last executing test programs: 22.490165716s ago: executing program 3 (id=2412): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x6}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 21.146675227s ago: executing program 3 (id=2414): r0 = getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x103}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x8}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x33}, 0xa, @in=@dev, 0x0, 0x0, 0x0, 0x10}}, 0xe8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10200, 0x0) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe880000000000000000000000000001c910fe29bb0cc300000000000000000000000720000000000600"/91], 0x60}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 18.070176824s ago: executing program 2 (id=2417): socket$inet6(0xa, 0x4, 0x41008) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = creat(&(0x7f0000000300)='./file1\x00', 0x120) close(r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/71, &(0x7f0000000500)=""/73}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000015640)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file1/file0', [{0x20, '/\xf4'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00\x00\x00\x00\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ca) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000f9584f0cf0f849fbb65fd0ee37b1b7b7921710bcd24533ba9059429ca66a3957b1fa44800574367b1b07e2ffcf3e7bcf9c3dc90bd9db4acc74dc68288fb77995263fe63f33ba66b26a8102e65a9bac707fb91d7f272ed4c10f7185f45f1fa0fbbd0f358c8bda38c12ceb4d22000f0d00c0e6f58d5d7114f672bc87cbc6ec431adbf14eeeafdb95ae7415e6b38790b6b921613ae773899df8e28818811366d1f420650dedc6ba3bdff8aab5ef137b40377123"]) 17.414534571s ago: executing program 4 (id=2420): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x0, &(0x7f0000000fc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) ioperm(0x0, 0x5, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000001380)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 16.452819973s ago: executing program 3 (id=2421): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20048004, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x1d) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe0, 0x51, 0x8a, 0x10, 0x846, 0x9030, 0x5442, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xde, 0x57, 0x4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x3}}]}}]}}]}}, 0x0) 16.254813859s ago: executing program 2 (id=2422): socket$inet6(0xa, 0x4, 0x41008) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = dup(0xffffffffffffffff) r1 = creat(&(0x7f0000000300)='./file1\x00', 0x120) close(r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/71, &(0x7f0000000500)=""/73}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000015640)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file1/file0', [{0x20, '/\xf4'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00\x00\x00\x00\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ca) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000f9584f0cf0f849fbb65fd0ee37b1b7b7921710bcd24533ba9059429ca66a3957b1fa44800574367b1b07e2ffcf3e7bcf9c3dc90bd9db4acc74dc68288fb77995263fe63f33ba66b26a8102e65a9bac707fb91d7f272ed4c10f7185f45f1fa0fbbd0f358c8bda38c12ceb4d22000f0d00c0e6f58d5d7114f672bc87cbc6ec431adbf14eeeafdb95ae7415e6b38790b6b921613ae773899df8e28818811366d1f420650dedc6ba3bdff8aab5ef137b40377123"]) 13.204481184s ago: executing program 3 (id=2425): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb0}}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 13.124329193s ago: executing program 4 (id=2427): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x8c93, 0x0, 'client0\x00', 0x0, "fada128e1d9fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23"}) tkill(r2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="10030300ffffffff02004788aa96a13bc5a00011794242", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_ra}}}}}, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045e800", 0x1b}], 0x1) 12.841485694s ago: executing program 1 (id=2428): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006a00000126bd7000fddbdf25020000000000000008000500", @ANYRES32=0x0, @ANYBLOB="0800050092f5280b5c6ebae88e5139987c", @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004000b0004000b0004000b00"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe079, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x90) 11.926464695s ago: executing program 0 (id=2429): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb0}}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 10.560789985s ago: executing program 1 (id=2430): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$netlink(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11c, 0x1, 0x0, 0x20000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x0, 0x1, 0x0, 0xb19, 0x2}}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000540)={0x5, [0x1, 0x5, 0x1c5], [{0xfffffff7, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xd, 0x1, 0x1, 0x1}, {0xa08, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x1}, {0xf, 0x800, 0x1}, {0x6, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x400, 0x0, 0x1}, {0x500, 0x8}, {0x8001, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x400003, 0x7}, {0x4, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}], 0x7}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x8000041) pwritev(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) r5 = syz_io_uring_setup(0x3254, &(0x7f0000000100)={0x0, 0xae34, 0x10, 0x3, 0x17b}, &(0x7f0000000000), &(0x7f0000000180)) syz_io_uring_setup(0x67fd, &(0x7f0000000380)={0x0, 0x3400, 0x200, 0x3, 0x4000022c, 0x0, r5}, 0x0, 0x0) io_uring_setup(0x3023, &(0x7f0000000300)={0x0, 0x0, 0x8, 0xfffffffd, 0x66}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x8044000, &(0x7f0000000280)="66124f3c4f7f8cddc375eb556c6710", 0xf, 0x0, 0x0, 0x0) 10.439152076s ago: executing program 2 (id=2431): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x8c93, 0x0, 'client0\x00', 0x0, "fada128e1d9fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23"}) tkill(r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="10030300ffffffff02004788", 0xc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_ra}}}}}, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045e8000025000000190004000400ad6e000d0000000000000604000000", 0x35}], 0x1) 9.194848968s ago: executing program 4 (id=2432): r0 = getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x103}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0xfffffffd, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x5}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev={0xac, 0x14, 0x14, 0x8}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x33}, 0xa, @in=@dev, 0x0, 0x0, 0x0, 0x10}}, 0xe8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10200, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe880000000000000000000000000001c910fe29bb0cc300000000000000000000000720000000000600"/91], 0x60}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 8.766932721s ago: executing program 1 (id=2433): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x8c93, 0x0, 'client0\x00', 0x0, "fada128e1d9fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23"}) tkill(r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="10030300ffffffff02004788", 0xc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_ra}}}}}, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045e8000025000000190004000400ad6e000d000000000000060400", 0x33}], 0x1) 8.656882334s ago: executing program 2 (id=2434): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006a00000126bd7000fddbdf250200000000", @ANYRES32=0x0, @ANYBLOB="0800050092f5280b5c6ebae88e5139987c", @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004000b0004000b0004000b00"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe079, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b110800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) 7.319314234s ago: executing program 2 (id=2435): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x8c93, 0x0, 'client0\x00', 0x0, "fada128e1d9fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23"}) tkill(r2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000040)="10030300ffffffff02004788aa96a13bc5a00011794242", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_ra}}}}}, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045e8000025000000190004000400ad6e000d0000000000000604000000", 0x35}], 0x1) 7.128128932s ago: executing program 3 (id=2436): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20048004, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x1d) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe0, 0x51, 0x8a, 0x10, 0x846, 0x9030, 0x5442, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xde, 0x57, 0x4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x3}}]}}]}}]}}, 0x0) 6.893761039s ago: executing program 0 (id=2437): syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000340)=0x80) kcmp(r1, r4, 0x1, r2, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) sync() 5.694876568s ago: executing program 0 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 5.471156839s ago: executing program 0 (id=2439): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800050092f5280b5c6ebae88e5139987c", @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004000b0004000b0004000b00"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe079, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b110800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) 4.098145099s ago: executing program 0 (id=2440): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb0}}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 3.773760176s ago: executing program 4 (id=2441): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioperm(0x7f, 0x5, 0x84) fremovexattr(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffc01, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000300)={0x8, 0x1, 0x0, {0x5, 0x1, 0x9, 0x4}}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.680208493s ago: executing program 3 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) stat(&(0x7f0000000400)='./bus\x00', &(0x7f00000004c0)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000000)='.\x00', 0x0) umount2(&(0x7f0000000180)='./file0/file0/..\x00', 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xab852ebbeefbd6b1}) timer_settime(0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) 3.500830623s ago: executing program 1 (id=2443): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001a0000850000000e000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) 3.475890043s ago: executing program 2 (id=2444): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$netlink(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11c, 0x1, 0x0, 0x20000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x0, 0x1, 0x0, 0xb19, 0x2}}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000540)={0x5, [0x1, 0x5, 0x1c5], [{0xfffffff7, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xd, 0x1, 0x1, 0x1}, {0xa08, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x1}, {0xf, 0x800, 0x1}, {0x6, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x400, 0x0, 0x1}, {0x500, 0x8}, {0x8001, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x400003, 0x7}, {0x4, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}], 0x7}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x8000041) pwritev(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) r5 = syz_io_uring_setup(0x3254, &(0x7f0000000100)={0x0, 0xae34, 0x10, 0x3, 0x17b}, &(0x7f0000000000), &(0x7f0000000180)) syz_io_uring_setup(0x67fd, &(0x7f0000000380)={0x0, 0x3400, 0x200, 0x3, 0x4000022c, 0x0, r5}, 0x0, 0x0) io_uring_setup(0x3023, &(0x7f0000000300)={0x0, 0x0, 0x8, 0xfffffffd, 0x66}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x8044000, &(0x7f0000000280)="66124f3c4f7f8cddc375eb556c6710", 0xf, 0x0, 0x0, 0x0) 3.297103055s ago: executing program 1 (id=2445): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006a00000126bd7000fddbdf250200000000", @ANYRES32=0x0, @ANYBLOB="0800050092f5280b5c6ebae88e5139987c", @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004000b0004000b0004000b00"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe079, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b110800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) 2.006820103s ago: executing program 1 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) stat(&(0x7f0000000400)='./bus\x00', &(0x7f00000004c0)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000000)='.\x00', 0x0) umount2(&(0x7f0000000180)='./file0/file0/..\x00', 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xab852ebbeefbd6b1}) r5 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x88\x81\x85i\x16c)\xa5\xb9\xc8\xd7\a\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e92\xca\x82\xb1\xa0I\x8d\xd9T\xa1:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8A\xbd\x1eU\x84hE\x98\xa9\xb0\x12\xd0\xc9/\x94\x91\xf7i\x149\xe2', &(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 1.971107326s ago: executing program 0 (id=2447): socket$inet6(0xa, 0x4, 0x41008) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) close(0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/71, &(0x7f0000000500)=""/73}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000015640)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file1/file0', [{0x20, '/\xf4'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00\x00\x00\x00\x00'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ca) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000f9584f0cf0f849fbb65fd0ee37b1b7b7921710bcd24533ba9059429ca66a3957b1fa44800574367b1b07e2ffcf3e7bcf9c3dc90bd9db4acc74dc68288fb77995263fe63f33ba66b26a8102e65a9bac707fb91d7f272ed4c10f7185f45f1fa0fbbd0f358c8bda38c12ceb4d22000f0d00c0e6f58d5d7114f672bc87cbc6ec431adbf14eeeafdb95ae7415e6b38790b6b921613ae773899df8e28818811366d1f420650dedc6ba3bdff8aab5ef137b40377123"]) 1.679481902s ago: executing program 4 (id=2448): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006a00000126bd7000fddbdf250200000000", @ANYRES32=0x0, @ANYBLOB="0800050092f5280b5c6ebae88e5139987c", @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004000b0004000b000400"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe079, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b110800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) 0s ago: executing program 4 (id=2449): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) kernel console output (not intermixed with test programs): 9 [ 1293.543866][T14588] veth0_vlan: entered promiscuous mode [ 1293.558178][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1293.567658][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1293.575121][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1293.682843][T14887] netlink: 'syz.3.2165': attribute type 4 has an invalid length. [ 1293.729229][T14588] veth1_vlan: entered promiscuous mode [ 1293.976519][T14598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.038309][T13059] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1294.275090][T13059] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1294.288807][T14588] veth0_macvtap: entered promiscuous mode [ 1294.311181][T13059] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1294.346889][T13059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.370799][T13059] usb 3-1: Product: syz [ 1294.376632][T13059] usb 3-1: Manufacturer: syz [ 1294.387000][T13059] usb 3-1: SerialNumber: syz [ 1294.518875][T14588] veth1_macvtap: entered promiscuous mode [ 1294.963162][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.982013][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.994258][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.033523][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.057933][T13059] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1295.076649][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.113721][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.127563][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.139653][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.153973][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.165272][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.195881][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.228705][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.242400][T14588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.304760][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.316566][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.328321][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.348930][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.388998][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.400494][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.412415][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.423107][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.433622][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.444216][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.468000][T14588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.563714][T14885] chnl_net:caif_netlink_parms(): no params data found [ 1295.632586][ T5315] usb 3-1: USB disconnect, device number 43 [ 1295.677399][ T5242] Bluetooth: hci0: command tx timeout [ 1295.826538][T14588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.842363][T14588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.852187][T14588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.861692][T14588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.878847][T14889] usblp0: removed [ 1295.949321][ T1105] bridge_slave_1: left allmulticast mode [ 1295.956323][ T1105] bridge_slave_1: left promiscuous mode [ 1295.964211][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.995447][ T1105] bridge_slave_0: left allmulticast mode [ 1296.001353][ T1105] bridge_slave_0: left promiscuous mode [ 1296.008747][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.587427][T14915] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2170'. [ 1297.757437][ T5242] Bluetooth: hci0: command tx timeout [ 1298.277300][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.297653][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.333069][ T1105] bond0 (unregistering): Released all slaves [ 1298.385779][T14912] netlink: 'syz.2.2169': attribute type 4 has an invalid length. [ 1298.475416][T14598] veth0_vlan: entered promiscuous mode [ 1298.723114][T14598] veth1_vlan: entered promiscuous mode [ 1298.867701][ T1105] hsr_slave_0: left promiscuous mode [ 1298.885655][ T1105] hsr_slave_1: left promiscuous mode [ 1298.895763][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.914548][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.945802][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.827026][ T5242] Bluetooth: hci0: command tx timeout [ 1299.864883][ T1105] veth1_macvtap: left promiscuous mode [ 1299.872133][ T1105] veth0_macvtap: left promiscuous mode [ 1299.878617][ T1105] veth1_vlan: left promiscuous mode [ 1299.887779][ T1105] veth0_vlan: left promiscuous mode [ 1300.217695][ T5279] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1300.436977][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 1300.447777][ T5279] usb 3-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 1300.513290][ T5279] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1300.563545][ T5279] usb 3-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 1300.585294][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.607009][ T5279] usb 3-1: Product: syz [ 1300.615256][ T5279] usb 3-1: Manufacturer: syz [ 1300.627014][ T5279] usb 3-1: SerialNumber: syz [ 1300.660359][ T5279] usb 3-1: config 0 descriptor?? [ 1300.877930][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.989629][T14954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.024061][ T5242] Bluetooth: hci0: command tx timeout [ 1303.627383][ T5279] usb 3-1: USB disconnect, device number 44 [ 1304.198395][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.211115][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.236056][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.245526][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.267753][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1304.282221][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.301991][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1304.408251][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1305.279679][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.287214][T14885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.294517][T14885] bridge_slave_0: entered allmulticast mode [ 1305.305037][T14885] bridge_slave_0: entered promiscuous mode [ 1305.360583][T14959] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2175'. [ 1305.432099][T14885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.457230][T14885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.464610][T14885] bridge_slave_1: entered allmulticast mode [ 1305.515856][T14885] bridge_slave_1: entered promiscuous mode [ 1305.927809][ T5278] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1306.398711][ T5239] Bluetooth: hci1: command tx timeout [ 1306.621536][T14885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.700195][ T5278] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1306.711462][T14885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.739249][ T5278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1306.768018][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.792060][T14598] veth0_macvtap: entered promiscuous mode [ 1306.806950][ T5278] usb 4-1: Product: syz [ 1306.817374][ T5278] usb 4-1: Manufacturer: syz [ 1306.844166][ T5278] usb 4-1: SerialNumber: syz [ 1307.093634][T14975] syz.2.2178[14975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.093857][T14975] syz.2.2178[14975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.100938][T14598] veth1_macvtap: entered promiscuous mode [ 1307.190198][T14975] hub 6-0:1.0: USB hub found [ 1307.207825][T14975] hub 6-0:1.0: 1 port detected [ 1307.302887][T14885] team0: Port device team_slave_0 added [ 1307.320035][T14885] team0: Port device team_slave_1 added [ 1307.368588][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 1307.552416][T14885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.571416][ T5278] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1307.576915][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.629353][T14885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.655936][T14885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.678426][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.722633][T14885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.914711][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.947266][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.989683][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.021114][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.042101][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.057226][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.068561][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.080722][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.099021][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.112547][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.124442][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.142092][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.419230][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 1308.469002][ T5239] Bluetooth: hci1: command tx timeout [ 1308.752887][T14598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.808226][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.846714][ T5279] usb 4-1: USB disconnect, device number 27 [ 1308.863153][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.896413][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.907016][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.917461][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.928115][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.938025][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.948533][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.958437][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.968986][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.978885][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.989412][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.010985][T14598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.140497][T14885] hsr_slave_0: entered promiscuous mode [ 1309.166415][T14885] hsr_slave_1: entered promiscuous mode [ 1309.205551][T14965] usblp0: removed [ 1309.212713][T14885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.222433][T14885] Cannot create hsr debugfs directory [ 1309.257867][T14598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.287414][T14598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.297583][T14598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.316891][T14598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.451661][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.495259][T14998] netlink: 'syz.2.2180': attribute type 4 has an invalid length. [ 1309.661725][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.122039][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.562493][ T5242] Bluetooth: hci1: command tx timeout [ 1311.193946][T15009] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2182'. [ 1311.258664][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.820451][T14960] chnl_net:caif_netlink_parms(): no params data found [ 1312.740459][ T5242] Bluetooth: hci1: command tx timeout [ 1313.018326][T13301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.061672][T13301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.340097][T15020] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1314.500354][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.532305][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.541802][T14960] bridge_slave_0: entered allmulticast mode [ 1314.556017][T14960] bridge_slave_0: entered promiscuous mode [ 1314.630592][ T1105] bridge_slave_1: left allmulticast mode [ 1314.636321][ T1105] bridge_slave_1: left promiscuous mode [ 1314.658331][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.698765][ T1105] bridge_slave_0: left allmulticast mode [ 1314.704505][ T1105] bridge_slave_0: left promiscuous mode [ 1314.737555][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.746101][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1315.777411][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1315.801153][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1315.822038][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1315.840735][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1315.850298][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1316.214505][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.241145][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.261060][ T1105] bond0 (unregistering): Released all slaves [ 1316.358196][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.381622][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.407240][T14960] bridge_slave_1: entered allmulticast mode [ 1316.416011][T14960] bridge_slave_1: entered promiscuous mode [ 1316.689426][ T9941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.077535][ T9941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.907468][ T5242] Bluetooth: hci4: command tx timeout [ 1318.169246][ T1105] hsr_slave_0: left promiscuous mode [ 1318.189862][ T1105] hsr_slave_1: left promiscuous mode [ 1318.222423][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.278471][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.305053][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.337104][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.396240][ T1105] veth1_macvtap: left promiscuous mode [ 1318.402435][ T1105] veth0_macvtap: left promiscuous mode [ 1318.407483][ T46] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1318.410058][ T1105] veth1_vlan: left promiscuous mode [ 1318.495281][ T1105] veth0_vlan: left promiscuous mode [ 1318.578684][T15069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.629572][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1318.639644][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1318.658020][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.695188][ T46] usb 3-1: Product: syz [ 1318.712187][ T46] usb 3-1: Manufacturer: syz [ 1318.734972][ T46] usb 3-1: SerialNumber: syz [ 1319.362747][ T46] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1319.964241][ T46] usb 3-1: USB disconnect, device number 45 [ 1320.007287][ T5242] Bluetooth: hci4: command tx timeout [ 1320.115364][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1320.177828][T15059] usblp0: removed [ 1320.206567][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1321.047673][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1322.077175][ T5242] Bluetooth: hci4: command tx timeout [ 1323.104189][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.118481][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.697165][ T5242] Bluetooth: hci4: command tx timeout [ 1324.859603][T14960] team0: Port device team_slave_0 added [ 1325.331444][ T29] audit: type=1326 audit(1725799058.684:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.2.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efded77cef9 code=0x0 [ 1325.754517][T14960] team0: Port device team_slave_1 added [ 1325.846346][T15092] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2193'. [ 1326.265641][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.858154][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.929566][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.958667][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.984427][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.993202][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.027621][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.308603][T15112] netlink: 'syz.3.2196': attribute type 4 has an invalid length. [ 1329.501797][T14960] hsr_slave_0: entered promiscuous mode [ 1329.511360][T14960] hsr_slave_1: entered promiscuous mode [ 1329.531257][T14960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.547123][T14960] Cannot create hsr debugfs directory [ 1329.702245][T15050] chnl_net:caif_netlink_parms(): no params data found [ 1329.991937][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.540462][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.623962][T14885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1330.987522][ T29] audit: type=1326 audit(1725799064.324:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.3.2199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e897cef9 code=0x0 [ 1331.618004][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.657951][T14885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1332.067623][ T29] audit: type=1326 audit(1725799065.414:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e897cef9 code=0x0 [ 1332.765861][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.803718][T14885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1332.886594][T15146] netlink: 'syz.2.2200': attribute type 4 has an invalid length. [ 1332.905665][T14885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1333.207420][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.214649][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.245710][T15050] bridge_slave_0: entered allmulticast mode [ 1333.269358][T15050] bridge_slave_0: entered promiscuous mode [ 1333.312682][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.323716][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.333518][T15050] bridge_slave_1: entered allmulticast mode [ 1333.340890][T15050] bridge_slave_1: entered promiscuous mode [ 1334.571298][T15050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.840346][T15050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.625895][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.316584][T15177] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1338.530093][T15050] team0: Port device team_slave_0 added [ 1338.541941][T15050] team0: Port device team_slave_1 added [ 1338.601454][ T1105] bridge_slave_1: left allmulticast mode [ 1338.616963][ T1105] bridge_slave_1: left promiscuous mode [ 1338.625548][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.644563][ T1105] bridge_slave_0: left allmulticast mode [ 1338.652030][ T1105] bridge_slave_0: left promiscuous mode [ 1338.659050][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.761288][ T29] audit: type=1326 audit(1725799072.484:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15183 comm="syz.3.2208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e897cef9 code=0x0 [ 1340.627574][ T29] audit: type=1326 audit(1725799073.944:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.3.2209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e897cef9 code=0x0 [ 1341.783273][T15204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.713004][T15207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.909051][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.932270][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.956076][ T1105] bond0 (unregistering): Released all slaves [ 1344.072174][T15050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.096756][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.141000][T15050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.341418][T14885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.362486][T15050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.388054][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.434446][T15050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.700195][T15050] hsr_slave_0: entered promiscuous mode [ 1344.708204][T15050] hsr_slave_1: entered promiscuous mode [ 1344.735056][T15050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.798597][T15050] Cannot create hsr debugfs directory [ 1345.078366][T15216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.114708][T14885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.439291][ T1105] hsr_slave_0: left promiscuous mode [ 1345.458309][ T1105] hsr_slave_1: left promiscuous mode [ 1345.469156][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.487196][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.518156][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.536376][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.601142][ T1105] veth1_macvtap: left promiscuous mode [ 1345.606984][ T1105] veth0_macvtap: left promiscuous mode [ 1345.615987][ T1105] veth1_vlan: left promiscuous mode [ 1345.624045][ T1105] veth0_vlan: left promiscuous mode [ 1348.994966][ T29] audit: type=1326 audit(1725799082.344:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.2.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efded77cef9 code=0x0 [ 1349.857695][T15238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.234774][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1350.249626][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1350.264667][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1350.276271][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1350.286321][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1350.296717][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1350.864483][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1351.146324][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1352.388993][ T5239] Bluetooth: hci5: command tx timeout [ 1353.496621][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.503956][T13301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.621389][T14960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1353.712206][T14960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1354.058484][T14960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1354.467167][ T5239] Bluetooth: hci5: command tx timeout [ 1354.836119][T14960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1356.548418][ T5239] Bluetooth: hci5: command tx timeout [ 1358.455563][T15273] netlink: 'syz.2.2222': attribute type 4 has an invalid length. [ 1358.636574][ T5239] Bluetooth: hci5: command tx timeout [ 1360.674716][T15310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.321423][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.596282][T14960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.777047][ T5278] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1362.841455][T15240] chnl_net:caif_netlink_parms(): no params data found [ 1362.936338][T14960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.977426][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 1362.991539][ T5278] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1363.020292][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.053960][ T5278] usb 3-1: Product: syz [ 1363.058484][ T5278] usb 3-1: Manufacturer: syz [ 1363.072857][ T1105] bridge_slave_1: left allmulticast mode [ 1363.087211][ T5278] usb 3-1: SerialNumber: syz [ 1363.091527][ T1105] bridge_slave_1: left promiscuous mode [ 1363.110259][ T5278] usb 3-1: config 0 descriptor?? [ 1363.112918][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.140147][ T5278] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1363.150437][ T1105] bridge_slave_0: left allmulticast mode [ 1363.159027][ T5278] usb 3-1: Detected FT232H [ 1363.162629][ T1105] bridge_slave_0: left promiscuous mode [ 1363.188576][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.097371][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1365.179107][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1365.195803][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1365.233157][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1365.241567][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1365.249658][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1365.457683][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.490128][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.530718][ T1105] bond0 (unregistering): Released all slaves [ 1365.684575][T15050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1365.752185][T15348] netlink: 'syz.3.2229': attribute type 4 has an invalid length. [ 1365.858231][ T1105] hsr_slave_0: left promiscuous mode [ 1365.931718][ T1105] hsr_slave_1: left promiscuous mode [ 1365.949021][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.054309][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.330778][T15380] syz.3.2231[15380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1367.330976][T15380] syz.3.2231[15380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1367.366784][ T5242] Bluetooth: hci0: command tx timeout [ 1367.448433][T15380] hub 6-0:1.0: USB hub found [ 1367.453538][T15380] hub 6-0:1.0: 1 port detected [ 1367.474383][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1367.588702][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1368.237055][ T5278] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 1368.244518][ T5278] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 1368.253575][ T5278] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 1368.275130][ T5278] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1368.484479][T15050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1368.552641][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2231'. [ 1368.633160][T15050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1368.660950][T15050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1368.756960][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.764450][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.773711][T15240] bridge_slave_0: entered allmulticast mode [ 1368.782186][T15240] bridge_slave_0: entered promiscuous mode [ 1368.845563][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.853000][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.861179][T15240] bridge_slave_1: entered allmulticast mode [ 1368.875802][T15240] bridge_slave_1: entered promiscuous mode [ 1369.093775][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.139330][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.449459][ T5242] Bluetooth: hci0: command tx timeout [ 1369.526178][T15240] team0: Port device team_slave_0 added [ 1369.534880][T15240] team0: Port device team_slave_1 added [ 1369.737586][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.768604][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.808414][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.838912][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.845920][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.901020][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.047164][T13070] usb 3-1: USB disconnect, device number 46 [ 1370.124958][T13070] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1370.185459][T13070] ftdi_sio 3-1:0.0: device disconnected [ 1370.500080][T15240] hsr_slave_0: entered promiscuous mode [ 1370.520390][T15240] hsr_slave_1: entered promiscuous mode [ 1370.551724][T15240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.571391][T15240] Cannot create hsr debugfs directory [ 1370.983997][T15050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.480868][T15050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.507094][ T5242] Bluetooth: hci0: command tx timeout [ 1371.522462][T15351] chnl_net:caif_netlink_parms(): no params data found [ 1371.741976][ T2542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.749194][ T2542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.844800][ T2542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.852118][ T2542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.458585][ T9941] Bluetooth: hci1: Frame reassembly failed (-84) [ 1372.980486][ T1105] bridge_slave_1: left allmulticast mode [ 1372.986199][ T1105] bridge_slave_1: left promiscuous mode [ 1373.038098][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.098001][ T1105] bridge_slave_0: left allmulticast mode [ 1373.103715][ T1105] bridge_slave_0: left promiscuous mode [ 1373.147345][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.597704][ T5239] Bluetooth: hci0: command tx timeout [ 1374.467549][ T5239] Bluetooth: hci1: command 0x1003 tx timeout [ 1374.476010][ T5242] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1375.241676][ T5278] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1375.447896][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 1375.469128][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1375.491991][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1375.521053][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1375.533852][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1375.544235][ T5278] usb 4-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=54.42 [ 1375.556952][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.590257][ T5278] usb 4-1: config 0 descriptor?? [ 1375.600816][ T5278] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1375.616397][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1375.650457][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1375.696086][ T1105] bond0 (unregistering): Released all slaves [ 1375.939568][T15351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.976049][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.000716][T15351] bridge_slave_0: entered allmulticast mode [ 1376.016449][T15351] bridge_slave_0: entered promiscuous mode [ 1376.046461][T15351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.086403][T15351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.111255][T15351] bridge_slave_1: entered allmulticast mode [ 1376.129912][T15351] bridge_slave_1: entered promiscuous mode [ 1376.283554][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1376.298875][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1376.314840][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1376.323175][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1376.332595][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1376.340548][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1376.368103][ T1105] hsr_slave_0: left promiscuous mode [ 1376.408898][ T1105] hsr_slave_1: left promiscuous mode [ 1376.421066][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.438162][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.028270][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1377.134104][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1377.739244][ T5278] usb 4-1: USB disconnect, device number 28 [ 1377.998517][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1378.196960][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1378.259796][ T46] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1378.270644][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.314298][ T29] audit: type=1326 audit(1725799111.654:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15470 comm="syz.3.2240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e897cef9 code=0x0 [ 1378.391700][T15351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.412202][ T5239] Bluetooth: hci1: command tx timeout [ 1378.442814][ T46] usb 3-1: Product: syz [ 1378.474333][ T46] usb 3-1: Manufacturer: syz [ 1378.512734][ T46] usb 3-1: SerialNumber: syz [ 1378.667335][ T46] usb 3-1: config 0 descriptor?? [ 1378.750497][ T46] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1378.781436][ T46] usb 3-1: Detected FT232H [ 1380.467239][ T5239] Bluetooth: hci1: command tx timeout [ 1380.602589][T15351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.982803][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.577033][ T5239] Bluetooth: hci1: command tx timeout [ 1383.691573][T15351] team0: Port device team_slave_0 added [ 1383.705873][T15351] team0: Port device team_slave_1 added [ 1383.871674][T15351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.882780][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 1383.894884][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.922874][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 1383.930155][T15351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.942006][ T46] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 1383.954737][ T46] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1383.995053][T15351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.005334][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.033577][T15351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.149870][T15351] hsr_slave_0: entered promiscuous mode [ 1384.169116][T15351] hsr_slave_1: entered promiscuous mode [ 1384.187080][T15351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.194687][T15351] Cannot create hsr debugfs directory [ 1384.637453][ T5239] Bluetooth: hci1: command tx timeout [ 1385.337989][ T46] usb 3-1: USB disconnect, device number 47 [ 1385.460284][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1385.517779][ T46] ftdi_sio 3-1:0.0: device disconnected [ 1385.692654][T15240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1386.560608][T15240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1386.649253][T15240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1386.677498][T15240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1390.550179][T15539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.290919][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.469704][T15567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.052073][T15463] chnl_net:caif_netlink_parms(): no params data found [ 1401.273138][T15576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1402.873865][T15240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.392135][T15593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.461587][ T560] bridge_slave_1: left allmulticast mode [ 1404.506418][ T560] bridge_slave_1: left promiscuous mode [ 1404.562314][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.629661][ T560] bridge_slave_0: left allmulticast mode [ 1404.668724][ T560] bridge_slave_0: left promiscuous mode [ 1404.702539][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.425102][ T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.447769][ T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.609892][ T560] bond0 (unregistering): Released all slaves [ 1406.646257][T15463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.653920][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.661430][T15463] bridge_slave_0: entered allmulticast mode [ 1406.669570][T15463] bridge_slave_0: entered promiscuous mode [ 1407.528197][T15463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.535416][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.560952][T15463] bridge_slave_1: entered allmulticast mode [ 1407.753719][T15463] bridge_slave_1: entered promiscuous mode [ 1408.356705][T15608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.547832][ T560] hsr_slave_0: left promiscuous mode [ 1408.566714][ T560] hsr_slave_1: left promiscuous mode [ 1408.592070][ T560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.616406][ T560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.952131][ T560] team0 (unregistering): Port device team_slave_1 removed [ 1411.009886][T15612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1411.022209][T15612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1411.045461][T15612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1411.083055][T15612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1411.104530][T15612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1411.112585][T15612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1411.194958][ T560] team0 (unregistering): Port device team_slave_0 removed [ 1412.341724][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.495579][T15351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1412.766978][T15351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1413.180731][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.215389][T15612] Bluetooth: hci4: command tx timeout [ 1413.589567][T15351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1413.827773][T15463] team0: Port device team_slave_0 added [ 1414.880674][T15463] team0: Port device team_slave_1 added [ 1415.037425][T15351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1415.210463][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.518616][T15612] Bluetooth: hci4: command tx timeout [ 1417.083912][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.375465][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.595638][T15612] Bluetooth: hci4: command tx timeout [ 1417.743920][T15628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.070604][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.084918][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.124378][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.177475][T15612] Bluetooth: hci4: command tx timeout [ 1420.414268][T15463] hsr_slave_0: entered promiscuous mode [ 1420.499000][T15463] hsr_slave_1: entered promiscuous mode [ 1420.635734][T15463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.654910][T15463] Cannot create hsr debugfs directory [ 1420.714642][T15659] No such timeout policy "syz1" [ 1423.753562][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.219922][T15610] chnl_net:caif_netlink_parms(): no params data found [ 1427.242514][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1427.259086][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1427.269987][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1427.287067][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1427.294838][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1427.302314][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1428.021144][ T560] bridge_slave_1: left allmulticast mode [ 1428.026951][ T560] bridge_slave_1: left promiscuous mode [ 1428.032802][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.049621][ T560] bridge_slave_0: left allmulticast mode [ 1428.055323][ T560] bridge_slave_0: left promiscuous mode [ 1428.069993][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.060585][ T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.097847][ T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.136173][ T560] bond0 (unregistering): Released all slaves [ 1429.187715][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.194927][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.230577][T15610] bridge_slave_0: entered allmulticast mode [ 1429.260513][T15610] bridge_slave_0: entered promiscuous mode [ 1429.278232][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.285433][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.303786][T15610] bridge_slave_1: entered allmulticast mode [ 1429.312715][T15610] bridge_slave_1: entered promiscuous mode [ 1429.357284][T15612] Bluetooth: hci0: command tx timeout [ 1429.460898][ T560] hsr_slave_0: left promiscuous mode [ 1429.473365][ T560] hsr_slave_1: left promiscuous mode [ 1429.487743][ T560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.512469][ T560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.912753][ T560] team0 (unregistering): Port device team_slave_1 removed [ 1431.060719][ T560] team0 (unregistering): Port device team_slave_0 removed [ 1431.427375][T15612] Bluetooth: hci0: command tx timeout [ 1431.565097][T15742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.767459][T15612] Bluetooth: hci0: command tx timeout [ 1435.531826][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.660575][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.826912][ T5239] Bluetooth: hci0: command tx timeout [ 1436.143730][T15610] team0: Port device team_slave_0 added [ 1436.239979][T15610] team0: Port device team_slave_1 added [ 1436.960792][T15612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1436.973947][T15612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1437.002059][T15612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1437.019908][T15612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1437.039141][T15612] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1437.051253][T15612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1437.197113][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.253996][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.417265][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.454414][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.469929][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.537213][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.499542][T15610] hsr_slave_0: entered promiscuous mode [ 1438.530379][T15610] hsr_slave_1: entered promiscuous mode [ 1438.608812][T15610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1438.616433][T15610] Cannot create hsr debugfs directory [ 1438.933176][T15705] chnl_net:caif_netlink_parms(): no params data found [ 1439.187505][ T5239] Bluetooth: hci5: command tx timeout [ 1440.200024][T15705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.234291][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.251646][T15705] bridge_slave_0: entered allmulticast mode [ 1440.268548][T15705] bridge_slave_0: entered promiscuous mode [ 1440.295413][T15705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.305744][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.320157][T15705] bridge_slave_1: entered allmulticast mode [ 1440.346478][T15705] bridge_slave_1: entered promiscuous mode [ 1440.378599][T15797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.750482][T15705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.826661][T15705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.267407][ T5239] Bluetooth: hci5: command tx timeout [ 1441.270244][T15705] team0: Port device team_slave_0 added [ 1441.309738][T15758] chnl_net:caif_netlink_parms(): no params data found [ 1441.559155][T15802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.347032][ T5239] Bluetooth: hci5: command tx timeout [ 1444.998883][T15705] team0: Port device team_slave_1 added [ 1445.221996][ T560] bridge_slave_1: left allmulticast mode [ 1445.233184][ T560] bridge_slave_1: left promiscuous mode [ 1445.239700][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.251772][ T560] bridge_slave_0: left allmulticast mode [ 1445.259897][ T560] bridge_slave_0: left promiscuous mode [ 1445.267505][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.300874][ T560] bridge_slave_1: left allmulticast mode [ 1445.306692][ T560] bridge_slave_1: left promiscuous mode [ 1445.313050][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.347974][ T560] bridge_slave_0: left allmulticast mode [ 1445.353675][ T560] bridge_slave_0: left promiscuous mode [ 1445.363608][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.428385][ T5239] Bluetooth: hci5: command tx timeout [ 1445.463184][T15805] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2287'. [ 1446.014597][ T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.056625][ T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.083566][ T560] bond0 (unregistering): Released all slaves [ 1446.119242][ T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.153424][ T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.178122][ T560] bond0 (unregistering): Released all slaves [ 1446.330384][T15705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.353800][T15705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.452428][T15705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.511132][ T560] hsr_slave_0: left promiscuous mode [ 1446.544159][ T560] hsr_slave_1: left promiscuous mode [ 1446.559583][ T560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.577995][ T560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.645955][ T560] hsr_slave_0: left promiscuous mode [ 1446.652542][ T560] hsr_slave_1: left promiscuous mode [ 1446.679150][ T560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.697856][ T560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.707328][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1446.918153][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 1446.952168][ T46] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1446.972392][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.991134][ T46] usb 4-1: Product: syz [ 1447.001275][ T46] usb 4-1: Manufacturer: syz [ 1447.028032][ T46] usb 4-1: SerialNumber: syz [ 1447.041316][ T46] usb 4-1: config 0 descriptor?? [ 1447.051243][ T46] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1447.075261][ T46] usb 4-1: Detected FT232H [ 1447.089842][ T560] team0 (unregistering): Port device team_slave_1 removed [ 1447.161309][ T560] team0 (unregistering): Port device team_slave_0 removed [ 1448.384459][ T560] team0 (unregistering): Port device team_slave_1 removed [ 1448.435753][ T560] team0 (unregistering): Port device team_slave_0 removed [ 1448.865089][T15705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.876352][T15705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.904267][T15705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.132843][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.148277][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.166377][T15758] bridge_slave_0: entered allmulticast mode [ 1449.198126][T15758] bridge_slave_0: entered promiscuous mode [ 1449.219948][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.231602][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.259309][T15758] bridge_slave_1: entered allmulticast mode [ 1449.272074][T15758] bridge_slave_1: entered promiscuous mode [ 1449.766691][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.789518][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1449.802405][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1449.817338][ T46] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1449.858665][T15705] hsr_slave_0: entered promiscuous mode [ 1449.899414][ T46] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1449.914131][T15705] hsr_slave_1: entered promiscuous mode [ 1449.916319][ T46] usb 4-1: USB disconnect, device number 29 [ 1449.926498][T15705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.942339][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1449.952364][T15705] Cannot create hsr debugfs directory [ 1449.954632][ T46] ftdi_sio 4-1:0.0: device disconnected [ 1450.181298][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.255851][T15610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1450.453156][T15610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1450.520023][T15610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1450.578568][T15758] team0: Port device team_slave_0 added [ 1450.607445][T15610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1450.748049][T15758] team0: Port device team_slave_1 added [ 1450.903052][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.915128][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.945756][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.971929][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.979122][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.006485][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.117172][ T5315] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1451.316942][ T5315] usb 4-1: Using ep0 maxpacket: 16 [ 1451.338813][ T5315] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1451.365175][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.394999][ T5315] usb 4-1: Product: syz [ 1451.408436][ T5315] usb 4-1: Manufacturer: syz [ 1451.422494][ T5315] usb 4-1: SerialNumber: syz [ 1451.436546][ T5315] usb 4-1: config 0 descriptor?? [ 1451.454401][ T5315] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1451.464112][ T5315] usb 4-1: Detected FT232H [ 1451.503634][T15758] hsr_slave_0: entered promiscuous mode [ 1451.557735][T15758] hsr_slave_1: entered promiscuous mode [ 1451.566225][T15758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1451.588539][T15758] Cannot create hsr debugfs directory [ 1452.073567][ T5315] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1452.086204][ T5315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1452.105666][ T5315] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1452.141793][ T5315] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1452.168181][ T5315] usb 4-1: USB disconnect, device number 30 [ 1452.199746][ T5315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1452.243482][ T5315] ftdi_sio 4-1:0.0: device disconnected [ 1452.834088][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.307050][T15705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1453.365868][T15705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1453.436568][T15705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1453.522839][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.550349][T15705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1453.795761][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.802989][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.982425][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.989736][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.050861][T15758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1454.208097][T15758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1454.222254][T15758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1454.274491][T15758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1454.543187][T15610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1454.982190][T15705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.784792][T15705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.022279][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.029578][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.128441][T15758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.176758][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.184066][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.391850][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.545466][T15705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1456.611855][T15758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.881256][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.889251][T13301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.518966][T15610] veth0_vlan: entered promiscuous mode [ 1457.535539][T15610] veth1_vlan: entered promiscuous mode [ 1457.620177][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.627440][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.931443][T15610] veth0_macvtap: entered promiscuous mode [ 1457.949293][T15882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.212557][T15610] veth1_macvtap: entered promiscuous mode [ 1459.794349][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.907279][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.934611][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.965794][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.976375][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.990119][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.016887][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.043961][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.060709][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1460.077482][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.125278][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.260948][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.327035][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.379924][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.409356][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.426681][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.456457][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.473117][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.486041][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.517415][T15610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.530807][T15610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.559141][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.604170][T15610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.639736][T15610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.697249][T15610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.706022][T15610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.864436][T15705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.113440][T15913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.297966][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.305872][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.395080][T15705] veth0_vlan: entered promiscuous mode [ 1463.752272][T15758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.918674][T13301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.963670][T13301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.051674][T15705] veth1_vlan: entered promiscuous mode [ 1464.671367][T15705] veth0_macvtap: entered promiscuous mode [ 1464.822464][T15705] veth1_macvtap: entered promiscuous mode [ 1465.001965][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.028288][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.043435][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.092445][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.126938][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.147128][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.172339][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.190444][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.212384][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.223539][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.233869][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.244712][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.259813][T15705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.399200][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.438611][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.458132][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.495947][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.535488][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.561946][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.593358][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.643718][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.679677][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.696685][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.733130][T15705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.785171][T15705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.859358][T15705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.960015][T15705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.984292][T15705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.997074][T15705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.011621][T15705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.230479][T15758] veth0_vlan: entered promiscuous mode [ 1467.521948][T15758] veth1_vlan: entered promiscuous mode [ 1468.592716][T13170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.623907][T13170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.618904][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.628148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.764923][T15758] veth0_macvtap: entered promiscuous mode [ 1471.886374][T15758] veth1_macvtap: entered promiscuous mode [ 1473.069809][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.279141][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.315928][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.222516][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.272148][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.304850][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.344608][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.427218][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.467189][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.553575][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.573785][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.628224][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.687122][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.704181][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.721067][T15758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.833953][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.872426][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.927087][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.971702][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.023708][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.063205][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.294486][T16014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.385490][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.603894][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.629153][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.646720][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.666021][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.722567][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.810279][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.882709][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.923567][T15758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.079497][T15758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.140661][T15758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.159987][T15758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.177846][T15758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.240446][T16029] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2318'. [ 1479.804913][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1480.303692][T16049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1485.227875][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.783261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.956137][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.602961][ T9941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.662313][ T9941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.318960][T16101] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2329'. [ 1497.321909][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1497.515714][T15612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1497.538681][T15612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1497.548551][T15612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1497.558639][T15612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1497.567919][T15612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1497.584309][T15612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1497.945057][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1497.969695][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1498.001300][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1498.010763][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1498.018864][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1498.029113][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1498.730402][T15612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1498.751244][T15612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1498.761810][T15612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1498.803781][T15612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.812704][T15612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1498.820252][T15612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1498.870845][T13301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.172860][T13301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.409463][T13301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.555876][T13301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.625241][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1499.667057][ T5239] Bluetooth: hci1: command tx timeout [ 1500.068805][ T5239] Bluetooth: hci3: command tx timeout [ 1500.621690][T13301] bridge_slave_1: left allmulticast mode [ 1500.635744][T13301] bridge_slave_1: left promiscuous mode [ 1500.646142][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.667339][T13301] bridge_slave_0: left allmulticast mode [ 1500.673082][T13301] bridge_slave_0: left promiscuous mode [ 1500.691245][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.737027][ T5278] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1500.875809][ T5239] Bluetooth: hci4: command tx timeout [ 1500.918879][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1500.930739][ T5278] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1500.960878][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.973691][ T5278] usb 2-1: Product: syz [ 1500.978630][ T5278] usb 2-1: Manufacturer: syz [ 1500.983329][ T5278] usb 2-1: SerialNumber: syz [ 1500.998466][ T5278] usb 2-1: config 0 descriptor?? [ 1501.015225][ T5278] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1501.055882][ T5278] usb 2-1: Detected FT232H [ 1501.756377][ T5239] Bluetooth: hci1: command tx timeout [ 1502.147096][ T5239] Bluetooth: hci3: command tx timeout [ 1502.259048][T13301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.272294][T13301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.288161][T13301] bond0 (unregistering): Released all slaves [ 1502.414105][T16102] chnl_net:caif_netlink_parms(): no params data found [ 1502.448827][T16108] chnl_net:caif_netlink_parms(): no params data found [ 1502.947642][ T5239] Bluetooth: hci4: command tx timeout [ 1502.982730][T16112] chnl_net:caif_netlink_parms(): no params data found [ 1503.093447][T13301] hsr_slave_0: left promiscuous mode [ 1503.105219][T13301] hsr_slave_1: left promiscuous mode [ 1503.115448][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.123458][T13301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.132529][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.140271][T13301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.172583][T13301] veth1_macvtap: left promiscuous mode [ 1503.178453][T13301] veth0_macvtap: left promiscuous mode [ 1503.184102][T13301] veth1_vlan: left promiscuous mode [ 1503.192109][T13301] veth0_vlan: left promiscuous mode [ 1503.827679][ T5239] Bluetooth: hci1: command tx timeout [ 1504.211435][T13301] team0 (unregistering): Port device team_slave_1 removed [ 1504.237564][ T5239] Bluetooth: hci3: command tx timeout [ 1504.302009][T13301] team0 (unregistering): Port device team_slave_0 removed [ 1505.035938][ T5239] Bluetooth: hci4: command tx timeout [ 1505.337134][T16102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.344509][T16102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.352193][T16102] bridge_slave_0: entered allmulticast mode [ 1505.361113][T16102] bridge_slave_0: entered promiscuous mode [ 1505.404250][T16102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.415403][T16102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.427461][T16102] bridge_slave_1: entered allmulticast mode [ 1505.436057][T16102] bridge_slave_1: entered promiscuous mode [ 1505.805889][T16102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.835575][T16108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.855571][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.874424][T16108] bridge_slave_0: entered allmulticast mode [ 1505.902338][T16108] bridge_slave_0: entered promiscuous mode [ 1505.910153][ T5239] Bluetooth: hci1: command tx timeout [ 1505.937809][T16167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1505.960199][T16108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.986016][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.994262][T16108] bridge_slave_1: entered allmulticast mode [ 1506.001900][T16108] bridge_slave_1: entered promiscuous mode [ 1506.067951][ T5278] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 1506.080134][ T5278] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 1506.107221][ T5278] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 1506.120690][ T5278] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1506.199474][T16102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.309835][ T5239] Bluetooth: hci3: command tx timeout [ 1507.107314][T15612] Bluetooth: hci4: command tx timeout [ 1507.390496][T16102] team0: Port device team_slave_0 added [ 1507.462234][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.483677][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.517808][T16112] bridge_slave_0: entered allmulticast mode [ 1507.548596][T16112] bridge_slave_0: entered promiscuous mode [ 1507.560775][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.588672][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.596000][T16112] bridge_slave_1: entered allmulticast mode [ 1507.610764][T16112] bridge_slave_1: entered promiscuous mode [ 1507.620121][T16102] team0: Port device team_slave_1 added [ 1507.665790][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.704705][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.801585][T16112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.948605][T16102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.955595][T16102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.018688][T16102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.037562][ T5315] usb 2-1: USB disconnect, device number 21 [ 1508.053333][ T5315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1508.061527][T16112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.074730][ T5315] ftdi_sio 2-1:0.0: device disconnected [ 1508.329693][T13301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.413546][T16108] team0: Port device team_slave_0 added [ 1508.502723][T16108] team0: Port device team_slave_1 added [ 1508.528386][T16102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.541970][T16102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.590368][T16102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.015736][T13301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.248071][T16112] team0: Port device team_slave_0 added [ 1510.269105][T16112] team0: Port device team_slave_1 added [ 1510.370390][T13301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.396125][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.418838][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.445864][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.654586][T13301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.689402][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.747383][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.870341][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.977601][T16112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.015865][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.064938][T16112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.190550][T16220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.096326][T16112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.137259][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.235585][T16112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.647193][T16102] hsr_slave_0: entered promiscuous mode [ 1512.683759][T16102] hsr_slave_1: entered promiscuous mode [ 1512.693544][T16102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.723931][T16102] Cannot create hsr debugfs directory [ 1512.837477][T16108] hsr_slave_0: entered promiscuous mode [ 1512.857075][T16108] hsr_slave_1: entered promiscuous mode [ 1512.905209][T16108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.941598][T16108] Cannot create hsr debugfs directory [ 1513.403221][T16112] hsr_slave_0: entered promiscuous mode [ 1513.418215][T16112] hsr_slave_1: entered promiscuous mode [ 1513.437993][T16112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.448216][T16112] Cannot create hsr debugfs directory [ 1513.554869][T16234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.876723][T13301] bridge_slave_1: left allmulticast mode [ 1516.891300][T13301] bridge_slave_1: left promiscuous mode [ 1516.913370][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.034120][T13301] bridge_slave_0: left allmulticast mode [ 1517.050895][T13301] bridge_slave_0: left promiscuous mode [ 1517.057737][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.964967][T16249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.496011][T13301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.514728][T13301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1519.525555][T13301] bond0 (unregistering): Released all slaves [ 1520.179403][T16108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.518244][T16269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.084865][T16108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.275688][T13301] hsr_slave_0: left promiscuous mode [ 1522.282891][T13301] hsr_slave_1: left promiscuous mode [ 1522.290707][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.304720][T13301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.330707][T13301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.338378][T13301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.363285][T13301] veth1_macvtap: left promiscuous mode [ 1522.369176][T13301] veth0_macvtap: left promiscuous mode [ 1522.374759][T13301] veth1_vlan: left promiscuous mode [ 1522.380208][T13301] veth0_vlan: left promiscuous mode [ 1522.586979][ T5278] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1522.802703][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1522.815743][ T5278] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1522.830497][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.839445][ T5278] usb 2-1: Product: syz [ 1522.843780][ T5278] usb 2-1: Manufacturer: syz [ 1522.849111][ T5278] usb 2-1: SerialNumber: syz [ 1522.857957][ T5278] usb 2-1: config 0 descriptor?? [ 1522.874872][ T5278] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1522.884824][ T5278] usb 2-1: Detected FT232H [ 1524.087831][T13301] team0 (unregistering): Port device team_slave_1 removed [ 1524.170901][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1524.183331][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1524.210421][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1524.246770][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1524.260704][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1524.261400][T13301] team0 (unregistering): Port device team_slave_0 removed [ 1524.277780][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1525.329769][T16108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.412503][ T29] audit: type=1400 audit(1725799258.764:832): avc: denied { sys_chroot } for pid=16282 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1525.463679][ T29] audit: type=1400 audit(1725799258.764:833): avc: denied { setgid } for pid=16282 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1525.527004][ T29] audit: type=1400 audit(1725799258.794:834): avc: denied { setrlimit } for pid=16282 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1525.604024][T16108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.308445][ T5239] Bluetooth: hci5: command tx timeout [ 1526.444799][ T5278] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1526.477321][ T5278] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1526.518650][ T5278] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1526.564628][ T5278] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1526.606209][ T5278] usb 2-1: USB disconnect, device number 22 [ 1526.646894][ T5278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1526.671107][ T5278] ftdi_sio 2-1:0.0: device disconnected [ 1526.850784][T16108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1527.039762][T16108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1527.065025][T16108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1527.102197][T16108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1527.577156][T16280] chnl_net:caif_netlink_parms(): no params data found [ 1528.184724][T16280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.200554][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.210080][T16280] bridge_slave_0: entered allmulticast mode [ 1528.219377][T16280] bridge_slave_0: entered promiscuous mode [ 1528.229569][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.250718][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.258804][T16280] bridge_slave_1: entered allmulticast mode [ 1528.274347][T16280] bridge_slave_1: entered promiscuous mode [ 1528.490993][ T5239] Bluetooth: hci5: command tx timeout [ 1528.526702][T16280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.286251][T16280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.494560][T16280] team0: Port device team_slave_0 added [ 1529.559514][T16280] team0: Port device team_slave_1 added [ 1529.625859][T16108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.720928][T16280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.729956][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.763405][T16280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.784548][T16280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.812737][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.847053][T16280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.999442][T16108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.154772][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.162033][T13170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.205872][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.213049][T13170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.257381][T16280] hsr_slave_0: entered promiscuous mode [ 1530.278696][T16280] hsr_slave_1: entered promiscuous mode [ 1530.293028][T16280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.322517][T16280] Cannot create hsr debugfs directory [ 1530.342535][T16112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1530.358728][T16112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1530.457870][T16112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1530.483545][T16112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1530.547089][ T5239] Bluetooth: hci5: command tx timeout [ 1530.867803][T16102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1530.885934][T16102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1530.956009][T16108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1530.984563][T16102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1531.005460][T16102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1531.461660][T16280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.405034][T16280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.617506][T16280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.638079][ T5239] Bluetooth: hci5: command tx timeout [ 1532.782315][T16280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.852883][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.993220][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.382871][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.565106][T16102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.592146][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.599447][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.721934][T16280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1533.800751][T16280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1533.861612][T16280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1533.922628][T16102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.969610][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.976910][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.043976][T16108] veth0_vlan: entered promiscuous mode [ 1534.079372][T16280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1534.164970][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.172261][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.294360][T16108] veth1_vlan: entered promiscuous mode [ 1534.332688][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.339889][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.554197][T16112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.735233][T16108] veth0_macvtap: entered promiscuous mode [ 1534.778325][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1534.794279][T16108] veth1_macvtap: entered promiscuous mode [ 1534.892046][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.921170][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.933083][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.959613][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.983881][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.996399][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.006678][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1535.030397][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.050175][ T46] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1535.067065][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.078285][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.086329][ T46] usb 2-1: Product: syz [ 1535.107531][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.120219][ T46] usb 2-1: Manufacturer: syz [ 1535.124878][ T46] usb 2-1: SerialNumber: syz [ 1535.147001][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.168258][ T46] usb 2-1: config 0 descriptor?? [ 1535.175006][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.201367][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.201530][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1535.219285][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.242138][ T46] usb 2-1: Detected FT232H [ 1535.282510][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.322345][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.348956][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.386944][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.434235][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.445842][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.468587][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.493998][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.511246][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.527537][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.537972][T16108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.557236][T16108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.581006][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.717690][T16108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.726474][T16108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.744698][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1535.762823][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1535.779742][ T46] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1535.787437][T16108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.796210][T16108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.810853][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1535.825799][ T46] usb 2-1: USB disconnect, device number 23 [ 1535.858750][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1535.880691][ T46] ftdi_sio 2-1:0.0: device disconnected [ 1536.191600][T16280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.250020][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.395115][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.435746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.469509][T16280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.613746][ T9941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.621055][ T9941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.655643][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.672849][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.695390][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.702812][ T9941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.796758][T16102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1537.785616][T16280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1537.835827][T16412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1537.844184][T16412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1537.960736][T16412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1538.182342][T16412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1538.192294][T16412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1538.278025][T16412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1538.321049][T16102] veth0_vlan: entered promiscuous mode [ 1538.361993][T16112] veth0_vlan: entered promiscuous mode [ 1538.400628][T16412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1538.470735][T16102] veth1_vlan: entered promiscuous mode [ 1538.490092][T16412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1538.510722][T16112] veth1_vlan: entered promiscuous mode [ 1538.613877][T16112] veth0_macvtap: entered promiscuous mode [ 1538.655143][T16412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1538.683289][T16112] veth1_macvtap: entered promiscuous mode [ 1538.727869][T16412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1538.742667][T16102] veth0_macvtap: entered promiscuous mode [ 1538.772553][T16412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1538.816475][T16412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1538.888827][T16412] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1538.921906][T16412] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1539.013371][T16412] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1539.022487][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.058921][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.103903][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.152887][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.167454][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.199256][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.223732][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.254523][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.267757][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.287869][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.356980][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.387827][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.417380][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1539.454506][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1539.650081][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 1539.676738][T16112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.720816][T16102] veth1_macvtap: entered promiscuous mode [ 1540.585165][ T5239] Bluetooth: hci1: command 0x0c1a tx timeout [ 1540.585173][T15612] Bluetooth: hci3: command 0x0c1a tx timeout [ 1540.640154][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.651126][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.662048][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.688399][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.717157][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.936381][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout [ 1540.943219][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.953295][ T5239] Bluetooth: hci5: command 0x0c1a tx timeout [ 1540.960820][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1540.971532][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.999098][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.019298][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.031380][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.872506][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 1541.907327][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.926899][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.990004][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.029174][T16112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.082572][T16280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.112326][T16112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.163557][T16112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.202548][T16112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.209223][T16462] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2357'. [ 1542.228410][T16112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.293273][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.312358][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.323203][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.334331][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.345899][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.361964][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.375124][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.385988][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.398098][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.409380][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.420718][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.431828][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.442572][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.454505][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.464669][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.483287][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.510925][T16102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.629667][ T5239] Bluetooth: hci1: command 0x0c1a tx timeout [ 1542.630646][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.646327][ T5239] Bluetooth: hci3: command 0x0c1a tx timeout [ 1542.686894][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.696753][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.754876][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.783397][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.816877][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.840551][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.886922][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.927417][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.964683][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout [ 1542.993908][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.037330][ T5239] Bluetooth: hci5: command 0x0c1a tx timeout [ 1543.043625][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.074627][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.188104][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.255723][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.293024][T16102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.328054][T16102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.369499][T16102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.480698][T16102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.506974][T16102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.515910][T16102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.546669][T16102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.909146][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 1544.091839][T16280] veth0_vlan: entered promiscuous mode [ 1544.212266][T16280] veth1_vlan: entered promiscuous mode [ 1544.229636][T16487] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2360'. [ 1544.265228][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.317783][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.525804][ T9941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.580492][ T9941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.707704][ T5239] Bluetooth: hci3: command 0x0c1a tx timeout [ 1544.713805][ T5239] Bluetooth: hci1: command 0x0c1a tx timeout [ 1544.758420][T16280] veth0_macvtap: entered promiscuous mode [ 1544.804702][ T6349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.849562][ T6349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.879036][T16280] veth1_macvtap: entered promiscuous mode [ 1544.912615][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1545.036954][T15612] Bluetooth: hci4: command 0x0c1a tx timeout [ 1545.107214][T15612] Bluetooth: hci5: command 0x0c1a tx timeout [ 1545.152331][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.243721][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.292218][T16505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1545.294247][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.366994][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.388439][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.446326][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.491903][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.528727][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.584286][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.638702][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.695017][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.737691][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.766901][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.782404][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.802875][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.831155][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.880164][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.911347][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.944270][T16280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.019389][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.054351][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.185390][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.212765][T16512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.222822][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.240549][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.266908][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.283594][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.336937][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.349014][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.381061][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.393300][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.404051][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.423358][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.434255][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.446633][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.464917][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.506514][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.553474][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.626014][T16280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.640742][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.706074][T16280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.863198][T16280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.920352][T16280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.038971][T16280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.096401][T16280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.135663][T16280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.566761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.604311][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.810475][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.846719][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.600965][T16533] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2364'. [ 1548.883971][T16540] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2366'. [ 1550.163578][T16558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1557.389169][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1561.100365][T16618] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.2382'. [ 1562.704394][T16628] netlink: 'syz.0.2381': attribute type 4 has an invalid length. [ 1562.709832][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1564.201071][T16644] netlink: 'syz.2.2386': attribute type 4 has an invalid length. [ 1564.535616][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1564.609930][T16652] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2389'. [ 1566.959516][T16657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1567.066234][T16657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1567.128327][T16657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1567.265481][T16657] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1567.839475][T16678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.313397][T16685] netlink: 'syz.0.2395': attribute type 4 has an invalid length. [ 1568.567040][T15612] Bluetooth: hci1: command 0x0c1a tx timeout [ 1569.028382][T15612] Bluetooth: hci3: command 0x0c1a tx timeout [ 1569.227019][T15612] Bluetooth: hci4: command 0x0c1a tx timeout [ 1569.297995][T15612] Bluetooth: hci5: command 0x0c1a tx timeout [ 1570.279515][T16712] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2401'. [ 1571.570983][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1571.573090][T16696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1572.691018][T16730] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1574.328220][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1577.636079][T16742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1577.657227][T16765] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1577.717743][T16742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1577.771577][T16755] netlink: 'syz.2.2410': attribute type 4 has an invalid length. [ 1577.788184][T16742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1577.876185][T16742] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1578.070121][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.517147][T15612] Bluetooth: hci1: command 0x0c1a tx timeout [ 1579.746920][T15612] Bluetooth: hci3: command 0x0c1a tx timeout [ 1579.827418][T15612] Bluetooth: hci4: command 0x0c1a tx timeout [ 1579.912082][T15612] Bluetooth: hci5: command 0x0c1a tx timeout [ 1583.251770][T13070] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1583.505177][T13070] usb 4-1: Using ep0 maxpacket: 16 [ 1583.551097][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1583.589358][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1583.661369][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1583.717131][T13070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1583.774568][T13070] usb 4-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=54.42 [ 1583.859632][T13070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.883246][T13070] usb 4-1: config 0 descriptor?? [ 1583.891875][T13070] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1585.754932][T13059] usb 4-1: USB disconnect, device number 31 [ 1588.681740][T16834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.932563][T16823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.371685][T16844] netlink: 'syz.4.2427': attribute type 4 has an invalid length. [ 1589.625572][T16845] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 1589.900307][T16843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1589.978635][T16843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1590.061239][T16843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1590.125325][T16843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1591.546982][T15612] Bluetooth: hci1: command 0x0c1a tx timeout [ 1591.987054][T15612] Bluetooth: hci3: command 0x0c1a tx timeout [ 1592.067715][T15612] Bluetooth: hci4: command 0x0c1a tx timeout [ 1592.147256][ T5239] Bluetooth: hci5: command 0x0c1a tx timeout [ 1592.292131][T16865] netlink: 'syz.1.2433': attribute type 4 has an invalid length. [ 1593.529465][T13059] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1593.553888][T16868] netlink: 'syz.2.2435': attribute type 4 has an invalid length. [ 1593.897013][T13059] usb 4-1: Using ep0 maxpacket: 16 [ 1594.994391][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1595.015121][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1595.053330][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1595.158709][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1595.187136][T13059] usb 4-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=54.42 [ 1595.225972][T13059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.270137][T13059] usb 4-1: config 0 descriptor?? [ 1595.298211][T13059] usb 4-1: can't set config #0, error -71 [ 1595.347207][T13059] usb 4-1: USB disconnect, device number 32 [ 1595.575147][T16890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.946924][T13059] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1596.836898][T13059] usb 4-1: Using ep0 maxpacket: 16 [ 1596.852756][T13059] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1597.095718][T13059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.139076][T13059] usb 4-1: Product: syz [ 1597.163091][T13059] usb 4-1: Manufacturer: syz [ 1597.188621][T13059] usb 4-1: SerialNumber: syz [ 1597.216576][T13059] usb 4-1: config 0 descriptor?? [ 1597.259124][T13059] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1597.289762][T13059] usb 4-1: Detected FT232H [ 1599.062302][T16903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1599.106229][T16903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1599.126206][T16903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1599.205218][T16903] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1599.213338][ T37] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000084: 0000 [#1] PREEMPT SMP KASAN PTI [ 1599.225998][ T37] KASAN: null-ptr-deref in range [0x0000000000000420-0x0000000000000427] [ 1599.234449][ T37] CPU: 1 UID: 0 PID: 37 Comm: khugepaged Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 1599.244975][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1599.255046][ T37] RIP: 0010:khugepaged+0xad9/0x1600 [ 1599.260253][ T37] Code: 00 00 41 bc 01 00 00 00 45 31 ff e9 9a fd ff ff e8 4c 23 9b ff 49 8d 7f 20 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 a3 09 00 00 49 8d 7f 70 49 8b 6f 20 48 b9 00 00 [ 1599.279863][ T37] RSP: 0018:ffffc90000ad7ce8 EFLAGS: 00010207 [ 1599.285929][ T37] RAX: 0000000000000084 RBX: 0000000000000000 RCX: dffffc0000000000 [ 1599.293909][ T37] RDX: ffff888021290000 RSI: ffffffff81f0ad04 RDI: 0000000000000426 [ 1599.301876][ T37] RBP: 00000000180400fb R08: 0000000000000001 R09: 0000000000000000 [ 1599.309847][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 1599.317814][ T37] R13: 0000000000000200 R14: 1ffff9200015afaf R15: 0000000000000406 [ 1599.325779][ T37] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1599.334706][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1599.341285][ T37] CR2: 0000000020019000 CR3: 000000006d502000 CR4: 00000000003506f0 [ 1599.349255][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1599.357306][ T37] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1599.365269][ T37] Call Trace: [ 1599.368541][ T37] [ 1599.371466][ T37] ? show_regs+0x8c/0xa0 [ 1599.375731][ T37] ? die_addr+0x4f/0xd0 [ 1599.379888][ T37] ? exc_general_protection+0x155/0x230 [ 1599.385435][ T37] ? asm_exc_general_protection+0x26/0x30 [ 1599.391152][ T37] ? khugepaged+0xac4/0x1600 [ 1599.395737][ T37] ? khugepaged+0xad9/0x1600 [ 1599.400349][ T37] ? khugepaged+0xac4/0x1600 [ 1599.404990][ T37] ? __pfx_khugepaged+0x10/0x10 [ 1599.409857][ T37] ? __kthread_parkme+0xb7/0x220 [ 1599.414799][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1599.420873][ T37] ? __kthread_parkme+0x148/0x220 [ 1599.425896][ T37] ? __pfx_khugepaged+0x10/0x10 [ 1599.430760][ T37] kthread+0x2c1/0x3a0 [ 1599.434827][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1599.440028][ T37] ? __pfx_kthread+0x10/0x10 [ 1599.444615][ T37] ret_from_fork+0x45/0x80 [ 1599.449034][ T37] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1599.453620][ T37] ret_from_fork_asm+0x1a/0x30 [ 1599.458393][ T37] [ 1599.461403][ T37] Modules linked in: [ 1599.481588][ T37] ---[ end trace 0000000000000000 ]--- [ 1599.486879][ T5239] Bluetooth: hci1: command 0x0c1a tx timeout [ 1599.559542][ T29] audit: type=1400 audit(1725799332.824:835): avc: denied { write } for pid=5213 comm="syz-executor" path="pipe:[3666]" dev="pipefs" ino=3666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1599.846981][ T5278] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1599.871707][ T37] RIP: 0010:khugepaged+0xad9/0x1600 [ 1599.883501][ T37] Code: 00 00 41 bc 01 00 00 00 45 31 ff e9 9a fd ff ff e8 4c 23 9b ff 49 8d 7f 20 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 a3 09 00 00 49 8d 7f 70 49 8b 6f 20 48 b9 00 00 [ 1599.904020][ T37] RSP: 0018:ffffc90000ad7ce8 EFLAGS: 00010207 [ 1599.910587][ T37] RAX: 0000000000000084 RBX: 0000000000000000 RCX: dffffc0000000000 [ 1599.921502][ T37] RDX: ffff888021290000 RSI: ffffffff81f0ad04 RDI: 0000000000000426 [ 1599.929736][ T37] RBP: 00000000180400fb R08: 0000000000000001 R09: 0000000000000000 [ 1599.937927][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 1599.946034][ T37] R13: 0000000000000200 R14: 1ffff9200015afaf R15: 0000000000000406 [ 1599.954258][ T37] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1599.963420][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1599.970227][ T37] CR2: 000000002001d000 CR3: 000000006eac0000 CR4: 00000000003506f0 [ 1599.978419][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1599.986522][ T37] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1600.338872][ T37] Kernel panic - not syncing: Fatal exception [ 1600.345266][ T37] Kernel Offset: disabled [ 1600.349605][ T37] Rebooting in 86400 seconds..