb 4-1: Using ep0 maxpacket: 8 [ 680.823021][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.845547][ T5272] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 680.860351][T10542] bridge_slave_1: entered allmulticast mode [ 680.869056][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 680.882669][T10542] bridge_slave_1: entered promiscuous mode [ 680.889139][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.910933][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.934096][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.943255][ T5272] usb 4-1: config 0 descriptor?? [ 680.971539][ T9] usb 2-1: Product: syz [ 680.975814][ T9] usb 2-1: Manufacturer: syz [ 680.998793][ T9] usb 2-1: SerialNumber: syz [ 681.033563][ T9] usb 2-1: config 0 descriptor?? [ 681.093278][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.159591][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.357531][T10542] team0: Port device team_slave_0 added [ 681.417363][T10542] team0: Port device team_slave_1 added [ 682.282256][ T4615] Bluetooth: hci6: command tx timeout [ 682.831011][ T5274] usb 2-1: USB disconnect, device number 19 [ 682.887935][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.907625][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.997261][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.027605][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.069774][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.144389][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.183261][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.412955][T10542] hsr_slave_0: entered promiscuous mode [ 683.454363][T10542] hsr_slave_1: entered promiscuous mode [ 683.490819][T10542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.534945][T10542] Cannot create hsr debugfs directory [ 683.883197][T10379] veth0_vlan: entered promiscuous mode [ 684.127048][ T5272] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 684.175493][ T5272] asix 4-1:0.0: probe with driver asix failed with error -71 [ 684.190240][T10379] veth1_vlan: entered promiscuous mode [ 684.205004][ T5272] usb 4-1: USB disconnect, device number 5 [ 684.438866][ T4615] Bluetooth: hci6: command tx timeout [ 685.380007][T10542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.202037][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.208460][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.282013][T10379] veth0_macvtap: entered promiscuous mode [ 687.383125][T10542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.513555][T10379] veth1_macvtap: entered promiscuous mode [ 687.674724][T10542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.034941][T10542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.823483][ T5275] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 688.883949][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.928730][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.942018][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 688.951930][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.970980][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.988463][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.009841][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.029508][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.040768][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.052346][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.064296][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.079655][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.104155][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.116572][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 689.126635][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.137477][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.158482][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.178389][ T5275] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.197810][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.213185][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.221282][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.249625][ T5275] usb 2-1: config 0 descriptor?? [ 689.271612][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.306041][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306067][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306087][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306102][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306113][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306150][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306163][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306176][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306188][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306201][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306214][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306227][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.306239][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.306253][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.309108][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.332769][T10379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.332807][T10379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.332859][T10379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.332886][T10379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.699191][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.699344][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.812789][T10686] Smack: duplicate mount options [ 690.381912][ T5275] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 690.585785][ T5275] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 690.625517][ T5275] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 690.899903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.907835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.328788][ T9] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 692.408770][T10542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 692.691245][T10542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 692.889745][T10542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.023221][T10542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 694.553276][ T5272] usb 2-1: USB disconnect, device number 20 [ 694.853573][T10542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.888388][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 694.894499][T10542] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.925141][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.932294][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.982189][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.989467][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.108653][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 695.126276][ T9] usb 4-1: config index 0 descriptor too short (expected 64742, got 92) [ 695.145981][ T9] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 695.228938][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.367023][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 695.425761][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.493813][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.518781][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.558485][ T9] usb 4-1: Product: syz [ 695.573911][ T9] usb 4-1: Manufacturer: syz [ 695.591928][ T9] usb 4-1: SerialNumber: syz [ 695.611406][ T9] cdc_ncm 4-1:1.0: skipping garbage [ 695.623938][T10542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.641423][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 695.678626][ T9] cdc_ncm 4-1:1.0: bind() failure [ 695.912480][ T8911] Bluetooth: hci8: Frame reassembly failed (-84) [ 695.919677][ T5275] usb 4-1: USB disconnect, device number 6 [ 697.216110][T10542] veth0_vlan: entered promiscuous mode [ 697.251326][T10542] veth1_vlan: entered promiscuous mode [ 697.459501][T10542] veth0_macvtap: entered promiscuous mode [ 697.481756][T10542] veth1_macvtap: entered promiscuous mode [ 698.136343][ T8550] Bluetooth: hci8: command 0x1003 tx timeout [ 698.232431][ T4615] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 698.432152][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.510654][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.574727][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.637248][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.669301][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.712782][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.763622][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.815359][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.878392][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.902495][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.948840][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.990939][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.135998][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.194011][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.278270][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.325267][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.345516][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 699.352223][T10542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.923322][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.018195][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.028056][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.180149][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.206562][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.226235][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.306044][T10754] random: crng reseeded on system resumption [ 701.198815][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.257495][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.316035][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.332701][T10749] IPv4: Oversized IP packet from 127.0.0.1 [ 701.342878][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 701.348542][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.402490][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.428226][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.467081][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.488315][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.556557][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.573009][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.616042][T10542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.685352][T10542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.726257][T10542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.747412][T10542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.771698][T10542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.797050][T10757] lo speed is unknown, defaulting to 1000 [ 702.300937][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.332271][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.459240][T10768] can0: slcan on ttyS3. [ 702.580956][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.599570][T10770] can0 (unregistered): slcan off ttyS3. [ 702.623263][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.816674][T10777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.360054][T10793] IPVS: Error joining to the multicast group [ 708.537979][ T8550] Bluetooth: hci8: sending frame failed (-49) [ 708.545702][ T4615] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 708.868478][T10808] dummy0: entered promiscuous mode [ 708.928896][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 708.962834][T10808] dummy0: left promiscuous mode [ 709.344016][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 711.361301][ T5275] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 711.415365][ T5275] usb 1-1: config 179 has no interface number 0 [ 711.608581][ T5275] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 712.569903][ T5275] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 712.603186][ T5275] usb 1-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 712.619537][ T5275] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 712.689385][ T5275] usb 1-1: config 179 interface 65 has no altsetting 0 [ 712.748222][ T5275] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 712.788924][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.871013][ T5275] usb 1-1: can't set config #179, error -71 [ 713.818480][ T5275] usb 1-1: USB disconnect, device number 10 [ 714.583038][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.633145][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.659401][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.707796][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.746810][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.854488][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.899953][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.907435][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 714.982365][T10844] Bluetooth: MGMT ver 1.23 [ 714.985657][ T5274] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 715.065459][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 715.122807][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 715.142747][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 715.158622][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 715.309241][ T5274] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 715.317750][ T5274] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 715.333707][ T5274] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 715.358338][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 716.233780][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 716.248219][ T5274] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 718.049071][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.797184][ T5274] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 719.828277][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.837370][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.848224][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.877189][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.884809][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.892518][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.899996][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.907394][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.918638][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.928322][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.945619][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.967541][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 719.977773][ T5274] usb 5-1: can't set config #255, error -71 [ 719.984332][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.066080][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 720.091061][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 720.152495][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.230824][ T5274] usb 5-1: USB disconnect, device number 14 [ 720.313171][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.337321][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.354106][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.375718][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.399642][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.416138][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.491980][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.521446][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.569972][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.610874][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.646246][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.734630][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.758024][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.786427][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.798581][ T9500] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 720.809190][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.840282][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.848626][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.874127][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.910661][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.956901][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 720.978305][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.008299][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.021116][ T9500] usb 4-1: config 0 has no interfaces? [ 721.046912][ T9500] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 721.060953][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.088415][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.227033][ T9500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.251482][ T9500] usb 4-1: config 0 descriptor?? [ 721.272427][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.280040][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.287950][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.307594][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.538621][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.551695][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.565163][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.584243][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.602028][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.617116][ T9564] hid-generic 0003:0007:07FF.0005: unknown main item tag 0x0 [ 721.643305][ T9564] hid-generic 0003:0007:07FF.0005: hidraw0: USB HID v5.91 Device [syz1] on syz0 [ 722.009268][T10878] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1139'. [ 722.018447][ T9500] usb 4-1: USB disconnect, device number 7 [ 722.219789][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 724.969839][T10909] Bluetooth: MGMT ver 1.23 [ 725.365604][ T8550] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 725.378108][ T8550] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 725.390498][ T8550] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 725.429376][ T8550] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 725.448893][ T8550] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 726.501615][ T8550] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 726.783275][T10910] lo speed is unknown, defaulting to 1000 [ 728.730896][T10934] syz.3.1154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 728.758323][ T4615] Bluetooth: hci8: command tx timeout [ 729.703776][ T128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.838267][ T4615] Bluetooth: hci8: command tx timeout [ 731.244334][ T128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.990883][ T128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.224901][T10948] lo speed is unknown, defaulting to 1000 [ 732.522980][ T5275] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 732.921086][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 733.010515][ T4615] Bluetooth: hci8: command tx timeout [ 733.018356][ T29] audit: type=1400 audit(1725193007.883:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=10962 comm="syz.4.1160" saddr=172.20.20.10 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 733.053475][ T5275] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 733.102675][ T5275] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 733.148979][ T5275] usb 4-1: config 135 has no interface number 0 [ 733.159797][ T5275] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.186413][ T5275] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 733.195869][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.203964][ T5275] usb 4-1: Product: syz [ 733.219542][ T5275] usb 4-1: Manufacturer: syz [ 733.252348][ T5275] usb 4-1: SerialNumber: syz [ 733.285266][ T5275] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 733.305656][ T5275] usb 4-1: No valid video chain found. [ 733.451253][ T128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.570184][ T5275] usb 4-1: USB disconnect, device number 8 [ 733.866576][T10910] chnl_net:caif_netlink_parms(): no params data found [ 734.489622][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.598331][T10966] Bluetooth: hci5: command 0x0406 tx timeout [ 734.816567][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.826705][T10910] bridge_slave_0: entered allmulticast mode [ 734.872502][T10910] bridge_slave_0: entered promiscuous mode [ 737.478740][ T8550] Bluetooth: hci8: command tx timeout [ 739.042462][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.078292][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.086915][T10910] bridge_slave_1: entered allmulticast mode [ 739.159148][T10910] bridge_slave_1: entered promiscuous mode [ 739.247362][ T128] bridge_slave_1: left allmulticast mode [ 739.287994][ T128] bridge_slave_1: left promiscuous mode [ 739.382978][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.527850][ T128] bridge_slave_0: left allmulticast mode [ 739.563887][ T128] bridge_slave_0: left promiscuous mode [ 739.628577][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.383459][ T9564] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 740.635070][ T9564] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 740.670970][T11009] xt_connbytes: Forcing CT accounting to be enabled [ 740.677879][ T9564] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 740.688225][T11009] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 741.237259][ T9564] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 741.288424][ T9564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 741.516620][ T9564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 741.554434][ T9564] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 741.568261][ T9564] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 741.627167][ T9564] usb 3-1: Product: syz [ 741.642535][ T9564] usb 3-1: Manufacturer: syz [ 741.658995][T10997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.686278][ T9564] cdc_wdm 3-1:1.0: skipping garbage [ 741.717326][ T9564] cdc_wdm 3-1:1.0: skipping garbage [ 741.727286][ T9564] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 741.758580][ T9564] cdc_wdm 3-1:1.0: Unknown control protocol [ 741.977844][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.984624][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.990989][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.997569][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.003816][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.010392][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.016615][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.023205][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.029420][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.035993][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.042205][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.048787][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.055190][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.061781][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.068116][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.074746][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.080983][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.087562][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.093795][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 742.100375][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 742.218284][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 742.226092][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 742.408698][ T5272] usb 3-1: USB disconnect, device number 16 [ 742.408720][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 742.416309][ T9] usb 2-1: device descriptor read/64, error -32 [ 742.769963][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 743.018287][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 743.067092][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 743.107572][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 743.128801][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 743.137885][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.188230][ T9] usb 2-1: Product: syz [ 743.208677][ T9] usb 2-1: Manufacturer: syz [ 743.225126][ T9] usb 2-1: SerialNumber: syz [ 743.245445][ T9] usb 2-1: config 0 descriptor?? [ 743.275359][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 743.297580][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 743.331106][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 743.397978][ T9] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 743.551371][ T9] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 743.797420][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.834517][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.881098][ T128] bond0 (unregistering): Released all slaves [ 744.089887][T11016] netlink: 'syz.4.1170': attribute type 10 has an invalid length. [ 744.185472][T11016] team0: Device hsr_slave_0 failed to register rx_handler [ 744.227040][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.268481][ T9500] usb 2-1: USB disconnect, device number 22 [ 744.317615][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.792688][T10910] team0: Port device team_slave_0 added [ 745.842944][T10910] team0: Port device team_slave_1 added [ 746.354448][T10966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.367588][T10966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.379476][T10966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.392851][T10966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.406160][T10966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 746.416416][T10966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.712715][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.744115][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.856690][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.906428][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.941117][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.983798][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.611025][T10910] hsr_slave_0: entered promiscuous mode [ 747.640497][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.652776][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.658858][T10910] hsr_slave_1: entered promiscuous mode [ 748.518296][T10910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.526231][ T8550] Bluetooth: hci2: command tx timeout [ 748.526759][T10910] Cannot create hsr debugfs directory [ 748.627376][T11047] lo speed is unknown, defaulting to 1000 [ 748.750823][ T128] hsr_slave_0: left promiscuous mode [ 748.794659][ T128] hsr_slave_1: left promiscuous mode [ 748.841091][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.865401][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.881808][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.913914][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.041689][ T128] veth1_macvtap: left promiscuous mode [ 749.067792][ T128] veth0_macvtap: left promiscuous mode [ 749.073831][ T128] veth1_vlan: left promiscuous mode [ 749.083180][ T128] veth0_vlan: left promiscuous mode [ 750.648457][ T8550] Bluetooth: hci2: command tx timeout [ 752.189192][T11087] syz.1.1183: attempt to access beyond end of device [ 752.189192][T11087] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 752.594001][ T128] team0 (unregistering): Port device team_slave_1 removed [ 752.678272][ T8550] Bluetooth: hci2: command tx timeout [ 752.754801][ T128] team0 (unregistering): Port device team_slave_0 removed [ 753.932399][T10966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 753.944363][T10966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 753.953826][T10966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 753.962932][T10966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 753.972455][T10966] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 753.979811][T10966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 754.758488][T10966] Bluetooth: hci2: command tx timeout [ 755.067413][T11109] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1186'. [ 755.196544][T11108] veth0_macvtap: left promiscuous mode [ 755.616139][T11103] lo speed is unknown, defaulting to 1000 [ 756.040099][T10966] Bluetooth: hci7: command tx timeout [ 756.620994][T11047] chnl_net:caif_netlink_parms(): no params data found [ 758.128954][T10966] Bluetooth: hci7: command tx timeout [ 759.025055][T11162] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 759.203604][ T128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.208902][T10966] Bluetooth: hci7: command tx timeout [ 760.341384][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.374763][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.403749][T11047] bridge_slave_0: entered allmulticast mode [ 760.430173][T11047] bridge_slave_0: entered promiscuous mode [ 760.762937][ T128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.798776][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.838392][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.898952][T11047] bridge_slave_1: entered allmulticast mode [ 761.026910][T11047] bridge_slave_1: entered promiscuous mode [ 761.452947][T10966] Bluetooth: Frame is too long (len 10, expected len 9) [ 761.953593][T11169] vlan2: entered promiscuous mode [ 761.986550][T11169] bond0: (slave vlan2): Opening slave failed [ 762.286111][T10966] Bluetooth: hci7: command tx timeout [ 762.319001][ T128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.480847][T11103] chnl_net:caif_netlink_parms(): no params data found [ 762.653670][ T128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.707824][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.899946][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.280646][T10910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 763.351526][T10910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 763.433015][T11047] team0: Port device team_slave_0 added [ 763.485839][T11047] team0: Port device team_slave_1 added [ 763.528328][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.548588][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.597699][T11103] bridge_slave_0: entered allmulticast mode [ 763.622299][T11103] bridge_slave_0: entered promiscuous mode [ 763.720064][T10910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 763.766808][T10910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 763.828356][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.835475][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.868525][T11103] bridge_slave_1: entered allmulticast mode [ 763.875957][T11103] bridge_slave_1: entered promiscuous mode [ 764.031240][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.078465][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.148062][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.222598][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.238950][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.348475][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.389544][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.431477][ T128] bridge_slave_1: left allmulticast mode [ 764.437181][ T128] bridge_slave_1: left promiscuous mode [ 764.488448][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.500946][ T128] bridge_slave_0: left allmulticast mode [ 764.506630][ T128] bridge_slave_0: left promiscuous mode [ 764.512875][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.429124][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.479566][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.493300][ T128] bond0 (unregistering): Released all slaves [ 766.572905][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.902927][T11047] hsr_slave_0: entered promiscuous mode [ 766.919017][T11047] hsr_slave_1: entered promiscuous mode [ 767.213801][T11103] team0: Port device team_slave_0 added [ 767.482351][T11103] team0: Port device team_slave_1 added [ 767.601493][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.618411][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.653391][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.690209][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.697192][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.729750][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.860100][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.055557][T11103] hsr_slave_0: entered promiscuous mode [ 768.079659][T11103] hsr_slave_1: entered promiscuous mode [ 768.098292][T11103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.138257][T11103] Cannot create hsr debugfs directory [ 768.501655][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.071220][T11073] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.078437][T11073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.113449][T11073] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.120694][T11073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.141681][ T128] hsr_slave_0: left promiscuous mode [ 769.172806][ T128] hsr_slave_1: left promiscuous mode [ 769.244434][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.252055][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.280253][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.308205][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.367552][ T128] veth1_macvtap: left promiscuous mode [ 769.394375][ T128] veth0_macvtap: left promiscuous mode [ 769.403662][ T128] veth1_vlan: left promiscuous mode [ 769.410230][ T128] veth0_vlan: left promiscuous mode [ 770.929791][ T128] team0 (unregistering): Port device team_slave_1 removed [ 771.094717][ T128] team0 (unregistering): Port device team_slave_0 removed [ 773.223876][T10910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.835824][T11103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.918302][T11047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 774.020438][T11047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 774.089352][T11047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.240622][T11103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.288660][T11047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.460985][T11103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.512420][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.660785][T11103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.831469][T10910] veth0_vlan: entered promiscuous mode [ 775.015224][T10910] veth1_vlan: entered promiscuous mode [ 775.214600][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.292816][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.366687][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.373898][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.438315][T11103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 775.532148][T11103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 775.571247][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.578421][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.628303][T11103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 775.661609][T11103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 775.702122][T10910] veth0_macvtap: entered promiscuous mode [ 775.722454][T10910] veth1_macvtap: entered promiscuous mode [ 775.907677][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.946165][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.977200][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.008413][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.019351][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.038515][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.058413][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.069347][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.110221][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.129142][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.139761][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.151803][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.161998][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.180157][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.236028][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.290748][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.335891][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.398642][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.428637][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.448324][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.548156][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.593423][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.604355][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.623778][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.634452][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.644685][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.673109][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.693097][T10910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.704332][T10910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.740475][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.821675][T10910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.848249][T10910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.868305][T10910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.878639][T10910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.932622][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.012942][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.067292][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.151994][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.159184][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.220515][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.227682][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.371124][T11047] veth0_vlan: entered promiscuous mode [ 777.570140][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.578094][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.659574][T11047] veth1_vlan: entered promiscuous mode [ 777.688322][T11073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.696183][T11073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.735133][T11047] veth0_macvtap: entered promiscuous mode [ 777.765584][T11047] veth1_macvtap: entered promiscuous mode [ 777.858568][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.897727][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.918639][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.940936][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.955323][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.975015][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.996094][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.019962][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.034068][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.048371][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.135508][T11287] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.904081][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.978554][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.024337][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.057412][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.102725][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.148278][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.199515][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.236154][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.287136][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.301806][T11291] xt_cgroup: invalid path, errno=-2 [ 779.338847][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.383713][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.403540][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.418495][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.438579][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.458298][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.469473][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.479707][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.490240][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.500327][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.511207][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.526571][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.546887][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.567446][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.578934][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.591108][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.649445][T11047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.658598][T11047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.667308][T11047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.696762][T11047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.799081][T11103] veth0_vlan: entered promiscuous mode [ 779.832982][T11292] lo speed is unknown, defaulting to 1000 [ 779.851258][T11103] veth1_vlan: entered promiscuous mode [ 780.107046][T11103] veth0_macvtap: entered promiscuous mode [ 780.148768][T11103] veth1_macvtap: entered promiscuous mode [ 780.179997][ T8899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.194680][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.235099][ T8899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.249586][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.259846][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.270345][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.281150][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.297604][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.307518][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.318027][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.328063][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.365893][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.376531][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.391115][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.468311][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.492472][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.519027][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.568260][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.579629][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.601813][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.640048][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.662580][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.695949][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.718329][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.734916][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.748150][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.775061][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.785358][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.811715][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.822392][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.838686][ T8550] Bluetooth: hci0: command 0x0406 tx timeout [ 780.848740][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.878285][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.906901][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.942735][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.969888][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.006736][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.060442][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.084854][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.102424][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.124518][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.249129][T11291] vxcan1: entered promiscuous mode [ 781.274087][T11293] vxcan1: left promiscuous mode [ 781.282339][T11293] vxcan1: entered allmulticast mode [ 781.305822][T11103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.330674][T11103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.342800][T11103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.354306][T11103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.418402][ T8917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.426360][ T8917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.700670][ T8917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.780351][ T8917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.087795][T11305] lo speed is unknown, defaulting to 1000 [ 783.105277][T11073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.130062][T11073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.510150][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 786.128332][T10966] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 786.137166][T10966] Bluetooth: hci6: Injecting HCI hardware error event [ 786.146661][T10966] Bluetooth: hci6: hardware error 0x00 [ 789.773041][T10966] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 791.668402][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1204'. [ 792.084047][ T29] audit: type=1326 audit(1725193067.663:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e6d79eb9 code=0x7ffc0000 [ 792.269896][ T29] audit: type=1326 audit(1725193067.663:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e6d79eb9 code=0x7ffc0000 [ 792.308806][ T29] audit: type=1326 audit(1725193067.673:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66e6d79eb9 code=0x7ffc0000 [ 793.162735][ T5272] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 793.180746][ T29] audit: type=1326 audit(1725193067.673:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e6d79eb9 code=0x7ffc0000 [ 793.349088][ T29] audit: type=1326 audit(1725193067.673:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e6d79eb9 code=0x7ffc0000 [ 793.428229][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 794.565650][ T29] audit: type=1326 audit(1725193067.713:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66e6d78850 code=0x7ffc0000 [ 794.669706][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.889770][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.009966][ T29] audit: type=1326 audit(1725193067.713:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66e6d79abb code=0x7ffc0000 [ 795.092028][ T5272] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 795.178260][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.197679][ T29] audit: type=1326 audit(1725193067.713:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66e6d79abb code=0x7ffc0000 [ 795.311628][ T5272] usb 5-1: config 0 descriptor?? [ 795.332915][ T5272] usb 5-1: can't set config #0, error -71 [ 795.351466][ T29] audit: type=1326 audit(1725193067.723:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66e6d79abb code=0x7ffc0000 [ 795.406498][ T5272] usb 5-1: USB disconnect, device number 15 [ 795.558174][ T29] audit: type=1326 audit(1725193067.723:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11356 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66e6d79abb code=0x7ffc0000 [ 795.682057][ T8550] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 795.695402][ T8550] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 795.703708][ T8550] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 795.716121][ T8550] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 795.724041][ T8550] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 795.733809][ T8550] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 795.778322][ T3180] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 796.016854][ T8550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 796.018261][ T3180] usb 3-1: Using ep0 maxpacket: 16 [ 796.032661][ T8550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 796.033683][ T3180] usb 3-1: unable to get BOS descriptor or descriptor too short [ 796.046207][T11422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.052968][ T3180] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 796.071716][ T8550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.083268][ T8550] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.092849][ T8550] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 796.108706][ T3180] usb 3-1: config 1 interface 0 has no altsetting 0 [ 796.121224][ T8550] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 796.128379][ T5272] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 796.165046][ T3180] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 796.206598][ T3180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.235404][ T3180] usb 3-1: Product: ь [ 796.293625][ T3180] usb 3-1: SerialNumber: syz [ 796.328280][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 796.335873][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.403231][ T5272] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 796.422939][ T5272] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 796.506608][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.534630][ T5272] usb 5-1: config 0 descriptor?? [ 796.628242][T11422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.791454][ T8907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.866105][T11424] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1219'. [ 796.882713][T11424] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1219'. [ 796.901616][T11429] lo speed is unknown, defaulting to 1000 [ 796.954739][ T5272] usb 5-1: USB disconnect, device number 16 [ 797.175174][T11422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.361888][ T8907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.467878][T11422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.549114][T11426] lo speed is unknown, defaulting to 1000 [ 797.799940][ T8550] Bluetooth: hci9: command tx timeout [ 798.410336][ T8550] Bluetooth: hci2: command tx timeout [ 798.664376][ T8907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.878386][ T8550] Bluetooth: hci9: command tx timeout [ 799.982045][ T8907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.457485][T11422] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.518286][ T8550] Bluetooth: hci2: command tx timeout [ 801.417733][T11422] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.620338][ T3180] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 801.958297][ T8550] Bluetooth: hci9: command tx timeout [ 802.383925][T11422] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.464253][T11422] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.479517][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 802.479535][ T29] audit: type=1326 audit(1725193078.063:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11457 comm="syz.4.1225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66e6d79eb9 code=0x0 [ 802.550621][ T5275] usb 3-1: USB disconnect, device number 17 [ 802.598337][ T8550] Bluetooth: hci2: command tx timeout [ 804.038488][ T8550] Bluetooth: hci9: command tx timeout [ 804.682523][ T8550] Bluetooth: hci2: command tx timeout [ 804.738471][ T8907] bridge_slave_1: left allmulticast mode [ 804.744364][ T8907] bridge_slave_1: left promiscuous mode [ 804.793700][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.828897][ T8907] bridge_slave_0: left allmulticast mode [ 804.855595][ T8907] bridge_slave_0: left promiscuous mode [ 804.876048][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.082292][ T5302] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 807.337238][ T5302] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 807.347832][ T5302] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 807.356616][ T5302] usb 3-1: config 0 has no interface number 0 [ 807.367804][ T5302] usb 3-1: config 0 has no interface number 1 [ 807.380042][ T5302] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 807.405785][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.435969][ T5302] usb 3-1: config 0 descriptor?? [ 807.452139][ T5302] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.891189][T11546] ip6t_srh: unknown srh invflags 7D00 [ 808.001951][ T5302] snd-usb-audio 3-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 808.626915][ T5302] usb 3-1: USB disconnect, device number 18 [ 809.083461][ T30] INFO: task syz.4.1030:10462 blocked for more than 143 seconds. [ 809.092320][ T30] Not tainted 6.11.0-rc6-syzkaller #0 [ 809.098810][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.105164][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.105181][T11554] udevd[11554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.190423][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 809.218215][ T30] task:syz.4.1030 state:D stack:24152 pid:10462 tgid:10453 ppid:10045 flags:0x00000004 [ 809.263823][ T30] Call Trace: [ 809.272594][ T30] [ 809.292662][ T30] __schedule+0x17ae/0x4a10 [ 809.300641][ T30] ? __pfx___schedule+0x10/0x10 [ 809.333938][ T30] ? __pfx_lock_release+0x10/0x10 [ 809.388576][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 809.415049][ T30] ? schedule+0x90/0x320 [ 809.508973][ T30] schedule+0x14b/0x320 [ 809.513297][ T30] io_schedule+0x8d/0x110 [ 809.517778][ T30] folio_wait_bit_common+0x882/0x12b0 [ 809.528172][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 809.536099][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 809.548263][ T30] ? __filemap_get_folio+0x984/0xc10 [ 809.553620][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 809.578170][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 809.588677][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 809.593860][ T30] ? ocfs2_parse_options+0x11d4/0x1640 [ 809.608144][ T30] ? __pfx_hlock_conflict+0x10/0x10 [ 809.618342][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 809.623576][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 809.678233][ T30] set_blocksize+0x2f4/0x360 [ 809.682888][ T30] sb_set_blocksize+0x47/0xf0 [ 809.687577][ T30] ocfs2_get_sector+0x9f/0x500 [ 809.708427][ T30] ? __pfx_ocfs2_get_sector+0x10/0x10 [ 809.713941][ T30] ? lockdep_unlock+0x16a/0x300 [ 809.719587][ T30] ? __pfx_lockdep_unlock+0x10/0x10 [ 809.728569][ T30] ? lockdep_unlock+0x16a/0x300 [ 809.733642][ T30] ocfs2_fill_super+0x3c7/0x5880 [ 809.758156][ T30] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 809.763601][ T30] ? __pfx_validate_chain+0x10/0x10 [ 809.768981][ T30] ? __pfx_validate_chain+0x10/0x10 [ 809.774185][ T30] ? validate_chain+0x11e/0x5900 [ 809.798675][ T30] ? __lock_acquire+0x137a/0x2040 [ 809.803766][ T30] ? __pfx_validate_chain+0x10/0x10 [ 809.809474][ T30] ? string+0x26a/0x2b0 [ 809.813665][ T30] ? widen_string+0x3a/0x310 [ 809.828415][ T30] ? string+0x26a/0x2b0 [ 809.832580][ T30] ? bdev_name+0x2b1/0x3c0 [ 809.836982][ T30] ? pointer+0x703/0x1210 [ 809.858152][ T30] ? __pfx_pointer+0x10/0x10 [ 809.862794][ T30] ? __pfx_format_decode+0x10/0x10 [ 809.867918][ T30] ? __lock_acquire+0x137a/0x2040 [ 809.893606][ T30] ? vsnprintf+0x1ccd/0x1da0 [ 809.908528][ T30] ? snprintf+0xda/0x120 [ 809.912813][ T30] ? __pfx_lock_release+0x10/0x10 [ 809.917865][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 809.938195][ T30] ? __pfx_snprintf+0x10/0x10 [ 809.944921][ T30] ? set_blocksize+0x1ff/0x360 [ 809.950189][ T30] ? sb_set_blocksize+0x98/0xf0 [ 809.955067][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 809.960563][ T30] mount_bdev+0x20a/0x2d0 [ 809.964893][ T30] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 809.971341][ T30] ? __pfx_mount_bdev+0x10/0x10 [ 809.976235][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 809.981965][ T30] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 810.008255][ T30] ? cap_capable+0x1b4/0x250 [ 810.012901][ T30] legacy_get_tree+0xee/0x190 [ 810.017603][ T30] ? __pfx_ocfs2_mount+0x10/0x10 [ 810.028141][ T30] vfs_get_tree+0x90/0x2b0 [ 810.032606][ T30] do_new_mount+0x2be/0xb40 [ 810.037134][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 810.048616][ T30] __se_sys_mount+0x2d6/0x3c0 [ 810.053320][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 810.078337][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 810.083598][ T30] ? do_syscall_64+0x100/0x230 [ 810.108141][ T30] ? __x64_sys_mount+0x20/0xc0 [ 810.112951][ T30] do_syscall_64+0xf3/0x230 [ 810.117439][ T30] ? clear_bhb_loop+0x35/0x90 [ 810.138136][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.144078][ T30] RIP: 0033:0x7fe297579eb9 [ 810.159939][ T30] RSP: 002b:00007fe29833d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 810.168546][ T30] RAX: ffffffffffffffda RBX: 00007fe297716208 RCX: 00007fe297579eb9 [ 810.176518][ T30] RDX: 0000000020000a40 RSI: 0000000020000a00 RDI: 0000000020000000 [ 810.188321][ T30] RBP: 00007fe2975e793e R08: 0000000000000000 R09: 0000000000000000 [ 810.198484][ T30] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000000 [ 810.206485][ T30] R13: 0000000000000000 R14: 00007fe297716208 R15: 00007ffdd6965c68 [ 810.250944][ T30] [ 810.293160][ T30] [ 810.293160][ T30] Showing all locks held in the system: [ 810.308556][ T30] 1 lock held by pool_workqueue_/3: [ 810.321263][ T30] 3 locks held by kworker/u8:0/11: [ 810.326430][ T30] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 810.357831][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 810.388137][ T30] #2: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 810.408265][ T30] 1 lock held by khungtaskd/30: [ 810.413147][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 810.485633][ T30] 2 locks held by kworker/1:2/3180: [ 810.528411][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 810.598463][ T30] #1: ffffc90009e9fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 810.619128][ T30] 1 lock held by dhcpcd/4891: [ 810.623929][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 810.688533][ T30] 2 locks held by getty/4974: [ 810.693262][ T30] #0: ffff8880300d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 810.718185][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 810.728484][ T30] 3 locks held by kworker/0:6/5275: [ 810.733726][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 810.758389][ T30] #1: ffffc900041c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 810.798145][ T30] #2: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 810.818231][ T30] 2 locks held by syz.0.611/7855: [ 810.823304][ T30] 5 locks held by kworker/u8:22/8907: [ 810.839223][ T30] #0: ffff88801b6e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 810.878167][ T30] #1: ffffc90002fefd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 810.898503][ T30] #2: ffffffff8fa6cc90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 810.907971][ T30] #3: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 810.948159][ T30] #4: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 810.967087][ T30] 1 lock held by syz.0.961/9755: [ 810.972382][ T30] 1 lock held by syz.4.1030/10462: [ 810.977487][ T30] #0: ffff88804909e0e0 (&type->s_umount_key#86/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 811.008381][ T30] 3 locks held by syz-executor/11103: [ 811.013773][ T30] #0: ffff888072f2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 811.028803][ T30] #1: ffff888072f2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 811.058238][ T30] #2: ffffffff8fbe5328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 811.098236][ T30] 1 lock held by syz-executor/11426: [ 811.103574][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 811.118197][ T30] 1 lock held by syz-executor/11429: [ 811.123509][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 811.138222][ T30] 2 locks held by kworker/u8:26/11530: [ 811.143716][ T30] 3 locks held by kworker/u8:27/11532: [ 811.158265][ T30] #0: ffff88802fb50148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 811.178233][ T30] #1: ffffc90008b8fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 811.208198][ T30] #2: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 811.238397][ T30] 1 lock held by syz.4.1235/11550: [ 811.243558][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 811.277020][ T30] [ 811.308237][ T30] ============================================= [ 811.308237][ T30] [ 811.338232][ T30] NMI backtrace for cpu 1 [ 811.342718][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 811.351504][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 811.361569][ T30] Call Trace: [ 811.364854][ T30] [ 811.367792][ T30] dump_stack_lvl+0x241/0x360 [ 811.372482][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.377686][ T30] ? __pfx__printk+0x10/0x10 [ 811.382286][ T30] ? vprintk_emit+0x667/0x7c0 [ 811.386980][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 811.392050][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 811.396979][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 811.402423][ T30] ? _printk+0xd5/0x120 [ 811.406562][ T30] ? __pfx__printk+0x10/0x10 [ 811.411134][ T30] ? __wake_up_klogd+0xcc/0x110 [ 811.415984][ T30] ? __pfx__printk+0x10/0x10 [ 811.420564][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 811.425572][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 811.431550][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 811.437533][ T30] watchdog+0xff4/0x1040 [ 811.441767][ T30] ? watchdog+0x1ea/0x1040 [ 811.446173][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.450849][ T30] kthread+0x2f0/0x390 [ 811.454902][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.459565][ T30] ? __pfx_kthread+0x10/0x10 [ 811.464137][ T30] ret_from_fork+0x4b/0x80 [ 811.468538][ T30] ? __pfx_kthread+0x10/0x10 [ 811.473110][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.477881][ T30] [ 811.481835][ T30] Sending NMI from CPU 1 to CPUs 0: [ 811.487068][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 811.588325][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 811.595199][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 811.604032][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 811.614075][ T30] Call Trace: [ 811.617339][ T30] [ 811.620256][ T30] dump_stack_lvl+0x241/0x360 [ 811.624922][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.630218][ T30] ? __pfx__printk+0x10/0x10 [ 811.635415][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 811.641412][ T30] ? vscnprintf+0x5d/0x90 [ 811.645746][ T30] panic+0x349/0x860 [ 811.649632][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.655784][ T30] ? __pfx_panic+0x10/0x10 [ 811.660187][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 811.665547][ T30] ? __irq_work_queue_local+0x137/0x410 [ 811.671085][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 811.676438][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.682588][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 811.688751][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 811.695175][ T30] watchdog+0x1033/0x1040 [ 811.699520][ T30] ? watchdog+0x1ea/0x1040 [ 811.703961][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.708629][ T30] kthread+0x2f0/0x390 [ 811.712689][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.717367][ T30] ? __pfx_kthread+0x10/0x10 [ 811.721944][ T30] ret_from_fork+0x4b/0x80 [ 811.726343][ T30] ? __pfx_kthread+0x10/0x10 [ 811.731045][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.735872][ T30] [ 811.739143][ T30] Kernel Offset: disabled [ 811.743461][ T30] Rebooting in 86400 seconds..