last executing test programs: 3m41.985046531s ago: executing program 1 (id=84): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a77828403a092626b40d000000010902120001000000000904"], 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x4083, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000140)="eb", 0x1a000, 0x14ff, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x80) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x104, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004810}, 0x24000001) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000100)={0x90000005}) syz_usb_control_io(r0, 0x0, 0x0) io_uring_setup(0x177f, &(0x7f0000000140)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 3m37.63097002s ago: executing program 1 (id=92): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4f0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x45c, 0x2, [@TCA_FLOW_EMATCHES={0x450, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_META={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0x5c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="98", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e6949b93e70242", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="66c4", @TCF_META_TYPE_VAR="a76023", @TCF_META_TYPE_VAR="08e8", @TCF_META_TYPE_VAR="8dfff919b512"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="a2c000a8dfc2b6d930"]}]}}, @TCF_EM_META={0xd0, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="856554c3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b7f550e3aa88a9294d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8e73b72687a8c353"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="37d3b5d1afaa1380c6"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="feb9e2d7a8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="d7599d7162", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8a50520b797bb6"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x0, 0x0, 0x0, {{}, "668e74dff05c58baf0fbb061717b123cb89ce91a683c343344517576e8ba09fecbf8e75b0016b7c6b2a0c8eb04e6d16b8961097b53d295ebc7eb349e652deeb958bff39a5c9ddd43b4"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x34, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e9c12c77b3b239089f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5a1d2e9e64a7cfa7"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="0f"]}]}}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'F'}}}, @TCF_EM_META={0x7c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b041fb1d85"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc70f7945540e91b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="faa1ad6e"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="b750e3f4a83c2b", @TCF_META_TYPE_VAR="0ea3f381c6", @TCF_META_TYPE_VAR="e6e27fd7db48", @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0x18, 0x0, 0x0, 0x0, {{}, "ef28b277851cdc076dd2e76f"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x4f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 41.072524512s ago: executing program 1 (id=97): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f908, 0x5, '\x00', @p_u16=0x0}}) 40.491371855s ago: executing program 1 (id=153): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000200)) 37.127923887s ago: executing program 1 (id=159): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) creat(&(0x7f0000000080)='./file0\x00', 0x1de) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0xfffffffffffffe46, 0xffffffffffffffff, {0xfc}}, './file0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x0, 0x348797a455de0377, 0x0, 0x0, {{}, {@val, @val={0xc}}}}, 0x20}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/28], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400000300000000000000000a4000ff", @ANYRES32=r11, @ANYBLOB="140002000000000000000800000036b09dea94de000008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) socket(0x10, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x5, 0xf}, {0xffe9, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x6f}}]}, 0x2c}}, 0x0) 36.829086282s ago: executing program 1 (id=160): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x3, 'syz1\x00', 0x8}, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "b9a090", 0xc, 0x11, 0x1, @loopback, @local, {[], {0x4e22, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x4, 0x0, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 36.82286124s ago: executing program 2 (id=161): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x3, 'syz1\x00', 0x8}, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "b9a090", 0xc, 0x11, 0x1, @loopback, @local, {[], {0x4e22, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x4, 0x0, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 34.331932487s ago: executing program 2 (id=168): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c45cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000380)="10550fbff99b9903519e26fee5adbe1a72ab3d60187e73dfe598e305", 0x1c}], 0x2) 34.26155564s ago: executing program 2 (id=169): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x3, 'syz1\x00', 0x8}, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "b9a090", 0xc, 0x11, 0x1, @loopback, @local, {[], {0x4e22, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x4, 0x0, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 30.494132589s ago: executing program 2 (id=173): unshare(0x28000400) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x3, 0x4) 30.34492521s ago: executing program 2 (id=174): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 28.580127688s ago: executing program 2 (id=177): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x3f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000010) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0xd76c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r8, @ANYRES64=r4], 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1b000000000000000000020000003000018008000700", @ANYRES32=0x0, @ANYBLOB="14000400fc020000000000000600050000000000060001000a"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYRES64=r5], 0x2c}}, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @multicast}) bind$can_raw(r4, &(0x7f00000000c0), 0x10) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010006000201020c0d2407000005000000000021000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYRES16, @ANYRES16=r1, @ANYRESOCT=r4], 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000005001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r13 = syz_open_dev$video(&(0x7f0000000240), 0xb525, 0x0) ioctl$VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000000440)={0x94a7, 0x9, 0x3}) 26.409351218s ago: executing program 4 (id=183): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000003f80)=""/4108, 0x100c) (fail_nth: 3) 24.445099023s ago: executing program 3 (id=185): clock_gettime(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x22) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000500)={0x2000043}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) 23.109515544s ago: executing program 4 (id=186): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 22.253322756s ago: executing program 3 (id=187): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x88, 0xb, 0xfffa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0xc, &(0x7f00000000c0)={0x40, 0x4, 0x55, {0x55, 0x37, "401898132f053de35cabf0ef98a423abcc146bcc98ae2ac58cb0db786b68dc3d0f5e3534af0485f6c24fb4a055b46fe8484c32213878177c9f79574b9eed2644fadea2b9d9a01519ae1c442a71bf3dcaaa5244"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x40, 0x13, 0xde, "9612832dce3a331b1a08c463b724c08b8d67cd37ea19e3b08be97a9351094cbd627dec3bf87d5168c7bdae785695dd98adc4744e01d629a3d1a07423bd995b3120b6f4ca79273eab7cfbe676949c4db22c51e4d2bfc3a7de84f5a9fffe7fbea945a7b38f6cb68a0f361e8a2d0afbddc96760520dfd822e84cc3609d875238c2d3184a9704f32509064505893b50589db7c27e84dafc82aefb3d0fff211c9ab3fdf6a1d831db72af980f4e238eb4760029e56497619db257f126dd99ce8c24b233165937e785eaaa2d1657c6b3949dd15cceb5479fccdecffdfafef942c3d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xe3}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd, 0x6, 0x5, 0x6, 0x9, 0x1000, 0x68, 0xce, 0x1, 0x9, 0x5, 0x8}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0xfc00}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 22.155825556s ago: executing program 0 (id=188): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="64020000100001000000000000000000fe00000000000000000000000000aad5a69b8a395a327c865546d40b866e9a00000000000000000000ffffe000000100010000000000000000000000000000b672c7298f44dcc65d21d22390ba8c6f08a8075e7d43b225a2456a8aded5df6d49e977eaf332", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000af00000000000000480002006362632861657329"], 0x264}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0088481327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x74cb0000, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 21.910544458s ago: executing program 0 (id=189): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0xffffffff, 0x0, {0x81, 0x80, 0x80, 0x4}}, 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) r3 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r3, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "6411f88379033038977e4fc5fd5ffc7df11382ed860e9f128e4cc67b20fbbd754b6584f9b3054ff39aa31d609052e3db67672c88324efbfd4aac0859c1c2d907", 0x25}, 0x48, 0xfffffffffffffffa) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002900000000000000555f000900000000"], 0x18}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b3, 0x3105, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x60, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xba1}}, {{{0x9, 0x5, 0x81, 0x3, 0x7fbfb797099a8ce, 0x3, 0x9, 0x80}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES32=r5]) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0xfffffffffffffe29, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000080000000f0000000500300000000000000030000100000008000300", @ANYRES32=r10, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 20.880941141s ago: executing program 3 (id=190): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b63, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 17.846895851s ago: executing program 4 (id=192): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a"], 0x118) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3800001, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 17.818360484s ago: executing program 0 (id=193): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) syz_open_dev$sndpcmp(0x0, 0x4, 0x240000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendto$inet(r3, &(0x7f0000000040)="0d02", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x3, "0f6179"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="00000800000004"], 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00200297d6c600000000000000000a0000008f000000"], 0x18}}, 0x0) 17.378684055s ago: executing program 4 (id=194): r0 = inotify_init1(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 17.29524223s ago: executing program 3 (id=195): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa0000000000109078"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r2, r2}, &(0x7f0000000540)=""/16, 0x10, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000480)={0x2, 0x3, 0xd000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010b400f9ff7f0000ba0001090224000100002300090400000103000000092100000001220500090581034000060000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) listen(r0, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 13.733341328s ago: executing program 0 (id=196): clock_gettime(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x22) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000500)={0x2000043}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) 8.380087454s ago: executing program 4 (id=197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) syz_usb_connect$cdc_ncm(0x1, 0xae, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x83, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1b83, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x3f}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xffff, 0x97, 0x2, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x81, 0xeae, 0x4, 0x60, 0x7, 0x6c}, @mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x80, [0x7fff, 0x800, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x39, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9d, 0x8, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x7f, 0x19, 0xb, 0x10, 0x8}, 0x194, &(0x7f0000000440)={0x5, 0xf, 0x194, 0x6, [@generic={0xbb, 0x10, 0x3, "9947657b460e2647ea5d8d9dfd2275fb8fba2980434833a5ea2e1151e04de70d63fbf5b48bc6a145a1376f2c325dda4e5d8050e871689a445498728bcb6032896b474bbddedb63271cf71d6876de49ee265b3ad46452e8a3504f7970ef1dee92e0c4cb95be057746e1b5bbab4b0aa27d9717fd3de65626f5eb4f3ea27c174b752ebc9d1865796c80242f4fe2a69bf50fe198501365eabfd8cf9ef5ca39b89873eb5c6af84544b4fad5d38c876450db8e3247c9062a1c96cb"}, @generic={0xb0, 0x10, 0xa, "9103fe62a453d1f7c398973e1144ea5d2b7c0509e55ba8907f7bf9267344a3bb0cfbbcba6081582326ce973cb7ac5ce83a9ab5ee00ed174ec45455cf36b5052f75feeceb934118105bbf3d17d3a5ad7c9d9e4a35c077b4d0a95b37197ae9b05ab01aa6736d9ca7c6c43205b35126eeee5b5f9ea6f3393f24b2dc5c47cb970db833dd11475602d4ed9ba844212f04133abc9b092bac57c0d5eaaa17375f3272cf79f119889c1bdabdae004bb717"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x2, 0x42fe, 0xa4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x0, 0x7, 0x4000, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x67, 0x7, 0x0, 0x5, 0xf}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0xae, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x83, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1b83, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x3f}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xffff, 0x97, 0x2, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x81, 0xeae, 0x4, 0x60, 0x7, 0x6c}, @mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x80, [0x7fff, 0x800, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x39, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9d, 0x8, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x7f, 0x19, 0xb, 0x10, 0x8}, 0x194, &(0x7f0000000440)={0x5, 0xf, 0x194, 0x6, [@generic={0xbb, 0x10, 0x3, "9947657b460e2647ea5d8d9dfd2275fb8fba2980434833a5ea2e1151e04de70d63fbf5b48bc6a145a1376f2c325dda4e5d8050e871689a445498728bcb6032896b474bbddedb63271cf71d6876de49ee265b3ad46452e8a3504f7970ef1dee92e0c4cb95be057746e1b5bbab4b0aa27d9717fd3de65626f5eb4f3ea27c174b752ebc9d1865796c80242f4fe2a69bf50fe198501365eabfd8cf9ef5ca39b89873eb5c6af84544b4fad5d38c876450db8e3247c9062a1c96cb"}, @generic={0xb0, 0x10, 0xa, "9103fe62a453d1f7c398973e1144ea5d2b7c0509e55ba8907f7bf9267344a3bb0cfbbcba6081582326ce973cb7ac5ce83a9ab5ee00ed174ec45455cf36b5052f75feeceb934118105bbf3d17d3a5ad7c9d9e4a35c077b4d0a95b37197ae9b05ab01aa6736d9ca7c6c43205b35126eeee5b5f9ea6f3393f24b2dc5c47cb970db833dd11475602d4ed9ba844212f04133abc9b092bac57c0d5eaaa17375f3272cf79f119889c1bdabdae004bb717"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x2, 0x42fe, 0xa4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x0, 0x7, 0x4000, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x67, 0x7, 0x0, 0x5, 0xf}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000600)={0xc, &(0x7f00000006c0)={0x0, 0x39, 0x9c, {0x9c, 0xd, "8b634987ac0835aa7c6a9f048ceeae0c93f1dabb3f1292160dc5d19246d2c71ad72176b80db6cfb4281df6031478e14fba1982309d355e8168b089aec00028a61b90249ff5c8f637099ca3ad8221175039d39fab3378471459d42e018aa2715cd0cfc0c5ebbf522c05fefd7239fd87c7c06dc36bab6c157b43abc45249b39fbd64bcd2f38533af51a1e4277243280e8d92b5b0d5d4e74a0e99eb"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x24, &(0x7f0000000780)={0x40, 0x30, 0x93, "aa29a17c0c6a99e1b4422b9127c82981815ff5bb6bca261ea39e46cb53203101fc7515e2c441f6b3eb380a4ee24d063e84d60ff788cc53adce2048d1b70b62384a3b6ec49798061c59a733d20d821219df8f9a791bd9b7e6e0550e49ead7d4990203b04845f1d302035c5a0d20434746ee67c8cb8192f793683b825a373838065ab081dd8e038d289b2f459c86a4f386618505"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x100, 0x2, 0x2, 0x4, 0x673a, 0x4, 0xc7, 0x9, 0x5, 0xfff8, 0x7, 0x1}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x2628}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 8.379591442s ago: executing program 0 (id=198): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="64020000100001000000000000000000fe00000000000000000000000000aad5a69b8a395a327c865546d40b866e9a00000000000000000000ffffe000000100010000000000000000000000000000b672c7298f44dcc65d21d22390ba8c6f08a8075e7d43b225a2456a8aded5df6d49e977eaf332", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000af00000000000000480002006362632861657329"], 0x264}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0088481327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x74cb0000, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.367431312s ago: executing program 3 (id=199): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000002480)=""/106) r1 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x40101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x8, 0x0, 0x100000}, 0x20) unshare(0x2a020400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5]) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xffffffc4, 0xfffffdfd}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0xfe, 0x0) 1.086804045s ago: executing program 0 (id=200): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 34.993514ms ago: executing program 4 (id=201): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x8000, 0x30d000) socket$pppl2tp(0x18, 0x1, 0x1) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000200)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = memfd_create(&(0x7f0000000700)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\x82E6\x8f\xee\x88e\x7f\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80k\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xda\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xc0\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xcekh\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd0/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x80th~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\xff\xff\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88YY\xd4\xff\x00\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc7\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRYX\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\xded\x16A!\x8b#1\xf9\x05\x00G\x02\xa3\xe6Bl\xd2\x02\xfb[\x82J\xca\xdf:\x8ft\xe0\xf8\a\x00\x00\x00\x00\x00\x00\x00\x00\xde-U\xd8\xc5\x85\x9d\xb6~p;\xe3\"`\x83\x12\xc1\xa5\xa7\tf\xf2\xde\xe2\x01\xcc\xf7\x1cjq0\x90\xa9g{\x9b6\xc4cN\xcd\xc6\xfbw\x01\xe3Z\x02\xed\xab\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r?\x1e\xee,\xca\xffn\x1eq\xd6\xccs\x92;\xf5*\xa3\xe6_S\f12+\xf7\x98\x9a\xc0{j\xbb\x1c\x05k\xea#2\xa2U\xfc\xd3c\xe0E\xcc\'\xe7s\xa2\x7f\xd1 ,\x91\x8b(L\x00\xc0\xaf\xd2\xc5', 0x2) fstatfs(r5, &(0x7f0000000000)=""/248) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x14, 0x0, &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x1e8) 0s ago: executing program 3 (id=202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0x0, 0x1}, {0xe}, 0x0, 0x3, 0xfe}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r1}, 0x8) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (async) recvmmsg(r6, &(0x7f0000007940), 0x55, 0xe803, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) r7 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='[\xa2{\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r7) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x65}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) (async) r10 = add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r7) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000006161616161616161616161616161616161616161616161616161616161616161313158b3c480da313131313131313131353131313131313131313131313131313131313131c72e1d6bd90171d645e29b82552221c7a82b9eb2e45d1c713c88fb60220aaa62d4562b7d70f35679dd08614e9ca6c20d26eb75d4ecb0a9b00928866c0904aee5a80582624bbad9f2fbd968a53ff39831c19f99ebb4b1"], 0x48, r10) kernel console output (not intermixed with test programs): g+0x10/0x10 [ 96.628030][ T5482] ? vfs_write+0x7bf/0xc90 [ 96.632567][ T5482] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 96.639208][ T5482] ? lockdep_hardirqs_on+0x99/0x150 [ 96.644458][ T5482] __do_fast_syscall_32+0xb4/0x110 [ 96.649625][ T5482] ? exc_page_fault+0x590/0x8c0 [ 96.654532][ T5482] do_fast_syscall_32+0x34/0x80 [ 96.659433][ T5482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.665809][ T5482] RIP: 0023:0xf7fc2579 [ 96.669919][ T5482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 96.689568][ T5482] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 96.698032][ T5482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001200 [ 96.706046][ T5482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.714060][ T5482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.722069][ T5482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.730079][ T5482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.738104][ T5482] [ 97.532115][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 97.567013][ T5240] Bluetooth: hci2: command tx timeout [ 97.753310][ T35] bridge_slave_0: left allmulticast mode [ 97.814229][ T35] bridge_slave_0: left promiscuous mode [ 97.849025][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.945475][ T5230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.110055][ T5230] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 98.174636][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.226195][ T5230] usb 5-1: Product: syz [ 98.244750][ T5230] usb 5-1: Manufacturer: syz [ 98.269490][ T5230] usb 5-1: SerialNumber: syz [ 98.317573][ T5230] usb 5-1: config 0 descriptor?? [ 98.353838][ T5230] go7007 5-1:0.0: Sensoray 2250 found [ 98.396117][ T5230] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 99.646348][ T5240] Bluetooth: hci2: command tx timeout [ 100.702934][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.811486][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.842421][ T35] bond0 (unregistering): Released all slaves [ 101.365474][ T5509] netlink: 'syz.2.74': attribute type 26 has an invalid length. [ 101.725390][ T5240] Bluetooth: hci2: command tx timeout [ 102.039423][ T5280] usb 5-1: USB disconnect, device number 8 [ 106.515936][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.523905][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.618890][ T5456] bridge_slave_0: entered allmulticast mode [ 106.666535][ T5456] bridge_slave_0: entered promiscuous mode [ 106.732386][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.768437][ T29] audit: type=1326 audit(1726893911.076:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5546 comm="syz.1.80" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 106.804870][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.835529][ T5456] bridge_slave_1: entered allmulticast mode [ 106.862071][ T5456] bridge_slave_1: entered promiscuous mode [ 107.127914][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.341903][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 107.367174][ T5280] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 107.410581][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.429944][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.483707][ T5280] usb 5-1: Product: syz [ 107.491770][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.518000][ T5280] usb 5-1: Manufacturer: syz [ 107.542986][ T5280] usb 5-1: SerialNumber: syz [ 107.627338][ T5280] usb 5-1: config 0 descriptor?? [ 107.692826][ T5280] gspca_main: se401-2.14.0 probing 047d:5003 [ 107.971180][ T5456] team0: Port device team_slave_0 added [ 108.265386][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.358795][ T940] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.426280][ T5280] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 108.436210][ T5456] team0: Port device team_slave_1 added [ 108.456769][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 108.545319][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.575916][ T940] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 108.615697][ T9] usb 2-1: config 0 descriptor?? [ 108.629568][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.687249][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 108.722219][ T940] usb 3-1: config 0 descriptor?? [ 108.782353][ T940] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 109.050242][ T5548] No such timeout policy "syz0" [ 109.145179][ C0] hrtimer: interrupt took 63883 ns [ 109.286336][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 109.330742][ T5280] gspca_se401: read req failed req 0x06 error -71 [ 109.369833][ T9] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 109.393036][ T5280] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 109.460358][ T5280] usb 5-1: USB disconnect, device number 9 [ 109.855505][ T940] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 109.879538][ T940] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 110.070995][ T5582] FAULT_INJECTION: forcing a failure. [ 110.070995][ T5582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.135039][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: syz.3.87 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 110.145306][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.155416][ T5582] Call Trace: [ 110.158737][ T5582] [ 110.161704][ T5582] dump_stack_lvl+0x241/0x360 [ 110.166448][ T5582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.171702][ T5582] ? __pfx__printk+0x10/0x10 [ 110.176342][ T5582] ? __pfx_lock_release+0x10/0x10 [ 110.181417][ T5582] ? __local_bh_enable_ip+0x168/0x200 [ 110.186836][ T5582] ? __convert_from_fxsr+0x5a6/0x800 [ 110.192177][ T5582] should_fail_ex+0x3b0/0x4e0 [ 110.196903][ T5582] copy_fpstate_to_sigframe+0xa5c/0xdc0 [ 110.202502][ T5582] ? copy_fpstate_to_sigframe+0x179/0xdc0 [ 110.208388][ T5582] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 110.214592][ T5582] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.220988][ T5582] ? fpu__alloc_mathframe+0xab/0x130 [ 110.226329][ T5582] get_sigframe+0x5d9/0x800 [ 110.230891][ T5582] ? __pfx_get_sigframe+0x10/0x10 [ 110.235967][ T5582] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.241212][ T5582] ? lockdep_hardirqs_on+0x99/0x150 [ 110.246470][ T5582] ia32_setup_rt_frame+0x130/0xc80 [ 110.251655][ T5582] ? __pfx_get_signal+0x10/0x10 [ 110.256551][ T5582] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 110.262256][ T5582] arch_do_signal_or_restart+0x4a8/0x860 [ 110.267948][ T5582] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.274174][ T5582] ? syscall_exit_to_user_mode+0xa3/0x370 [ 110.279956][ T5582] syscall_exit_to_user_mode+0xc9/0x370 [ 110.285569][ T5582] __do_fast_syscall_32+0xc4/0x110 [ 110.290745][ T5582] ? exc_page_fault+0x590/0x8c0 [ 110.295649][ T5582] do_fast_syscall_32+0x34/0x80 [ 110.300551][ T5582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.306955][ T5582] RIP: 0023:0xf7f71577 [ 110.311059][ T5582] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 110.330714][ T5582] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 110.339188][ T5582] RAX: 0000000000000151 RBX: 0000000000000003 RCX: 00000000200050c0 [ 110.347239][ T5582] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.355257][ T5582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.363272][ T5582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.371461][ T5582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.379495][ T5582] [ 110.803284][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.900959][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.985143][ C1] sched: DL replenish lagged too much [ 111.021972][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.143611][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.182475][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.357181][ T5280] usb 3-1: USB disconnect, device number 3 [ 111.512739][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.880555][ T35] hsr_slave_0: left promiscuous mode [ 111.913206][ T35] hsr_slave_1: left promiscuous mode [ 111.939114][ T5598] FAULT_INJECTION: forcing a failure. [ 111.939114][ T5598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.998531][ T5280] usb 2-1: USB disconnect, device number 2 [ 112.095455][ T5598] CPU: 0 UID: 0 PID: 5598 Comm: syz.2.90 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 112.105717][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.115822][ T5598] Call Trace: [ 112.119149][ T5598] [ 112.122205][ T5598] dump_stack_lvl+0x241/0x360 [ 112.126951][ T5598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.132203][ T5598] ? __pfx__printk+0x10/0x10 [ 112.136872][ T5598] should_fail_ex+0x3b0/0x4e0 [ 112.141609][ T5598] strncpy_from_user+0x36/0x2e0 [ 112.146524][ T5598] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 112.152233][ T5598] getname_flags+0xf1/0x540 [ 112.156948][ T5598] vfs_fstatat+0x12c/0x190 [ 112.161419][ T5598] __ia32_compat_sys_ia32_lstat64+0xe1/0x160 [ 112.167460][ T5598] ? __pfx___ia32_compat_sys_ia32_lstat64+0x10/0x10 [ 112.174146][ T5598] ? __secure_computing+0x125/0x370 [ 112.179416][ T5598] __do_fast_syscall_32+0xb4/0x110 [ 112.184588][ T5598] ? exc_page_fault+0x590/0x8c0 [ 112.189523][ T5598] do_fast_syscall_32+0x34/0x80 [ 112.194427][ T5598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.200898][ T5598] RIP: 0023:0xf740d579 [ 112.205013][ T5598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 112.224673][ T5598] RSP: 002b:00000000f56d556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c4 [ 112.233157][ T5598] RAX: ffffffffffffffda RBX: 0000000020002140 RCX: 0000000020004200 [ 112.241266][ T5598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.249382][ T5598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.257401][ T5598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.265417][ T5598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.273537][ T5598] [ 112.352560][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.399458][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.478325][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.506106][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.671208][ T35] veth1_macvtap: left promiscuous mode [ 112.696062][ T35] veth0_macvtap: left promiscuous mode [ 112.728487][ T35] veth1_vlan: left promiscuous mode [ 112.749147][ T35] veth0_vlan: left promiscuous mode [ 120.661991][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.801440][ T35] team0 (unregistering): Port device team_slave_0 removed [ 123.007582][ T5456] hsr_slave_0: entered promiscuous mode [ 123.073188][ T5456] hsr_slave_1: entered promiscuous mode [ 123.125263][ T5456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.174315][ T5456] Cannot create hsr debugfs directory [ 123.223254][ T5595] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.636983][ T5630] netlink: 'syz.3.96': attribute type 3 has an invalid length. [ 123.708281][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.719402][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.729418][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.765304][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.776180][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.785790][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.997951][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.015776][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.024312][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.041272][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.049451][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.058342][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.166250][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.177417][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.197283][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.205944][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.226248][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 124.233728][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.639282][ T5653] FAULT_INJECTION: forcing a failure. [ 125.639282][ T5653] name failslab, interval 1, probability 0, space 0, times 0 [ 125.703601][ T5653] CPU: 0 UID: 0 PID: 5653 Comm: syz.3.101 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 125.713934][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 125.724040][ T5653] Call Trace: [ 125.727356][ T5653] [ 125.730324][ T5653] dump_stack_lvl+0x241/0x360 [ 125.735059][ T5653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.740306][ T5653] ? __pfx__printk+0x10/0x10 [ 125.744947][ T5653] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 125.750548][ T5653] ? __pfx___might_resched+0x10/0x10 [ 125.755890][ T5653] should_fail_ex+0x3b0/0x4e0 [ 125.760616][ T5653] ? ep_insert+0x4c5/0x1aa0 [ 125.765165][ T5653] should_failslab+0xac/0x100 [ 125.769893][ T5653] ? ep_insert+0x4c5/0x1aa0 [ 125.774528][ T5653] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 125.779956][ T5653] ep_insert+0x4c5/0x1aa0 [ 125.784348][ T5653] ? __pfx_ep_insert+0x10/0x10 [ 125.789182][ T5653] ? do_epoll_ctl+0x435/0xf60 [ 125.793909][ T5653] ? __pfx___mutex_lock+0x10/0x10 [ 125.798987][ T5653] ? __fget_files+0x29/0x470 [ 125.803627][ T5653] ? __fget_files+0x29/0x470 [ 125.808274][ T5653] do_epoll_ctl+0x8c9/0xf60 [ 125.812880][ T5653] ? do_epoll_ctl+0x761/0xf60 [ 125.817617][ T5653] __ia32_sys_epoll_ctl+0x160/0x1a0 [ 125.822873][ T5653] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 125.828645][ T5653] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 125.835312][ T5653] ? lockdep_hardirqs_on+0x99/0x150 [ 125.840563][ T5653] __do_fast_syscall_32+0xb4/0x110 [ 125.845729][ T5653] ? exc_page_fault+0x590/0x8c0 [ 125.850979][ T5653] do_fast_syscall_32+0x34/0x80 [ 125.855887][ T5653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.862267][ T5653] RIP: 0023:0xf7f71579 [ 125.866383][ T5653] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.886211][ T5653] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 125.894786][ T5653] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 125.902803][ T5653] RDX: 0000000000000003 RSI: 0000000020000040 RDI: 0000000000000000 [ 125.910829][ T5653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.918851][ T5653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.926870][ T5653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.934899][ T5653] [ 126.016662][ T5229] Bluetooth: hci5: command tx timeout [ 126.211741][ T5229] Bluetooth: hci6: command tx timeout [ 126.336928][ T5244] syz-executor (5244) used greatest stack depth: 19120 bytes left [ 126.365370][ T5229] Bluetooth: hci7: command tx timeout [ 127.085372][ T5230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.287325][ T5230] usb 4-1: Using ep0 maxpacket: 8 [ 127.368194][ T5230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.405317][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.446704][ T5230] usb 4-1: Product: syz [ 127.451036][ T5230] usb 4-1: Manufacturer: syz [ 127.474355][ T5230] usb 4-1: SerialNumber: syz [ 128.045522][ T5229] Bluetooth: hci5: command tx timeout [ 128.295700][ T5229] Bluetooth: hci6: command tx timeout [ 128.348504][ T5641] chnl_net:caif_netlink_parms(): no params data found [ 128.455556][ T5229] Bluetooth: hci7: command tx timeout [ 128.683247][ T5230] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 128.726179][ T5230] usb 4-1: USB disconnect, device number 5 [ 128.767234][ T5230] usblp0: removed [ 128.783524][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.816992][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.824327][ T5641] bridge_slave_0: entered allmulticast mode [ 128.878677][ T5641] bridge_slave_0: entered promiscuous mode [ 129.403887][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.414585][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.433763][ T5641] bridge_slave_1: entered allmulticast mode [ 129.441556][ T5641] bridge_slave_1: entered promiscuous mode [ 129.620723][ T5644] chnl_net:caif_netlink_parms(): no params data found [ 130.135668][ T5229] Bluetooth: hci5: command tx timeout [ 130.365684][ T5229] Bluetooth: hci6: command tx timeout [ 130.525589][ T5229] Bluetooth: hci7: command tx timeout [ 130.872092][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.895753][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.937234][ T5644] bridge_slave_0: entered allmulticast mode [ 130.973875][ T5644] bridge_slave_0: entered promiscuous mode [ 131.076783][ T5638] chnl_net:caif_netlink_parms(): no params data found [ 131.108580][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.125150][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.133159][ T5644] bridge_slave_1: entered allmulticast mode [ 131.149903][ T5644] bridge_slave_1: entered promiscuous mode [ 131.180036][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.223031][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.207000][ T5229] Bluetooth: hci5: command tx timeout [ 132.388403][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.445594][ T5229] Bluetooth: hci6: command tx timeout [ 132.468916][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.519566][ T5641] team0: Port device team_slave_0 added [ 132.550118][ T5641] team0: Port device team_slave_1 added [ 132.605377][ T5229] Bluetooth: hci7: command tx timeout [ 132.694905][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.050166][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 133.105023][ T5718] netlink: 312 bytes leftover after parsing attributes in process `syz.3.109'. [ 133.122679][ T5718] netlink: 312 bytes leftover after parsing attributes in process `syz.3.109'. [ 133.489024][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.504850][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.521091][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.618816][ T5644] team0: Port device team_slave_0 added [ 133.769972][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.806778][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.823861][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.859803][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.994908][ T5644] team0: Port device team_slave_1 added [ 134.215224][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.222403][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.265369][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.498292][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.659824][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.685510][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.692881][ T5638] bridge_slave_0: entered allmulticast mode [ 134.766395][ T5638] bridge_slave_0: entered promiscuous mode [ 134.854575][ T5728] binder: 5727:5728 ioctl c018620c 200005c0 returned -22 [ 134.893845][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.924339][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.048307][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.169488][ T5641] hsr_slave_0: entered promiscuous mode [ 135.230957][ T5641] hsr_slave_1: entered promiscuous mode [ 135.265192][ T5641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.274153][ T5641] Cannot create hsr debugfs directory [ 135.360536][ T5456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.381107][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.401331][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.431785][ T5638] bridge_slave_1: entered allmulticast mode [ 135.448203][ T5638] bridge_slave_1: entered promiscuous mode [ 135.465998][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.494408][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.595468][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.751495][ T5456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.906422][ T5456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.272072][ T5644] hsr_slave_0: entered promiscuous mode [ 136.340374][ T5644] hsr_slave_1: entered promiscuous mode [ 136.434737][ T5644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.453970][ T5644] Cannot create hsr debugfs directory [ 136.607734][ T5456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.739848][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.101095][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.660602][ T5638] team0: Port device team_slave_0 added [ 144.780161][ T5638] team0: Port device team_slave_1 added [ 145.581394][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.614096][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.689477][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.866816][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.873930][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.975163][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.483964][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.810674][ T5638] hsr_slave_0: entered promiscuous mode [ 146.893174][ T5638] hsr_slave_1: entered promiscuous mode [ 146.943747][ T5638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.978719][ T5638] Cannot create hsr debugfs directory [ 147.834707][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.010703][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.136922][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.144089][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.206695][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.213871][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.485831][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.656696][ T5456] veth0_vlan: entered promiscuous mode [ 148.715880][ T5456] veth1_vlan: entered promiscuous mode [ 148.811332][ T5456] veth0_macvtap: entered promiscuous mode [ 148.846169][ T5456] veth1_macvtap: entered promiscuous mode [ 149.212835][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.264952][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.327924][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.396459][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.431516][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.482055][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.531037][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.581156][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.665874][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.728721][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.772763][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.817508][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.855284][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.890379][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.930578][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.971602][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.008843][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.051248][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.124599][ T5456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.185274][ T5456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.195554][ T5456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.204671][ T5456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.649652][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.009744][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.049125][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.207514][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.239018][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.296932][ T5837] FAULT_INJECTION: forcing a failure. [ 151.296932][ T5837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.355273][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.3.130 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 151.365618][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 151.375723][ T5837] Call Trace: [ 151.379046][ T5837] [ 151.382017][ T5837] dump_stack_lvl+0x241/0x360 [ 151.386761][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.392017][ T5837] ? __pfx__printk+0x10/0x10 [ 151.396665][ T5837] ? __pfx_lock_release+0x10/0x10 [ 151.401752][ T5837] should_fail_ex+0x3b0/0x4e0 [ 151.406512][ T5837] _copy_from_user+0x2f/0xe0 [ 151.411148][ T5837] vt_do_kdsk_ioctl+0xd8/0xc10 [ 151.415965][ T5837] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 151.421396][ T5837] vt_ioctl+0xa67/0x2090 [ 151.425702][ T5837] ? __pfx_vt_ioctl+0x10/0x10 [ 151.430448][ T5837] ? cap_capable+0xf7/0x250 [ 151.435098][ T5837] vt_compat_ioctl+0x40e/0x830 [ 151.439930][ T5837] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 151.445462][ T5837] ? __fget_files+0x3f3/0x470 [ 151.450464][ T5837] tty_compat_ioctl+0x6d3/0x8b0 [ 151.455463][ T5837] __se_compat_sys_ioctl+0x510/0xc90 [ 151.460800][ T5837] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 151.466672][ T5837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.472713][ T5837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.479109][ T5837] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 151.485765][ T5837] ? lockdep_hardirqs_on+0x99/0x150 [ 151.491033][ T5837] __do_fast_syscall_32+0xb4/0x110 [ 151.496210][ T5837] ? exc_page_fault+0x590/0x8c0 [ 151.501207][ T5837] do_fast_syscall_32+0x34/0x80 [ 151.506121][ T5837] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.512519][ T5837] RIP: 0023:0xf7f71579 [ 151.516634][ T5837] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.536295][ T5837] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 151.544768][ T5837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b46 [ 151.552792][ T5837] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.560814][ T5837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.568860][ T5837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.576890][ T5837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.584937][ T5837] [ 153.650146][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.300111][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.215199][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.386399][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 156.395420][ T5280] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 156.419698][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 156.437842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.468720][ T9] usb 1-1: Product: syz [ 156.472963][ T9] usb 1-1: Manufacturer: syz [ 156.503848][ T9] usb 1-1: SerialNumber: syz [ 156.535858][ T9] usb 1-1: config 0 descriptor?? [ 156.570268][ T5280] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 156.597932][ T5280] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 156.627482][ T5280] usb 4-1: config 0 has no interface number 0 [ 156.645361][ T5280] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.695511][ T5280] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.728691][ T5280] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.961255][ T5280] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 156.998552][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 157.220273][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.264668][ T9] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 157.286315][ T5280] usb 4-1: config 0 descriptor?? [ 157.293646][ T5878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.338363][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 157.344843][ T9] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 157.433459][ T9] usb 1-1: USB disconnect, device number 3 [ 158.575449][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.745498][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 158.768621][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.793497][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.807933][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.834022][ T9] usb 1-1: config 0 descriptor?? [ 159.077305][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.112600][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.303979][ T5280] usb 4-1: USB disconnect, device number 6 [ 159.359559][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.388197][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.967443][ T9] usb 1-1: USB disconnect, device number 4 [ 159.984929][ T9] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 160.833569][ T5915] FAULT_INJECTION: forcing a failure. [ 160.833569][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 160.855261][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: syz.3.144 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 160.865587][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.875689][ T5915] Call Trace: [ 160.878999][ T5915] [ 160.881960][ T5915] dump_stack_lvl+0x241/0x360 [ 160.886692][ T5915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.891939][ T5915] ? __pfx__printk+0x10/0x10 [ 160.896579][ T5915] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 160.902597][ T5915] ? __pfx___might_resched+0x10/0x10 [ 160.907932][ T5915] should_fail_ex+0x3b0/0x4e0 [ 160.912651][ T5915] should_failslab+0xac/0x100 [ 160.917377][ T5915] ? __alloc_skb+0x1c3/0x440 [ 160.922014][ T5915] kmem_cache_alloc_node_noprof+0x71/0x320 [ 160.927864][ T5915] __alloc_skb+0x1c3/0x440 [ 160.932331][ T5915] ? __pfx___alloc_skb+0x10/0x10 [ 160.937319][ T5915] ? netlink_autobind+0xd6/0x2f0 [ 160.942318][ T5915] ? netlink_autobind+0x2b0/0x2f0 [ 160.947397][ T5915] netlink_sendmsg+0x638/0xcb0 [ 160.952227][ T5915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.957587][ T5915] ? __pfx_lock_release+0x10/0x10 [ 160.962658][ T5915] ? aa_sock_msg_perm+0x91/0x160 [ 160.967652][ T5915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.973166][ T5915] __sock_sendmsg+0x221/0x270 [ 160.977903][ T5915] ____sys_sendmsg+0x52a/0x7e0 [ 160.982714][ T5915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.988052][ T5915] __sys_sendmsg+0x2aa/0x390 [ 160.992681][ T5915] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.997829][ T5915] ? vfs_write+0x7bf/0xc90 [ 161.002329][ T5915] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 161.008968][ T5915] ? lockdep_hardirqs_on+0x99/0x150 [ 161.014220][ T5915] __do_fast_syscall_32+0xb4/0x110 [ 161.019383][ T5915] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.025587][ T5915] ? lockdep_hardirqs_on+0x99/0x150 [ 161.030833][ T5915] do_fast_syscall_32+0x34/0x80 [ 161.035733][ T5915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.042112][ T5915] RIP: 0023:0xf7f71579 [ 161.046221][ T5915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.065870][ T5915] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 161.074334][ T5915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 161.082366][ T5915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.090389][ T5915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.098410][ T5915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.106426][ T5915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.114456][ T5915] [ 161.837097][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 166.535410][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.773948][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.788012][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.796819][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.807072][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.820277][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.827881][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.885532][ T5240] Bluetooth: hci0: command tx timeout [ 176.095322][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.122342][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.856031][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.864932][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.874482][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.883155][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.896792][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.904178][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.965584][ T5229] Bluetooth: hci0: command tx timeout [ 178.494354][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.965888][ T5229] Bluetooth: hci1: command tx timeout [ 180.064863][ T5229] Bluetooth: hci0: command tx timeout [ 181.296103][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.320091][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.511209][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.561136][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.660016][ T5644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.679824][ T5644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.746687][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.811232][ T5644] veth0_vlan: entered promiscuous mode [ 181.844862][ T5644] veth1_vlan: entered promiscuous mode [ 181.896771][ T5644] veth0_macvtap: entered promiscuous mode [ 181.919362][ T5644] veth1_macvtap: entered promiscuous mode [ 181.962748][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.975974][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.998683][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.015542][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.036044][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.047437][ T5229] Bluetooth: hci1: command tx timeout [ 182.062667][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.086145][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.105685][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.127463][ T5229] Bluetooth: hci0: command tx timeout [ 182.133030][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.154225][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.178816][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.198984][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.222624][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.242848][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.256792][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.275557][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.297087][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.318758][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.339763][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.363041][ T5644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.377427][ T5644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.397718][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.421337][ T5644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.435419][ T5644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.444172][ T5644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.476932][ T5644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.749838][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.796334][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.887887][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.906746][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.320765][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.344430][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.352872][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.361478][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.369495][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 183.377378][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.136447][ T5240] Bluetooth: hci1: command tx timeout [ 184.312208][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.324787][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.336232][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.344684][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.355424][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.364121][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.428391][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.440320][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.454533][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.463207][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.473203][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.481209][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.518470][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 184.805804][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.813091][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.834354][ T5943] bridge_slave_0: entered allmulticast mode [ 184.854369][ T5943] bridge_slave_0: entered promiscuous mode [ 184.880115][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.895367][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.902679][ T5943] bridge_slave_1: entered allmulticast mode [ 184.922963][ T5943] bridge_slave_1: entered promiscuous mode [ 185.014694][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.033201][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.131251][ T5943] team0: Port device team_slave_0 added [ 185.485358][ T5229] Bluetooth: hci2: command tx timeout [ 185.821623][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.067487][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.075709][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.126803][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.135056][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.226130][ T5229] Bluetooth: hci1: command tx timeout [ 186.445565][ T5229] Bluetooth: hci3: command tx timeout [ 186.469152][ T5943] team0: Port device team_slave_1 added [ 186.525814][ T5229] Bluetooth: hci4: command tx timeout [ 186.829013][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 187.087066][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.094301][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.104248][ T5937] bridge_slave_0: entered allmulticast mode [ 187.114869][ T5937] bridge_slave_0: entered promiscuous mode [ 187.124412][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.132386][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.140220][ T5937] bridge_slave_1: entered allmulticast mode [ 187.150056][ T5937] bridge_slave_1: entered promiscuous mode [ 187.254395][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.282820][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.369876][ T5937] team0: Port device team_slave_0 added [ 187.390076][ T5937] team0: Port device team_slave_1 added [ 187.493763][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.505331][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.550880][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.572627][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.585322][ T5229] Bluetooth: hci2: command tx timeout [ 187.604175][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.669180][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.783861][ T5937] hsr_slave_0: entered promiscuous mode [ 187.800061][ T5937] hsr_slave_1: entered promiscuous mode [ 187.819420][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.840942][ T5937] Cannot create hsr debugfs directory [ 188.525579][ T5229] Bluetooth: hci3: command tx timeout [ 188.605963][ T5229] Bluetooth: hci4: command tx timeout [ 189.645384][ T5229] Bluetooth: hci2: command tx timeout [ 190.605845][ T5229] Bluetooth: hci3: command tx timeout [ 190.685637][ T5229] Bluetooth: hci4: command tx timeout [ 191.726338][ T5229] Bluetooth: hci2: command tx timeout [ 192.685401][ T5229] Bluetooth: hci3: command tx timeout [ 192.765631][ T5229] Bluetooth: hci4: command tx timeout [ 194.383920][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.417539][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.487563][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.582006][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.615306][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.695936][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.957951][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.964320][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.702306][ T35] bridge_slave_1: left allmulticast mode [ 195.720133][ T35] bridge_slave_1: left promiscuous mode [ 195.740994][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.780672][ T35] bridge_slave_0: left allmulticast mode [ 195.799919][ T35] bridge_slave_0: left promiscuous mode [ 195.817051][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.864747][ T35] bridge_slave_1: left allmulticast mode [ 195.880231][ T35] bridge_slave_1: left promiscuous mode [ 195.894518][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.957609][ T35] bridge_slave_0: left allmulticast mode [ 195.963332][ T35] bridge_slave_0: left promiscuous mode [ 195.997838][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.027826][ T35] bridge_slave_1: left allmulticast mode [ 196.033561][ T35] bridge_slave_1: left promiscuous mode [ 196.055441][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.087155][ T35] bridge_slave_0: left allmulticast mode [ 196.092874][ T35] bridge_slave_0: left promiscuous mode [ 196.112145][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.487116][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.532791][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.563322][ T35] bond0 (unregistering): Released all slaves [ 198.943937][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.027505][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.118711][ T35] bond0 (unregistering): Released all slaves [ 199.465609][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.505359][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.533440][ T35] bond0 (unregistering): Released all slaves [ 220.980084][ T5937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.766254][ T5943] hsr_slave_0: entered promiscuous mode [ 225.779243][ T5943] hsr_slave_1: entered promiscuous mode [ 225.797657][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.822939][ T5943] Cannot create hsr debugfs directory [ 233.181878][ T5937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.297079][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.308137][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.316452][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.327412][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.335641][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.346055][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.376448][ T5229] Bluetooth: hci0: command tx timeout [ 237.979337][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 238.298247][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.309764][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.320491][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.328992][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.337426][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 238.344829][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.441060][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.449320][ T5240] Bluetooth: hci0: command tx timeout [ 238.465305][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.472671][ T5949] bridge_slave_0: entered allmulticast mode [ 238.483195][ T5949] bridge_slave_0: entered promiscuous mode [ 238.492532][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.500139][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.507901][ T5949] bridge_slave_1: entered allmulticast mode [ 238.519272][ T5949] bridge_slave_1: entered promiscuous mode [ 238.596754][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.628858][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.744919][ T5949] team0: Port device team_slave_0 added [ 238.760355][ T5949] team0: Port device team_slave_1 added [ 238.827187][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.834292][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.884527][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.912856][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.929012][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.973097][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.123056][ T5949] hsr_slave_0: entered promiscuous mode [ 239.149004][ T5949] hsr_slave_1: entered promiscuous mode [ 239.158519][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.176099][ T5949] Cannot create hsr debugfs directory [ 240.372446][ T5240] Bluetooth: hci5: command tx timeout [ 240.525681][ T5240] Bluetooth: hci0: command tx timeout [ 242.448965][ T5240] Bluetooth: hci5: command tx timeout [ 242.606568][ T5240] Bluetooth: hci0: command tx timeout [ 243.064354][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.073642][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.084466][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.093096][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.101259][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 243.112157][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.709668][ T5937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.340780][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.357975][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.367650][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.376785][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.388308][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 244.397114][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.525834][ T5240] Bluetooth: hci5: command tx timeout [ 244.558413][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 244.568766][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 244.580566][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 244.594285][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 244.603093][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 244.612540][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 245.166171][ T5240] Bluetooth: hci6: command tx timeout [ 246.445636][ T5240] Bluetooth: hci7: command tx timeout [ 246.615761][ T5240] Bluetooth: hci5: command tx timeout [ 246.685462][ T5240] Bluetooth: hci8: command tx timeout [ 247.255923][ T5240] Bluetooth: hci6: command tx timeout [ 247.532603][ T5937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.526646][ T5240] Bluetooth: hci7: command tx timeout [ 248.765579][ T5240] Bluetooth: hci8: command tx timeout [ 249.326387][ T5240] Bluetooth: hci6: command tx timeout [ 250.605981][ T5240] Bluetooth: hci7: command tx timeout [ 250.845656][ T5240] Bluetooth: hci8: command tx timeout [ 251.414575][ T5240] Bluetooth: hci6: command tx timeout [ 251.564978][ T6016] chnl_net:caif_netlink_parms(): no params data found [ 252.685499][ T5240] Bluetooth: hci7: command tx timeout [ 252.925626][ T5240] Bluetooth: hci8: command tx timeout [ 255.934445][ T35] hsr_slave_0: left promiscuous mode [ 255.952645][ T35] hsr_slave_1: left promiscuous mode [ 255.978197][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.995330][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.016351][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.023949][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.067000][ T35] hsr_slave_0: left promiscuous mode [ 256.092440][ T35] hsr_slave_1: left promiscuous mode [ 256.110013][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.125224][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.153913][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.173309][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.210985][ T35] hsr_slave_0: left promiscuous mode [ 256.236820][ T35] hsr_slave_1: left promiscuous mode [ 256.255392][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.275323][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.289605][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.305261][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.367582][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.373948][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.467689][ T35] veth1_macvtap: left promiscuous mode [ 256.473295][ T35] veth0_macvtap: left promiscuous mode [ 256.494681][ T35] veth1_vlan: left promiscuous mode [ 256.503347][ T35] veth0_vlan: left promiscuous mode [ 256.531146][ T35] veth1_macvtap: left promiscuous mode [ 256.546980][ T35] veth0_macvtap: left promiscuous mode [ 256.552978][ T35] veth1_vlan: left promiscuous mode [ 256.565237][ T35] veth0_vlan: left promiscuous mode [ 256.593206][ T35] veth1_macvtap: left promiscuous mode [ 256.603168][ T35] veth0_macvtap: left promiscuous mode [ 256.625240][ T35] veth1_vlan: left promiscuous mode [ 256.630630][ T35] veth0_vlan: left promiscuous mode [ 262.157095][ T35] team0 (unregistering): Port device team_slave_1 removed [ 262.271250][ T35] team0 (unregistering): Port device team_slave_0 removed [ 264.505805][ T35] team0 (unregistering): Port device team_slave_1 removed [ 264.610938][ T35] team0 (unregistering): Port device team_slave_0 removed [ 266.956742][ T35] team0 (unregistering): Port device team_slave_1 removed [ 267.107193][ T35] team0 (unregistering): Port device team_slave_0 removed [ 268.923135][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.935192][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.942498][ T6016] bridge_slave_0: entered allmulticast mode [ 268.969234][ T6016] bridge_slave_0: entered promiscuous mode [ 268.988084][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.005659][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.012996][ T6016] bridge_slave_1: entered allmulticast mode [ 269.035311][ T6016] bridge_slave_1: entered promiscuous mode [ 269.149678][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 269.391019][ T6002] chnl_net:caif_netlink_parms(): no params data found [ 269.422696][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.478343][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.721219][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 269.852022][ T6016] team0: Port device team_slave_0 added [ 269.934709][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 270.146628][ T6016] team0: Port device team_slave_1 added [ 270.571702][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.592259][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.624910][ T6025] bridge_slave_0: entered allmulticast mode [ 270.654629][ T6025] bridge_slave_0: entered promiscuous mode [ 271.026345][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.051848][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.065422][ T6025] bridge_slave_1: entered allmulticast mode [ 271.124968][ T6025] bridge_slave_1: entered promiscuous mode [ 271.144333][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.165384][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.212404][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.606685][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.613713][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.674997][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.773868][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.781372][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.797498][ T6023] bridge_slave_0: entered allmulticast mode [ 271.817262][ T6023] bridge_slave_0: entered promiscuous mode [ 271.836716][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.855283][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.862626][ T6023] bridge_slave_1: entered allmulticast mode [ 271.886463][ T6023] bridge_slave_1: entered promiscuous mode [ 271.899648][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.915299][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.922722][ T6011] bridge_slave_0: entered allmulticast mode [ 271.946671][ T6011] bridge_slave_0: entered promiscuous mode [ 272.038557][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.275229][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.282401][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.326030][ T6011] bridge_slave_1: entered allmulticast mode [ 272.338584][ T6011] bridge_slave_1: entered promiscuous mode [ 272.414406][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.425227][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.436786][ T6002] bridge_slave_0: entered allmulticast mode [ 272.456511][ T6002] bridge_slave_0: entered promiscuous mode [ 272.476969][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.484131][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.505454][ T6002] bridge_slave_1: entered allmulticast mode [ 272.527308][ T6002] bridge_slave_1: entered promiscuous mode [ 272.537903][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.602599][ T6016] hsr_slave_0: entered promiscuous mode [ 272.621608][ T6016] hsr_slave_1: entered promiscuous mode [ 272.639983][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.668808][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.937903][ T6025] team0: Port device team_slave_0 added [ 273.180683][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.209588][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.246464][ T6002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.268534][ T6002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.288046][ T6025] team0: Port device team_slave_1 added [ 273.551212][ T6023] team0: Port device team_slave_0 added [ 273.568437][ T6023] team0: Port device team_slave_1 added [ 274.133504][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.155472][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.202477][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.224440][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.245213][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.289261][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.328481][ T6011] team0: Port device team_slave_0 added [ 274.336413][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.343405][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.411393][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.447431][ T6002] team0: Port device team_slave_0 added [ 274.466542][ T6002] team0: Port device team_slave_1 added [ 274.473568][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.495329][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.540929][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.644207][ T6011] team0: Port device team_slave_1 added [ 274.802357][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.825249][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.876023][ T6002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.111625][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.125184][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.185387][ T6002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.207411][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.214425][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.263192][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.349980][ T6023] hsr_slave_0: entered promiscuous mode [ 275.371638][ T6023] hsr_slave_1: entered promiscuous mode [ 275.386673][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.394313][ T6023] Cannot create hsr debugfs directory [ 275.491762][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.504717][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.552477][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.686318][ T6025] hsr_slave_0: entered promiscuous mode [ 275.710733][ T6025] hsr_slave_1: entered promiscuous mode [ 275.724746][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.743325][ T6025] Cannot create hsr debugfs directory [ 275.997893][ T6002] hsr_slave_0: entered promiscuous mode [ 276.018289][ T6002] hsr_slave_1: entered promiscuous mode [ 276.040759][ T6002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.058329][ T6002] Cannot create hsr debugfs directory [ 276.368276][ T6016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.486364][ T6011] hsr_slave_0: entered promiscuous mode [ 276.507728][ T6011] hsr_slave_1: entered promiscuous mode [ 276.515566][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.523182][ T6011] Cannot create hsr debugfs directory [ 276.577218][ T6016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.720970][ T6016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.907629][ T6016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.114029][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.205279][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.280794][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.347275][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.411644][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.432675][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.448977][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.456159][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.469999][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.477197][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.651334][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.780293][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.802888][ T6016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.844321][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.917539][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.021105][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.157508][ T35] bridge_slave_1: left allmulticast mode [ 278.178570][ T35] bridge_slave_1: left promiscuous mode [ 278.184372][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.211990][ T35] bridge_slave_0: left allmulticast mode [ 278.225425][ T35] bridge_slave_0: left promiscuous mode [ 278.231237][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.243516][ T35] bridge_slave_1: left allmulticast mode [ 278.252163][ T35] bridge_slave_1: left promiscuous mode [ 278.258111][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.268403][ T35] bridge_slave_0: left allmulticast mode [ 278.274083][ T35] bridge_slave_0: left promiscuous mode [ 278.280784][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.290937][ T35] bridge_slave_1: left allmulticast mode [ 278.296805][ T35] bridge_slave_1: left promiscuous mode [ 278.302562][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.311433][ T35] bridge_slave_0: left allmulticast mode [ 278.317833][ T35] bridge_slave_0: left promiscuous mode [ 278.323530][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.334002][ T35] bridge_slave_1: left allmulticast mode [ 278.340721][ T35] bridge_slave_1: left promiscuous mode [ 278.346699][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.357197][ T35] bridge_slave_0: left allmulticast mode [ 278.362884][ T35] bridge_slave_0: left promiscuous mode [ 278.368860][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.381302][ T35] bridge_slave_1: left allmulticast mode [ 278.387143][ T35] bridge_slave_1: left promiscuous mode [ 278.392838][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.402122][ T35] bridge_slave_0: left allmulticast mode [ 278.407959][ T35] bridge_slave_0: left promiscuous mode [ 278.413637][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.424369][ T35] bridge_slave_1: left allmulticast mode [ 278.430273][ T35] bridge_slave_1: left promiscuous mode [ 278.436772][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.447879][ T35] bridge_slave_0: left allmulticast mode [ 278.454043][ T35] bridge_slave_0: left promiscuous mode [ 278.460524][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.471493][ T35] bridge_slave_1: left allmulticast mode [ 278.477679][ T35] bridge_slave_1: left promiscuous mode [ 278.483398][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.497194][ T35] bridge_slave_0: left allmulticast mode [ 278.502980][ T35] bridge_slave_0: left promiscuous mode [ 278.510258][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.520948][ T35] bridge_slave_1: left allmulticast mode [ 278.527270][ T35] bridge_slave_1: left promiscuous mode [ 278.533026][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.548089][ T35] bridge_slave_0: left allmulticast mode [ 278.554826][ T35] bridge_slave_0: left promiscuous mode [ 278.562129][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.950992][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.962872][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.973831][ T35] bond0 (unregistering): Released all slaves [ 279.989605][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.002118][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.014441][ T35] bond0 (unregistering): Released all slaves [ 280.033322][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.044451][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.065660][ T35] bond0 (unregistering): Released all slaves [ 280.077715][ T35] bond0 (unregistering): Released all slaves [ 280.094761][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.109869][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.121946][ T35] bond0 (unregistering): Released all slaves [ 280.137262][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.149281][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.160967][ T35] bond0 (unregistering): Released all slaves [ 280.273489][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.286282][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.299684][ T35] bond0 (unregistering): Released all slaves [ 280.407913][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.420542][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.431323][ T35] bond0 (unregistering): Released all slaves [ 280.559445][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.571354][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.584127][ T35] bond0 (unregistering): Released all slaves [ 280.766550][ T6016] veth0_vlan: entered promiscuous mode [ 280.800721][ T6025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.836910][ T6025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.873966][ T6016] veth1_vlan: entered promiscuous mode [ 280.902786][ T6025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.956880][ T6025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.410789][ T6023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.429711][ T6023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.524905][ T6023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.551875][ T6023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.654404][ T6016] veth0_macvtap: entered promiscuous mode [ 281.776148][ T6016] veth1_macvtap: entered promiscuous mode [ 281.914177][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.943636][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.960231][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.985416][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.005416][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.025465][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.053140][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.137295][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.160431][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.171005][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.182471][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.205584][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.216529][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.228294][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.241767][ T6016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.266152][ T6016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.274937][ T6016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.284190][ T6016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.376082][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.523593][ T35] hsr_slave_0: left promiscuous mode [ 282.536123][ T35] hsr_slave_1: left promiscuous mode [ 282.542388][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.552083][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.574509][ T35] hsr_slave_0: left promiscuous mode [ 282.587868][ T35] hsr_slave_1: left promiscuous mode [ 282.601143][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.611457][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.621595][ T35] hsr_slave_0: left promiscuous mode [ 282.628750][ T35] hsr_slave_1: left promiscuous mode [ 282.645871][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.653725][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.683421][ T35] hsr_slave_0: left promiscuous mode [ 282.695909][ T35] hsr_slave_1: left promiscuous mode [ 282.715396][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.726180][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.751942][ T35] hsr_slave_0: left promiscuous mode [ 282.767371][ T35] hsr_slave_1: left promiscuous mode [ 282.785444][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.796657][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.823801][ T35] hsr_slave_0: left promiscuous mode [ 282.830795][ T35] hsr_slave_1: left promiscuous mode [ 282.836989][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.844457][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.853649][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.862087][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.874189][ T35] hsr_slave_0: left promiscuous mode [ 282.880333][ T35] hsr_slave_1: left promiscuous mode [ 282.886899][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.894381][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.903098][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.910912][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.922970][ T35] hsr_slave_0: left promiscuous mode [ 282.930683][ T35] hsr_slave_1: left promiscuous mode [ 282.942137][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.949829][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.957963][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.965478][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.022642][ T35] veth1_macvtap: left promiscuous mode [ 283.028408][ T35] veth0_macvtap: left promiscuous mode [ 283.033957][ T35] veth1_vlan: left promiscuous mode [ 283.040437][ T35] veth0_vlan: left promiscuous mode [ 283.048394][ T35] veth1_macvtap: left promiscuous mode [ 283.053945][ T35] veth0_macvtap: left promiscuous mode [ 283.060284][ T35] veth1_vlan: left promiscuous mode [ 283.066696][ T35] veth0_vlan: left promiscuous mode [ 283.073093][ T35] veth1_macvtap: left promiscuous mode [ 283.078839][ T35] veth0_macvtap: left promiscuous mode [ 283.084442][ T35] veth1_vlan: left promiscuous mode [ 283.090369][ T35] veth0_vlan: left promiscuous mode [ 283.579463][ T35] team0 (unregistering): Port device team_slave_1 removed [ 283.609471][ T35] team0 (unregistering): Port device team_slave_0 removed [ 283.912032][ T35] team0 (unregistering): Port device team_slave_1 removed [ 283.949649][ T35] team0 (unregistering): Port device team_slave_0 removed [ 284.193077][ T35] team0 (unregistering): Port device team_slave_1 removed [ 284.229741][ T35] team0 (unregistering): Port device team_slave_0 removed [ 284.563720][ T35] team0 (unregistering): Port device team_slave_1 removed [ 284.600561][ T35] team0 (unregistering): Port device team_slave_0 removed [ 284.920937][ T35] team0 (unregistering): Port device team_slave_1 removed [ 284.952758][ T35] team0 (unregistering): Port device team_slave_0 removed [ 285.455870][ T35] team0 (unregistering): Port device team_slave_1 removed [ 285.511757][ T35] team0 (unregistering): Port device team_slave_0 removed [ 286.336295][ T35] team0 (unregistering): Port device team_slave_1 removed [ 286.384181][ T35] team0 (unregistering): Port device team_slave_0 removed [ 287.168452][ T35] team0 (unregistering): Port device team_slave_1 removed [ 287.211868][ T35] team0 (unregistering): Port device team_slave_0 removed [ 287.744417][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.759770][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.768146][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.790190][ T6002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.829819][ T6002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.876437][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.883875][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.897920][ T6002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.908971][ T6002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.945011][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.043464][ T6011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.091611][ T6011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.116524][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.154574][ T6011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.178311][ T6011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.202838][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.210031][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.223396][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.237076][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.307498][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.314926][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.400919][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.424185][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.483349][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.620675][ T6023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.634051][ T6023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.727109][ T6002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.758907][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.869529][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.882046][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.889444][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.937396][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.945121][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.001240][ T6025] veth0_vlan: entered promiscuous mode [ 289.051943][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.100264][ T6025] veth1_vlan: entered promiscuous mode [ 289.113145][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.158732][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.166182][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.196767][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.204290][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.363608][ T6025] veth0_macvtap: entered promiscuous mode [ 289.392182][ T6025] veth1_macvtap: entered promiscuous mode [ 289.431063][ T6023] veth0_vlan: entered promiscuous mode [ 289.493073][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.504919][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.528561][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.552457][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.571079][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.584491][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.594096][ T6023] veth1_vlan: entered promiscuous mode [ 289.640218][ T6025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.651521][ T6025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.664183][ T6025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.676974][ T6025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.710075][ T6002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.781078][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.796260][ T6023] veth0_macvtap: entered promiscuous mode [ 289.830123][ T6023] veth1_macvtap: entered promiscuous mode [ 289.998775][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.014466][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.030981][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.044608][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.058932][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.071515][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.083293][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.096548][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.109936][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.121422][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.154556][ T6023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.164105][ T6023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.173613][ T6023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.183053][ T6023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.269238][ T6002] veth0_vlan: entered promiscuous mode [ 290.308895][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.322443][ T6011] veth0_vlan: entered promiscuous mode [ 290.325430][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.422784][ T6011] veth1_vlan: entered promiscuous mode [ 290.433428][ T6002] veth1_vlan: entered promiscuous mode [ 290.461067][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.479913][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.522560][ T6011] veth0_macvtap: entered promiscuous mode [ 290.553139][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.578748][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.610633][ T6011] veth1_macvtap: entered promiscuous mode [ 290.657204][ T6002] veth0_macvtap: entered promiscuous mode [ 290.686179][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.694183][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.724967][ T6002] veth1_macvtap: entered promiscuous mode [ 290.769814][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.783348][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.795704][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.806917][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.818798][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.829778][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.841626][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.857485][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.870486][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.882726][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.894369][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.922262][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.945433][ T5285] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 290.957368][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.967959][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.978902][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.998275][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.020043][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.036103][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.048606][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.082322][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.093967][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.108778][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.121017][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.126758][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 291.134296][ T6011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.151444][ T6011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.157477][ T5285] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 291.160900][ T6011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.179619][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.189929][ T6011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.192531][ T5285] usb 5-1: config 0 descriptor?? [ 291.216436][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.228586][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.239364][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.272977][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.288096][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.302633][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.313363][ T6002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.324122][ T6002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.340014][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.383515][ T6002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.393339][ T6002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.404193][ T6002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.425459][ T6002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.754401][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.773091][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.842209][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.853625][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.866550][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.875382][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.068540][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.127221][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.950163][ T1032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.459303][ T1032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.792203][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.807157][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.821345][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.837594][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.846987][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.856283][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.066143][ T1032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.231811][ T1032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.276641][ T5230] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.577713][ T5230] usb 4-1: Using ep0 maxpacket: 8 [ 294.668978][ T5230] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 294.709800][ T5230] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 294.735701][ T5230] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 294.761849][ T5230] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 294.789632][ T5230] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 294.815013][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.844030][ T5230] usb 4-1: Product: syz [ 294.869293][ T5230] usb 4-1: Manufacturer: syz [ 294.881061][ T6190] chnl_net:caif_netlink_parms(): no params data found [ 294.896527][ T5230] usb 4-1: SerialNumber: syz [ 294.943153][ T5230] hso 4-1:6.0: Can't find BULK OUT endpoint [ 295.153002][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.180094][ T1032] bridge_slave_1: left allmulticast mode [ 295.181404][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.205372][ T1032] bridge_slave_1: left promiscuous mode [ 295.217403][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.373537][ T1032] bridge_slave_0: left allmulticast mode [ 295.435694][ T1032] bridge_slave_0: left promiscuous mode [ 295.442849][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.557610][ T5285] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.568161][ T5285] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 295.626034][ T5285] asix 5-1:0.0: probe with driver asix failed with error -71 [ 295.662957][ T5285] usb 5-1: USB disconnect, device number 10 [ 295.888602][ T5229] Bluetooth: hci1: command tx timeout [ 296.595429][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 296.793881][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 296.814885][ T9] usb 5-1: New USB device found, idVendor=00b4, idProduct=fff9, bcdDevice= 0.7f [ 296.834523][ T9] usb 5-1: New USB device strings: Mfr=0, Product=186, SerialNumber=0 [ 296.844660][ T9] usb 5-1: Product: syz [ 296.854230][ T9] usb 5-1: config 0 descriptor?? [ 296.870337][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.901072][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.922169][ T1032] bond0 (unregistering): Released all slaves [ 297.346730][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.374496][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.415492][ T6190] bridge_slave_0: entered allmulticast mode [ 297.437610][ T6190] bridge_slave_0: entered promiscuous mode [ 297.496058][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.510856][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 297.560508][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.566659][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.972244][ T5229] Bluetooth: hci1: command tx timeout [ 298.224045][ T6190] bridge_slave_1: entered allmulticast mode [ 298.251040][ T6190] bridge_slave_1: entered promiscuous mode [ 298.557905][ T9] usb 5-1: USB disconnect, device number 11 [ 299.068006][ T6155] usb 4-1: USB disconnect, device number 7 [ 300.076961][ T5229] Bluetooth: hci1: command tx timeout [ 300.549854][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.565289][ T5281] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 300.592365][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.741387][ T5281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.754817][ T5281] usb 1-1: not running at top speed; connect to a high speed hub [ 300.767621][ T5281] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 300.784609][ T5281] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 300.801651][ T5281] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 300.813762][ T5281] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 300.829610][ T5281] usb 1-1: config 129 has no interface number 0 [ 300.840561][ T5281] usb 1-1: config 129 has no interface number 1 [ 300.852289][ T5281] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 300.873415][ T5281] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 300.886185][ T5281] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 300.906485][ T5281] usb 1-1: config 129 interface 135 has no altsetting 0 [ 300.923537][ T5281] usb 1-1: config 129 interface 5 has no altsetting 0 [ 300.942011][ T5281] usb 1-1: string descriptor 0 read error: -22 [ 300.951524][ T5281] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 300.968713][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.044801][ T5281] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.065882][ T5281] usb 1-1: MIDIStreaming interface descriptor not found [ 301.359962][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 301.380252][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 301.705294][ T51] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 301.871780][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.888509][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.904467][ T51] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.918783][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.933902][ T51] usb 3-1: SerialNumber: syz [ 302.135229][ T5229] Bluetooth: hci1: command tx timeout [ 302.334036][ T5281] usb 1-1: USB disconnect, device number 5 [ 302.373990][ T51] usb 3-1: 0:2 : does not exist [ 302.422889][ T51] usb 3-1: unit 5 not found! [ 302.523679][ T51] usb 3-1: USB disconnect, device number 4 [ 302.615184][ T1032] hsr_slave_0: left promiscuous mode [ 302.715399][ T1032] hsr_slave_1: left promiscuous mode [ 302.823363][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.875179][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.917550][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.969840][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.124795][ T1032] veth1_macvtap: left promiscuous mode [ 303.184556][ T1032] veth0_macvtap: left promiscuous mode [ 303.221754][ T1032] veth1_vlan: left promiscuous mode [ 303.265229][ T1032] veth0_vlan: left promiscuous mode [ 303.328931][ T29] audit: type=1326 audit(1726894107.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 303.452568][ T29] audit: type=1326 audit(1726894107.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 303.617049][ T29] audit: type=1326 audit(1726894107.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 303.760031][ T6296] FAULT_INJECTION: forcing a failure. [ 303.760031][ T6296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.774011][ T29] audit: type=1326 audit(1726894107.556:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 303.851340][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.3.184 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 303.861697][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.871820][ T6296] Call Trace: [ 303.875150][ T6296] [ 303.878129][ T6296] dump_stack_lvl+0x241/0x360 [ 303.882870][ T6296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.888223][ T6296] ? __pfx__printk+0x10/0x10 [ 303.892867][ T6296] ? __pfx_lock_release+0x10/0x10 [ 303.897957][ T6296] should_fail_ex+0x3b0/0x4e0 [ 303.902773][ T6296] _copy_to_iter+0x1ed/0x1d60 [ 303.907593][ T6296] ? __virt_addr_valid+0x183/0x530 [ 303.912754][ T6296] ? __pfx_lock_release+0x10/0x10 [ 303.917841][ T6296] ? __pfx__copy_to_iter+0x10/0x10 [ 303.923024][ T6296] ? __virt_addr_valid+0x183/0x530 [ 303.928199][ T6296] ? __virt_addr_valid+0x183/0x530 [ 303.933880][ T6296] ? __virt_addr_valid+0x45f/0x530 [ 303.939134][ T6296] ? __phys_addr_symbol+0x2f/0x70 [ 303.944208][ T6296] ? __check_object_size+0x49c/0x900 [ 303.949561][ T6296] seq_read_iter+0x2e2/0xd70 [ 303.954235][ T6296] proc_reg_read_iter+0x1c2/0x290 [ 303.959315][ T6296] vfs_read+0x9bb/0xbc0 [ 303.963511][ T6296] ? __pfx_lock_release+0x10/0x10 [ 303.968602][ T6296] ? __pfx_vfs_read+0x10/0x10 [ 303.973347][ T6296] ksys_pread64+0x151/0x1e0 [ 303.977998][ T6296] ? __pfx_ksys_pread64+0x10/0x10 [ 303.983074][ T6296] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.989723][ T6296] ? __ia32_sys_ia32_pread64+0x20/0xd0 [ 303.995244][ T6296] __do_fast_syscall_32+0xb4/0x110 [ 304.000416][ T6296] ? exc_page_fault+0x590/0x8c0 [ 304.005335][ T6296] do_fast_syscall_32+0x34/0x80 [ 304.010251][ T6296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.016660][ T6296] RIP: 0023:0xf7fa4579 [ 304.020773][ T6296] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.040468][ T6296] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 304.049111][ T6296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002240 [ 304.057135][ T6296] RDX: 00000000000000e1 RSI: 000000000000000a RDI: 0000000000000000 [ 304.065156][ T6296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.073289][ T6296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.081341][ T6296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.089385][ T6296] [ 304.123502][ T29] audit: type=1326 audit(1726894107.556:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.175113][ T29] audit: type=1326 audit(1726894107.556:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.254297][ T29] audit: type=1326 audit(1726894107.556:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.345264][ T29] audit: type=1326 audit(1726894107.556:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.462527][ T29] audit: type=1326 audit(1726894107.556:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.555208][ T29] audit: type=1326 audit(1726894107.556:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ff00000 [ 304.718014][ T5281] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 304.941139][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 304.972714][ T5281] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.999166][ T5281] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 305.076702][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.183842][ T5281] usb 1-1: config 0 descriptor?? [ 307.160691][ T51] usb 1-1: USB disconnect, device number 6 [ 307.875267][ T51] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 308.084365][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.114669][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 308.161532][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.190712][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.230810][ T51] usb 4-1: Product: syz [ 308.246633][ T51] usb 4-1: Manufacturer: syz [ 308.265508][ T51] usb 4-1: SerialNumber: syz [ 308.526916][ T6309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.687766][ T51] cdc_ncm 4-1:1.0: bind() failure [ 308.722989][ T51] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 308.747569][ T51] cdc_ncm 4-1:1.1: bind() failure [ 308.810156][ T51] usb 4-1: USB disconnect, device number 8 [ 308.827138][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 309.153619][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 311.560732][ T6190] team0: Port device team_slave_0 added [ 311.683354][ T6190] team0: Port device team_slave_1 added [ 312.082052][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.145392][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.375179][ T5284] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 312.385836][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.505285][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.568558][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.674269][ T5284] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 312.735300][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.801494][ T5284] usb 1-1: Product: syz [ 312.815632][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.865255][ T5284] usb 1-1: Manufacturer: syz [ 312.870032][ T5284] usb 1-1: SerialNumber: syz [ 312.917159][ T5284] usb 1-1: config 0 descriptor?? [ 313.088647][ T5281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 313.315479][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 313.383316][ T5281] usb 4-1: New USB device found, idVendor=00b4, idProduct=fff9, bcdDevice= 0.7f [ 313.398401][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.410314][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.424235][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.436319][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.455537][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 313.463194][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.511140][ T6326] raw_sendmsg: syz.0.193 forgot to set AF_INET. Fix it! [ 313.536219][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=186, SerialNumber=0 [ 313.583076][ T6190] hsr_slave_0: entered promiscuous mode [ 313.604046][ T5281] usb 4-1: Product: syz [ 313.647274][ T5281] usb 4-1: config 0 descriptor?? [ 313.668735][ T6190] hsr_slave_1: entered promiscuous mode [ 314.310422][ T5281] usbhid 4-1:0.0: can't add hid device: -71 [ 314.370411][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 314.448474][ T5281] usb 4-1: USB disconnect, device number 9 [ 314.480347][ T5284] usb 1-1: Firmware version (0.0) predates our first public release. [ 314.528455][ T5284] usb 1-1: Please update to version 0.2 or newer [ 315.488467][ T1032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.568492][ T5229] Bluetooth: hci2: command tx timeout [ 315.852006][ T5284] usb 1-1: USB disconnect, device number 7 [ 315.873849][ T1032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.645237][ T5229] Bluetooth: hci2: command tx timeout [ 317.865532][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.871916][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.435259][ T5229] Bluetooth: hci2: command tx timeout [ 322.445227][ T5229] Bluetooth: hci2: command tx timeout [ 330.105213][ T6366] capability: warning: `syz.4.201' uses 32-bit capabilities (legacy support in use) [ 339.502063][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.519423][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.527693][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.537896][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.555286][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.567193][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.074074][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.083447][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.093237][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.102841][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.111035][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.122518][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.156028][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.165141][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.172995][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.215324][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.223761][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.231773][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.645289][ T5229] Bluetooth: hci3: command tx timeout [ 343.165448][ T5229] Bluetooth: hci0: command tx timeout [ 343.325299][ T5229] Bluetooth: hci4: command tx timeout [ 343.725319][ T5229] Bluetooth: hci3: command tx timeout [ 345.245447][ T5229] Bluetooth: hci0: command tx timeout [ 345.405593][ T5229] Bluetooth: hci4: command tx timeout [ 345.805196][ T5229] Bluetooth: hci3: command tx timeout [ 347.325355][ T5229] Bluetooth: hci0: command tx timeout [ 347.485394][ T5229] Bluetooth: hci4: command tx timeout [ 347.886564][ T5240] Bluetooth: hci3: command tx timeout [ 349.405365][ T5229] Bluetooth: hci0: command tx timeout [ 349.565378][ T5229] Bluetooth: hci4: command tx timeout [ 354.396092][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.405671][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.415964][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.425895][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.434565][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.446015][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.525357][ T5229] Bluetooth: hci6: command tx timeout [ 358.605155][ T5229] Bluetooth: hci6: command tx timeout [ 360.685417][ T5229] Bluetooth: hci6: command tx timeout [ 360.852335][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 362.765180][ T5240] Bluetooth: hci6: command tx timeout [ 371.092754][ T5240] Bluetooth: hci8: command 0x0406 tx timeout [ 373.129007][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.139201][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.148213][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.156819][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.166982][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 373.184216][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.245422][ T5240] Bluetooth: hci7: command tx timeout [ 377.325249][ T5240] Bluetooth: hci7: command tx timeout [ 379.250179][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.256707][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.405184][ T5240] Bluetooth: hci7: command tx timeout [ 381.485257][ T5240] Bluetooth: hci7: command tx timeout [ 401.812400][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 401.821545][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 401.830295][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 401.845991][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 401.871784][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 401.879252][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 402.371559][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 402.384175][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 402.393068][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 402.402047][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 402.411791][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 402.419986][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 402.456988][ T5229] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 402.467773][ T5229] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 402.476810][ T5229] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 402.486627][ T5229] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 402.497546][ T5229] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 402.508171][ T5229] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 403.965214][ T5229] Bluetooth: hci9: command tx timeout [ 404.449160][ T5229] Bluetooth: hci10: command tx timeout [ 404.605515][ T5229] Bluetooth: hci11: command tx timeout [ 406.051265][ T5229] Bluetooth: hci9: command tx timeout [ 406.525297][ T5229] Bluetooth: hci10: command tx timeout [ 406.685397][ T5229] Bluetooth: hci11: command tx timeout [ 408.125240][ T5229] Bluetooth: hci9: command tx timeout [ 408.605177][ T5229] Bluetooth: hci10: command tx timeout [ 408.765426][ T5229] Bluetooth: hci11: command tx timeout [ 410.215054][ T5229] Bluetooth: hci9: command tx timeout [ 410.685199][ T5229] Bluetooth: hci10: command tx timeout [ 410.845494][ T5229] Bluetooth: hci11: command tx timeout [ 415.285897][ T5232] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 415.296258][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 415.307481][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 415.317052][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 415.324810][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 415.332564][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 417.165294][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 417.408763][ T5229] Bluetooth: hci12: command tx timeout [ 419.485374][ T5229] Bluetooth: hci12: command tx timeout [ 421.565146][ T5229] Bluetooth: hci12: command tx timeout [ 423.645137][ T5229] Bluetooth: hci12: command tx timeout [ 429.258771][ T1032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.320658][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.336245][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.354932][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.363138][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.373531][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.381115][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.405495][ T5229] Bluetooth: hci2: command tx timeout [ 437.486591][ T5229] Bluetooth: hci2: command tx timeout [ 439.565278][ T5229] Bluetooth: hci2: command tx timeout [ 440.687271][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.693647][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.645275][ T5229] Bluetooth: hci2: command tx timeout [ 463.027241][ T6425] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 463.040255][ T6425] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 463.048591][ T6425] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 463.056897][ T6425] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 463.064670][ T6425] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 463.072295][ T6425] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 463.245336][ T6425] Bluetooth: hci3: command 0x0406 tx timeout [ 463.331664][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 463.601847][ T5232] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 463.616911][ T5232] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 463.626100][ T5232] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 463.635515][ T5232] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 463.643612][ T5232] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 463.652318][ T5232] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 463.776584][ T5229] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 463.789951][ T5229] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 463.799332][ T5229] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 463.811368][ T5229] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 463.819364][ T5229] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 463.827587][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 465.165209][ T5229] Bluetooth: hci13: command tx timeout [ 465.725253][ T5229] Bluetooth: hci14: command tx timeout [ 465.885388][ T5229] Bluetooth: hci15: command tx timeout [ 467.245196][ T5229] Bluetooth: hci13: command tx timeout [ 467.805152][ T5229] Bluetooth: hci14: command tx timeout [ 467.965315][ T5229] Bluetooth: hci15: command tx timeout [ 468.373026][ T5229] Bluetooth: hci4: command 0x0406 tx timeout [ 469.325722][ T5232] Bluetooth: hci13: command tx timeout [ 469.885311][ T5232] Bluetooth: hci14: command tx timeout [ 470.045277][ T5232] Bluetooth: hci15: command tx timeout [ 471.406310][ T5232] Bluetooth: hci13: command tx timeout [ 471.965241][ T5232] Bluetooth: hci14: command tx timeout [ 472.129628][ T5232] Bluetooth: hci15: command tx timeout [ 475.426187][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 475.438149][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 475.446324][ T5229] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 475.454901][ T5229] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 475.464149][ T5229] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 475.472565][ T5229] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 477.165732][ T30] INFO: task syz.4.201:6366 blocked for more than 143 seconds. [ 477.173373][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 477.215063][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.264692][ T30] task:syz.4.201 state:D stack:26784 pid:6366 tgid:6365 ppid:6025 flags:0x20000004 [ 477.365111][ T30] Call Trace: [ 477.368486][ T30] [ 477.371469][ T30] __schedule+0x1893/0x4b50 [ 477.435091][ T30] ? __pfx___schedule+0x10/0x10 [ 477.440059][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.460498][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 477.468631][ T30] ? schedule+0x90/0x320 [ 477.472949][ T30] schedule+0x14b/0x320 [ 477.483426][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.490984][ T30] __mutex_lock+0x6a7/0xd70 [ 477.503801][ T30] ? __mutex_lock+0x52a/0xd70 [ 477.508938][ T30] ? dev_ioctl+0x86e/0x1340 [ 477.513602][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.525258][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 477.530548][ T30] ? dev_load+0x21/0x1f0 [ 477.534845][ T30] dev_ioctl+0x86e/0x1340 [ 477.546012][ T30] sock_ioctl+0x7ef/0x8e0 [ 477.550751][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 477.560786][ T30] compat_sock_ioctl+0x291/0xf20 [ 477.566154][ T5229] Bluetooth: hci16: command tx timeout [ 477.574349][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 477.585139][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 477.590502][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 477.602829][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 477.609942][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 477.620575][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 477.630638][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 477.640874][ T30] __do_fast_syscall_32+0xb4/0x110 [ 477.651670][ T30] ? exc_page_fault+0x590/0x8c0 [ 477.659255][ T30] do_fast_syscall_32+0x34/0x80 [ 477.664188][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.675036][ T30] RIP: 0023:0xf743d579 [ 477.679180][ T30] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 477.694120][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000000089f1 [ 477.704365][ T30] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.719405][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.731113][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 477.743883][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.759156][ T30] [ 477.762389][ T30] INFO: task syz.0.200:6368 blocked for more than 143 seconds. [ 477.781003][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 477.788792][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.803591][ T30] task:syz.0.200 state:D stack:26784 pid:6368 tgid:6367 ppid:6011 flags:0x20000004 [ 477.816156][ T30] Call Trace: [ 477.819488][ T30] [ 477.822462][ T30] __schedule+0x1893/0x4b50 [ 477.834906][ T30] ? __pfx___schedule+0x10/0x10 [ 477.842662][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.854444][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 477.860333][ T30] ? schedule+0x90/0x320 [ 477.864658][ T30] schedule+0x14b/0x320 [ 477.876660][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.882198][ T30] __mutex_lock+0x6a7/0xd70 [ 477.893073][ T30] ? __mutex_lock+0x52a/0xd70 [ 477.898149][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 477.902887][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.914349][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 477.919549][ T30] ? dev_ethtool+0x145/0x1bc0 [ 477.924288][ T30] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 477.935449][ T30] dev_ethtool+0x21e/0x1bc0 [ 477.940209][ T30] ? dev_load+0x21/0x1f0 [ 477.950318][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 477.956880][ T30] ? dev_load+0x21/0x1f0 [ 477.961277][ T30] dev_ioctl+0x785/0x1340 [ 477.970808][ T30] compat_sock_ioctl+0xb7e/0xf20 [ 477.977322][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 477.982859][ T30] ? __fget_files+0x29/0x470 [ 477.994510][ T30] ? __fget_files+0x3f3/0x470 [ 478.000895][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 478.011351][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 478.018770][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 478.024825][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.038505][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 478.051727][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 478.060823][ T30] __do_fast_syscall_32+0xb4/0x110 [ 478.068722][ T30] ? exc_page_fault+0x590/0x8c0 [ 478.073652][ T30] do_fast_syscall_32+0x34/0x80 [ 478.082513][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.091628][ T30] RIP: 0023:0xf73dd579 [ 478.100887][ T30] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 478.112424][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008946 [ 478.124331][ T30] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.139733][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.149552][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.164815][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.174451][ T30] [ 478.182754][ T30] [ 478.182754][ T30] Showing all locks held in the system: [ 478.192084][ T30] 1 lock held by khungtaskd/30: [ 478.202276][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 478.215325][ T30] 3 locks held by kworker/u8:3/52: [ 478.220494][ T30] #0: ffff88802e42c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.239092][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.255790][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 478.272793][ T30] 6 locks held by kworker/u8:5/1032: [ 478.279681][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.295303][ T30] #1: ffffc90003d67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.311645][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 478.321679][ T30] #3: ffff888054ed40e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 478.336642][ T30] #4: ffff888054ed5250 (&devlink->lock_key#10){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 478.352407][ T30] #5: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 478.362958][ T30] 3 locks held by kworker/u8:9/2982: [ 478.378230][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.398145][ T30] #1: ffffc90009b27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.418513][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 478.429189][ T30] 2 locks held by dhcpcd/4897: [ 478.434094][ T30] #0: ffff88805fd3a6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 478.452027][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 478.465079][ T30] 2 locks held by getty/4982: [ 478.475075][ T30] #0: ffff88814b3d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 478.484938][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 478.501512][ T30] 3 locks held by kworker/0:3/5230: [ 478.512854][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.534250][ T30] #1: ffffc90003b87d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.552644][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 478.563342][ T30] 3 locks held by kworker/u9:3/5232: [ 478.576106][ T30] #0: ffff888057425148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.613675][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 478.624867][ T30] #1: ffffc90003ba7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.649653][ T30] #2: ffff88802920cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 478.664858][ T30] 3 locks held by kworker/0:5/5283: [ 478.672311][ T30] 6 locks held by kworker/1:6/5284: [ 478.684628][ T30] #0: ffff888144694948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 478.703756][ T30] #1: ffffc90004167d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 478.722810][ T30] #2: ffff8880281d6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 478.732202][ T30] #3: ffff888031126190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 478.750221][ T30] #4: ffff8880797b8160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 478.762562][ T30] #5: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: wpan_phy_unregister+0xab/0x390 [ 478.779979][ T30] 2 locks held by syz-executor/6002: [ 478.785788][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 478.794870][ T30] #1: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 478.814135][ T30] 7 locks held by syz-executor/6190: [ 478.825013][ T30] #0: ffff88802e82a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 478.834021][ T30] #1: ffff888032b54888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 478.851464][ T30] #2: ffff888143f563c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 478.864316][ T30] #3: ffffffff8f5676c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 478.881793][ T30] #4: ffff88805bbea0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 478.892793][ T30] #5: ffff88805bbeb250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 478.909314][ T30] #6: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 478.922836][ T30] 1 lock held by syz-executor/6342: [ 478.933041][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 478.943765][ T30] 1 lock held by syz.4.201/6366: [ 478.954804][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 478.965946][ T30] 1 lock held by syz.0.200/6368: [ 478.970943][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 478.988573][ T30] 2 locks held by syz-executor/6375: [ 478.993923][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.007646][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.021752][ T30] 2 locks held by syz-executor/6381: [ 479.029803][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.044999][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.061630][ T30] 2 locks held by syz-executor/6382: [ 479.069672][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.086712][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.103612][ T30] 2 locks held by syz-executor/6387: [ 479.110457][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.124998][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.140277][ T30] 2 locks held by syz-executor/6394: [ 479.145951][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.163842][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.175025][ T30] 2 locks held by syz-executor/6401: [ 479.180361][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.196906][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.212506][ T30] 2 locks held by syz-executor/6405: [ 479.220750][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.234513][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.247586][ T30] 2 locks held by syz-executor/6406: [ 479.252931][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.270999][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.283429][ T30] 2 locks held by syz-executor/6410: [ 479.293847][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.305581][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.320734][ T30] 2 locks held by syz-executor/6419: [ 479.327687][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.343483][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.355190][ T30] 2 locks held by syz-executor/6427: [ 479.361667][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.376595][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.392364][ T30] 2 locks held by syz-executor/6431: [ 479.400444][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.414759][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.431164][ T30] 2 locks held by syz-executor/6433: [ 479.436928][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.453183][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.472079][ T30] 2 locks held by syz-executor/6439: [ 479.478029][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 479.499655][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 479.513764][ T30] [ 479.521714][ T30] ============================================= [ 479.521714][ T30] [ 479.532005][ T30] NMI backtrace for cpu 1 [ 479.536392][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 479.546682][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 479.556872][ T30] Call Trace: [ 479.560216][ T30] [ 479.563181][ T30] dump_stack_lvl+0x241/0x360 [ 479.568013][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.573294][ T30] ? __pfx__printk+0x10/0x10 [ 479.577956][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 479.582949][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 479.588572][ T30] ? _printk+0xd5/0x120 [ 479.592894][ T30] ? __pfx__printk+0x10/0x10 [ 479.597545][ T30] ? __wake_up_klogd+0xcc/0x110 [ 479.602610][ T30] ? __pfx__printk+0x10/0x10 [ 479.607251][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 479.612327][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 479.618369][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 479.624404][ T30] watchdog+0xff4/0x1040 [ 479.628697][ T30] ? watchdog+0x1ea/0x1040 [ 479.633165][ T30] ? __pfx_watchdog+0x10/0x10 [ 479.637886][ T30] kthread+0x2f0/0x390 [ 479.642009][ T30] ? __pfx_watchdog+0x10/0x10 [ 479.646733][ T30] ? __pfx_kthread+0x10/0x10 [ 479.651364][ T30] ret_from_fork+0x4b/0x80 [ 479.655832][ T30] ? __pfx_kthread+0x10/0x10 [ 479.660464][ T30] ret_from_fork_asm+0x1a/0x30 [ 479.665294][ T30] [ 479.669154][ T30] Sending NMI from CPU 1 to CPUs 0: [ 479.674423][ C0] NMI backtrace for cpu 0 [ 479.674438][ C0] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:5 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 479.674460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 479.674472][ C0] Workqueue: events nsim_dev_trap_report_work [ 479.674495][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 479.674520][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 33 9c 0c 48 89 de 5b e9 c3 d3 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 65 8b 15 90 17 [ 479.674536][ C0] RSP: 0018:ffffc90000006b78 EFLAGS: 00000202 [ 479.674552][ C0] RAX: 0000000000000100 RBX: ffff888084e11700 RCX: ffffffff89900776 [ 479.674566][ C0] RDX: ffff88802f825a00 RSI: 000000000000296b RDI: 00000000ffffffff [ 479.674579][ C0] RBP: ffff88805bad8000 R08: ffffffff899007b2 R09: 1ffff1100b75b0c3 [ 479.674593][ C0] R10: dffffc0000000000 R11: ffffed100b75b0c4 R12: 0000000000000002 [ 479.674606][ C0] R13: 000000000000296b R14: ffffffff8fd8be40 R15: 0000000000002969 [ 479.674619][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 479.674634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.674647][ C0] CR2: 0000000020006000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 479.674663][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 479.674674][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 479.674686][ C0] Call Trace: [ 479.674692][ C0] [ 479.674700][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 479.674721][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 479.674749][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 479.674768][ C0] ? nmi_handle+0x2a/0x5a0 [ 479.674793][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 479.674817][ C0] ? nmi_handle+0x14f/0x5a0 [ 479.674834][ C0] ? nmi_handle+0x2a/0x5a0 [ 479.674852][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 479.674874][ C0] ? default_do_nmi+0x63/0x160 [ 479.674894][ C0] ? exc_nmi+0x123/0x1f0 [ 479.674914][ C0] ? end_repeat_nmi+0xf/0x53 [ 479.674943][ C0] ? dst_init+0xb2/0x490 [ 479.674973][ C0] ? dst_init+0x76/0x490 [ 479.675000][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 479.675024][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 479.675050][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 479.675074][ C0] [ 479.675081][ C0] [ 479.675088][ C0] dst_init+0xc0/0x490 [ 479.675113][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 479.675148][ C0] dst_alloc+0x14f/0x190 [ 479.675186][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 479.675224][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 479.675252][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 479.675280][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 479.675309][ C0] ? __pfx_lock_release+0x10/0x10 [ 479.675334][ C0] ? kthread+0x2f0/0x390 [ 479.675356][ C0] ip_route_output_flow+0x29/0x140 [ 479.675379][ C0] ip_route_me_harder+0x80d/0x1300 [ 479.675406][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 479.675430][ C0] ? trace_kmalloc+0x1f/0xd0 [ 479.675445][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 479.675474][ C0] synproxy_send_tcp+0x356/0x6c0 [ 479.675501][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 479.675531][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 479.675556][ C0] ? synproxy_pernet+0x45/0x270 [ 479.675582][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 479.675610][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 479.675636][ C0] ? nf_ip_checksum+0x13a/0x500 [ 479.675664][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 479.675691][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 479.675720][ C0] ? __pfx_validate_chain+0x10/0x10 [ 479.675744][ C0] nft_do_chain+0x4ad/0x1da0 [ 479.675776][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 479.675799][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 479.675836][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 479.675866][ C0] nft_do_chain_inet+0x418/0x6b0 [ 479.675893][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 479.675917][ C0] ? ipt_do_table+0x312/0x1860 [ 479.675949][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 479.675973][ C0] nf_hook_slow+0xc3/0x220 [ 479.675994][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 479.676013][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 479.676032][ C0] NF_HOOK+0x29e/0x450 [ 479.676050][ C0] ? NF_HOOK+0x9a/0x450 [ 479.676067][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 479.676086][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 479.676107][ C0] ? ip_rcv_finish+0x406/0x560 [ 479.676126][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 479.676144][ C0] NF_HOOK+0x3a4/0x450 [ 479.676166][ C0] ? __lock_acquire+0x1384/0x2050 [ 479.676193][ C0] ? NF_HOOK+0x9a/0x450 [ 479.676209][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 479.676225][ C0] ? ip_rcv_core+0x801/0xd10 [ 479.676244][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 479.676266][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 479.676283][ C0] __netif_receive_skb+0x2bf/0x650 [ 479.676305][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 479.676330][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 479.676350][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.676376][ C0] ? __pfx_lock_release+0x10/0x10 [ 479.676401][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 479.676431][ C0] process_backlog+0x662/0x15b0 [ 479.676454][ C0] ? process_backlog+0x33b/0x15b0 [ 479.676480][ C0] ? __pfx_process_backlog+0x10/0x10 [ 479.676501][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.676528][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.676555][ C0] __napi_poll+0xcb/0x490 [ 479.676577][ C0] net_rx_action+0x89b/0x1240 [ 479.676608][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 479.676632][ C0] ? sched_clock+0x4a/0x70 [ 479.676661][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.676692][ C0] handle_softirqs+0x2c5/0x980 [ 479.676718][ C0] ? do_softirq+0x11b/0x1e0 [ 479.676741][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 479.676769][ C0] do_softirq+0x11b/0x1e0 [ 479.676791][ C0] [ 479.676797][ C0] [ 479.676803][ C0] ? __pfx_do_softirq+0x10/0x10 [ 479.676827][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 479.676854][ C0] ? rcu_is_watching+0x15/0xb0 [ 479.676874][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 479.676898][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 479.676917][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 479.676941][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 479.676964][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 479.676984][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 479.677010][ C0] ? process_scheduled_works+0x976/0x1850 [ 479.677035][ C0] process_scheduled_works+0xa63/0x1850 [ 479.677073][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.677102][ C0] ? assign_work+0x364/0x3d0 [ 479.677128][ C0] worker_thread+0x870/0xd30 [ 479.677162][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 479.677189][ C0] ? __kthread_parkme+0x169/0x1d0 [ 479.677216][ C0] ? __pfx_worker_thread+0x10/0x10 [ 479.677241][ C0] kthread+0x2f0/0x390 [ 479.677257][ C0] ? __pfx_worker_thread+0x10/0x10 [ 479.677282][ C0] ? __pfx_kthread+0x10/0x10 [ 479.677299][ C0] ret_from_fork+0x4b/0x80 [ 479.677324][ C0] ? __pfx_kthread+0x10/0x10 [ 479.677340][ C0] ret_from_fork_asm+0x1a/0x30 [ 479.677373][ C0] [ 480.395036][ T5229] Bluetooth: hci16: command tx timeout [ 480.462440][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 480.469455][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 480.479661][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 480.489770][ T30] Call Trace: [ 480.493088][ T30] [ 480.496057][ T30] dump_stack_lvl+0x241/0x360 [ 480.500809][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.506063][ T30] ? __pfx__printk+0x10/0x10 [ 480.510704][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.516763][ T30] ? vscnprintf+0x5d/0x90 [ 480.521139][ T30] panic+0x349/0x880 [ 480.525179][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 480.531382][ T30] ? __pfx_panic+0x10/0x10 [ 480.535847][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 480.541355][ T30] ? __irq_work_queue_local+0x137/0x410 [ 480.547042][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 480.552461][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 480.558662][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 480.564933][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 480.571140][ T30] watchdog+0x1033/0x1040 [ 480.575526][ T30] ? watchdog+0x1ea/0x1040 [ 480.579995][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.584722][ T30] kthread+0x2f0/0x390 [ 480.588835][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.593561][ T30] ? __pfx_kthread+0x10/0x10 [ 480.598194][ T30] ret_from_fork+0x4b/0x80 [ 480.602666][ T30] ? __pfx_kthread+0x10/0x10 [ 480.607294][ T30] ret_from_fork_asm+0x1a/0x30 [ 480.612126][ T30] [ 480.615460][ T30] Kernel Offset: disabled [ 480.619800][ T30] Rebooting in 86400 seconds..