[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2020/12/16 18:38:13 fuzzer started 2020/12/16 18:38:13 dialing manager at 10.128.0.26:35629 2020/12/16 18:38:14 syscalls: 3280 2020/12/16 18:38:14 code coverage: enabled 2020/12/16 18:38:14 comparison tracing: enabled 2020/12/16 18:38:14 extra coverage: enabled 2020/12/16 18:38:14 setuid sandbox: enabled 2020/12/16 18:38:14 namespace sandbox: enabled 2020/12/16 18:38:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/16 18:38:14 fault injection: enabled 2020/12/16 18:38:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/16 18:38:14 net packet injection: enabled 2020/12/16 18:38:14 net device setup: enabled 2020/12/16 18:38:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/16 18:38:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/16 18:38:14 USB emulation: enabled 2020/12/16 18:38:14 hci packet injection: enabled 2020/12/16 18:38:14 wifi device emulation: enabled 18:39:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) exit(0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') socket$isdn_base(0x22, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0xb, @pix_mp={0x40, 0x3, 0x20323159, 0x1, 0xb, [{0x216fc2a1, 0x1ff}, {0x80000000, 0x3}, {0x100, 0x3f}, {0x10000, 0x4e6}, {0x8000, 0x1}, {0x0, 0x1}, {0x1f, 0x4}, {0x10001, 0x9}], 0xfc, 0xc2, 0x0, 0x1, 0x5}}) 18:39:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 18:39:40 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x0) r2 = dup3(r0, r0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x3, 0x9, 0x81, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10000, 0xffff, 0x7fffffff, 0x3, 0x1000, 0x0, 0x7}, r1, 0x4, r0, 0x1) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:39:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)='i', 0x1}], 0x1}}, {{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x2400c0ed) 18:39:40 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) syzkaller login: [ 159.011640][ T8520] IPVS: ftp: loaded support on port[0] = 21 18:39:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x40046305, 0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 159.207938][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 159.251217][ T8623] IPVS: ftp: loaded support on port[0] = 21 [ 159.549489][ T8674] IPVS: ftp: loaded support on port[0] = 21 [ 159.669358][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.681776][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.691921][ T8520] device bridge_slave_0 entered promiscuous mode [ 159.719174][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.727370][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.738480][ T8520] device bridge_slave_1 entered promiscuous mode [ 159.747777][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 159.792740][ T8766] IPVS: ftp: loaded support on port[0] = 21 [ 159.885098][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.948834][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.033917][ T8827] IPVS: ftp: loaded support on port[0] = 21 [ 160.117584][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.125641][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.135535][ T8623] device bridge_slave_0 entered promiscuous mode [ 160.149397][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.156656][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.165215][ T8623] device bridge_slave_1 entered promiscuous mode [ 160.177141][ T8520] team0: Port device team_slave_0 added [ 160.208925][ T8520] team0: Port device team_slave_1 added [ 160.308161][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.315950][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.345386][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.360442][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.380087][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 160.393041][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.400065][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.427180][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.440896][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.592005][ T8520] device hsr_slave_0 entered promiscuous mode [ 160.606689][ T8520] device hsr_slave_1 entered promiscuous mode [ 160.628531][ T8623] team0: Port device team_slave_0 added [ 160.661026][ T8623] team0: Port device team_slave_1 added [ 160.678474][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 160.749629][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.772558][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.785956][ T9125] IPVS: ftp: loaded support on port[0] = 21 [ 160.847758][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.908954][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.923495][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 160.930077][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.939085][ T8674] device bridge_slave_0 entered promiscuous mode [ 160.947892][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.954967][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.981837][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.046508][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.070483][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.079388][ T8674] device bridge_slave_1 entered promiscuous mode [ 161.187717][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.197374][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 161.221435][ T8623] device hsr_slave_0 entered promiscuous mode [ 161.228995][ T8623] device hsr_slave_1 entered promiscuous mode [ 161.237701][ T8623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.245953][ T3008] Bluetooth: hci1: command 0x0409 tx timeout [ 161.247224][ T8623] Cannot create hsr debugfs directory [ 161.266686][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.436995][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.448934][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.459420][ T8766] device bridge_slave_0 entered promiscuous mode [ 161.471716][ T8674] team0: Port device team_slave_0 added [ 161.483059][ T3008] Bluetooth: hci2: command 0x0409 tx timeout [ 161.519004][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.529347][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.539489][ T8766] device bridge_slave_1 entered promiscuous mode [ 161.573134][ T8674] team0: Port device team_slave_1 added [ 161.581246][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.602058][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.690590][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.698802][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.708603][ T8827] device bridge_slave_0 entered promiscuous mode [ 161.722734][ T3005] Bluetooth: hci3: command 0x0409 tx timeout [ 161.746323][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.754337][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.780531][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.829053][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.837376][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.846650][ T8827] device bridge_slave_1 entered promiscuous mode [ 161.865192][ T8766] team0: Port device team_slave_0 added [ 161.871676][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.879017][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.906374][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.939451][ T8766] team0: Port device team_slave_1 added [ 161.963373][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 161.978698][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.010281][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.028692][ T8520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.041359][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 162.074244][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.081318][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.110767][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.132571][ T8520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.176876][ T8520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.209947][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.218496][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.245895][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.268015][ T8520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.292328][ T8674] device hsr_slave_0 entered promiscuous mode [ 162.302115][ T8674] device hsr_slave_1 entered promiscuous mode [ 162.309636][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.319027][ T8674] Cannot create hsr debugfs directory [ 162.355250][ T8827] team0: Port device team_slave_0 added [ 162.367462][ T8766] device hsr_slave_0 entered promiscuous mode [ 162.375609][ T8766] device hsr_slave_1 entered promiscuous mode [ 162.384767][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.392362][ T8766] Cannot create hsr debugfs directory [ 162.448000][ T8827] team0: Port device team_slave_1 added [ 162.569569][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.579876][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.607546][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.620357][ T8623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.663161][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.670170][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.698744][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.710795][ T8623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.726888][ T8623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.750125][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.757701][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.766665][ T9125] device bridge_slave_0 entered promiscuous mode [ 162.772950][ T3005] Bluetooth: hci5: command 0x0409 tx timeout [ 162.776300][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.787060][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.796154][ T9125] device bridge_slave_1 entered promiscuous mode [ 162.818503][ T8623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.908071][ T8827] device hsr_slave_0 entered promiscuous mode [ 162.916380][ T8827] device hsr_slave_1 entered promiscuous mode [ 162.925347][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.933294][ T8827] Cannot create hsr debugfs directory [ 162.961267][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.003051][ T3005] Bluetooth: hci0: command 0x041b tx timeout [ 163.010830][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.106947][ T9125] team0: Port device team_slave_0 added [ 163.150763][ T9125] team0: Port device team_slave_1 added [ 163.230187][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.245173][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.252271][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.280149][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.308598][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.316748][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.323297][ T3008] Bluetooth: hci1: command 0x041b tx timeout [ 163.345633][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.420450][ T8674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.441159][ T8674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.459942][ T8674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.514573][ T8674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.542316][ T9125] device hsr_slave_0 entered promiscuous mode [ 163.552253][ T9125] device hsr_slave_1 entered promiscuous mode [ 163.559210][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.563345][ T9734] Bluetooth: hci2: command 0x041b tx timeout [ 163.579351][ T9125] Cannot create hsr debugfs directory [ 163.585779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.597385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.610244][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.673108][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.681978][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.705527][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.713057][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.725116][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.732622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.777624][ T8766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.803043][ T9764] Bluetooth: hci3: command 0x041b tx timeout [ 163.809976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.819856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.829093][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.836255][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.847698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.856740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.873862][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.882821][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.905873][ T8766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.916552][ T8766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.926970][ T8766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.976097][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.987953][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.998885][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.008457][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.018117][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.043295][ T3008] Bluetooth: hci4: command 0x041b tx timeout [ 164.065761][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.084858][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.097345][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.109947][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.122334][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.166665][ T8520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.179392][ T8827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.205456][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.220697][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.230963][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.238159][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.250729][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.271247][ T8827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.313344][ T8827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.335130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.349061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.358474][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.365654][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.391227][ T8827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.431010][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.445958][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.455908][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.464315][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.471864][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.508725][ T9125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.541911][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.551116][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.560914][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.570062][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.579538][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.593663][ T9125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.604185][ T9125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.615334][ T9125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.668870][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.681420][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.698701][ T8623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.711447][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.737398][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.759952][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.771069][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.832071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.841885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.852744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.861478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.870028][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 164.896320][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.916254][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.928759][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.949582][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.965526][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.979337][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.992938][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.020731][ T8520] device veth0_vlan entered promiscuous mode [ 165.029761][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.039212][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.048532][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.057942][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.067023][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.074182][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.084856][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.093503][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 165.127566][ T8520] device veth1_vlan entered promiscuous mode [ 165.140274][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.150674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.169322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.178613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.187535][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.194734][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.202647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.213951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.221691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.264889][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.275630][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.284740][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.295044][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.304246][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.312898][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.322815][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.329964][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.369366][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.389722][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.400193][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.404027][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 165.412017][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.424922][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.431991][ T9544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.440257][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.449850][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.459781][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.494961][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.523892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.532716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.542275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.552740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.562108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.571137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.581493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.590730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.599855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.608962][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.616138][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.624212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.632735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.644458][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.652549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.653349][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 165.660789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.687485][ T8623] device veth0_vlan entered promiscuous mode [ 165.713891][ T8520] device veth0_macvtap entered promiscuous mode [ 165.729103][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.744051][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.752393][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.762703][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.772992][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.781858][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.791092][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.800313][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.809968][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.819393][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.826621][ T9544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.837576][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.850489][ T8623] device veth1_vlan entered promiscuous mode [ 165.865458][ T8520] device veth1_macvtap entered promiscuous mode [ 165.890573][ T3008] Bluetooth: hci3: command 0x040f tx timeout [ 165.957677][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.968752][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.994517][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.013961][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.022960][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.035502][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.045063][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.055594][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.064702][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.073199][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.086123][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.096379][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.121296][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.123808][ T3008] Bluetooth: hci4: command 0x040f tx timeout [ 166.151085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.164661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.176326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.185780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.197852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.206148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.214258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.222829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.235901][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.250120][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.260513][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.278928][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.293091][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.313589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.322444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.332219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.341592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.351048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.360136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.369388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.378644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.400691][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.411466][ T8623] device veth0_macvtap entered promiscuous mode [ 166.422100][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.454689][ T8520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.464703][ T8520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.477750][ T8520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.487478][ T8520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.510938][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.520442][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.531740][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.541056][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.548229][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.556446][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.566197][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.575381][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.582468][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.592361][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.715987][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.734806][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.742390][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.775038][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.814285][ T8623] device veth1_macvtap entered promiscuous mode [ 166.830174][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.888737][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.899785][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.910865][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.934126][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.941722][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.956043][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.967616][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.980601][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.000982][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.004861][ T3008] Bluetooth: hci5: command 0x040f tx timeout [ 167.056652][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.066066][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.075934][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.086344][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.095629][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.131305][ T8674] device veth0_vlan entered promiscuous mode [ 167.142619][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.161051][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.164088][ T9811] Bluetooth: hci0: command 0x0419 tx timeout [ 167.175826][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.203629][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.212229][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.227128][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.238876][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.252792][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.262594][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.279158][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.298729][ T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.333539][ T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.340997][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.349441][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.358592][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.367582][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.377501][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.391794][ T8674] device veth1_vlan entered promiscuous mode [ 167.405370][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.417110][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.430790][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.468068][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.484651][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.500144][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.509782][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.519067][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.546475][ T8623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.555866][ T3008] Bluetooth: hci1: command 0x0419 tx timeout [ 167.559646][ T8623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.578888][ T8623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.588190][ T8623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.629678][ T8827] device veth0_vlan entered promiscuous mode [ 167.641897][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.653853][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.661943][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.670475][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.679453][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.691730][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.700357][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.714160][ T8766] device veth0_vlan entered promiscuous mode [ 167.724572][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 167.741715][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.752125][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.760809][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.791013][ T8766] device veth1_vlan entered promiscuous mode [ 167.801032][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.812312][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.820281][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.834870][ T8827] device veth1_vlan entered promiscuous mode [ 167.861883][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.871031][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.929517][ T8674] device veth0_macvtap entered promiscuous mode [ 167.941439][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.951735][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.962712][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.984460][ T9811] Bluetooth: hci3: command 0x0419 tx timeout [ 168.010558][ T8674] device veth1_macvtap entered promiscuous mode [ 168.173152][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.189659][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.204029][ T9764] Bluetooth: hci4: command 0x0419 tx timeout [ 168.209741][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.236019][ T9125] device veth0_vlan entered promiscuous mode [ 168.254810][ T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.268340][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.280238][ T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.300125][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.323947][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.346840][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.359520][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.375560][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.383639][ C0] hrtimer: interrupt took 64005 ns [ 168.388809][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.402965][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.420606][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.435761][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.454979][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.469477][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.481533][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.493535][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.513452][ T9125] device veth1_vlan entered promiscuous mode [ 168.533849][ T8766] device veth0_macvtap entered promiscuous mode [ 168.545103][ T8827] device veth0_macvtap entered promiscuous mode [ 168.593127][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.607735][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.617913][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.628532][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.641220][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.672084][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.687850][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.699773][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.711116][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.722624][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.738029][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.750579][ T8674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.760160][ T8674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.770122][ T8674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.779397][ T8674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.795060][ T8766] device veth1_macvtap entered promiscuous mode [ 168.805616][ T8827] device veth1_macvtap entered promiscuous mode [ 168.817555][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.829337][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.863941][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.886575][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.897356][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.908863][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.922393][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.932526][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.943410][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.957203][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 18:39:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) exit(0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') socket$isdn_base(0x22, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0xb, @pix_mp={0x40, 0x3, 0x20323159, 0x1, 0xb, [{0x216fc2a1, 0x1ff}, {0x80000000, 0x3}, {0x100, 0x3f}, {0x10000, 0x4e6}, {0x8000, 0x1}, {0x0, 0x1}, {0x1f, 0x4}, {0x10001, 0x9}], 0xfc, 0xc2, 0x0, 0x1, 0x5}}) [ 169.009907][ T9125] device veth0_macvtap entered promiscuous mode [ 169.056885][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.069541][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.081315][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.092576][ T3008] Bluetooth: hci5: command 0x0419 tx timeout [ 169.102867][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.112873][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.124457][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.134636][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.146193][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.168641][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.187486][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.207390][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.254311][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.278591][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.297716][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.315158][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.346780][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.373874][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.404807][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.453907][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.480011][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.501550][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.526702][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.558801][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.577061][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.587176][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.598374][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.608637][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.621027][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.631379][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.644642][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:39:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) exit(0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') socket$isdn_base(0x22, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0xb, @pix_mp={0x40, 0x3, 0x20323159, 0x1, 0xb, [{0x216fc2a1, 0x1ff}, {0x80000000, 0x3}, {0x100, 0x3f}, {0x10000, 0x4e6}, {0x8000, 0x1}, {0x0, 0x1}, {0x1f, 0x4}, {0x10001, 0x9}], 0xfc, 0xc2, 0x0, 0x1, 0x5}}) [ 169.657359][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.672180][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.687049][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.714863][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.738678][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.757287][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.782032][ T9125] device veth1_macvtap entered promiscuous mode [ 169.809146][ T8766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 18:39:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 169.838558][ T8766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.877013][ T8766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.922833][ T8766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.966682][ T8827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.978812][ T8827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.995877][ T8827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.012929][ T8827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 18:39:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 170.263582][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.276161][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.288805][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.301000][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.397309][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.422651][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.437689][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.449193][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.461581][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.473679][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.487397][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.516485][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.546751][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.575685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.593084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.622223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.640731][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.666781][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.687001][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 18:39:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) exit(0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') socket$isdn_base(0x22, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0xb, @pix_mp={0x40, 0x3, 0x20323159, 0x1, 0xb, [{0x216fc2a1, 0x1ff}, {0x80000000, 0x3}, {0x100, 0x3f}, {0x10000, 0x4e6}, {0x8000, 0x1}, {0x0, 0x1}, {0x1f, 0x4}, {0x10001, 0x9}], 0xfc, 0xc2, 0x0, 0x1, 0x5}}) [ 170.715474][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.726313][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.740693][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.760354][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.772577][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.794311][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.814300][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.856245][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.912382][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.935485][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:39:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 170.991958][ T9125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.027901][ T9125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.054732][ T9125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.063513][ T9125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.098546][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.120009][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.128738][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.145437][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.194427][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.211450][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.323109][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:39:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x0, "fbc3628ee5510cf0cf4f51cc9280366940bfdcdc3de9c480be599423fa12375c"}) [ 171.370860][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.548419][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.557000][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.602315][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.726547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.735419][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.743509][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.833760][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:39:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x0, "fbc3628ee5510cf0cf4f51cc9280366940bfdcdc3de9c480be599423fa12375c"}) [ 171.879333][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.931795][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.252796][ T9978] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 172.483213][ T9967] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.495644][ T9967] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.505018][ T9967] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.514360][ T9967] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.556108][ T9967] device vxlan0 entered promiscuous mode [ 172.666359][ T9967] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.675412][ T9967] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.685422][ T9967] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.695038][ T9967] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.214029][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:39:55 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x0) r2 = dup3(r0, r0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x3, 0x9, 0x81, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10000, 0xffff, 0x7fffffff, 0x3, 0x1000, 0x0, 0x7}, r1, 0x4, r0, 0x1) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:39:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x0, "fbc3628ee5510cf0cf4f51cc9280366940bfdcdc3de9c480be599423fa12375c"}) [ 173.277673][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.336336][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.391622][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:39:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)='i', 0x1}], 0x1}}, {{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x2400c0ed) 18:39:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x40046305, 0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:39:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) 18:39:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x0, "fbc3628ee5510cf0cf4f51cc9280366940bfdcdc3de9c480be599423fa12375c"}) 18:39:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)='i', 0x1}], 0x1}}, {{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x2400c0ed) [ 174.289485][T10004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.298495][T10004] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.307380][T10004] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.316805][T10004] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.465622][T10004] device vxlan0 entered promiscuous mode [ 174.489287][T10004] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.498485][T10004] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.507497][T10004] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.516495][T10004] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 18:39:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x40046305, 0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:39:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) 18:39:56 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) 18:39:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)='i', 0x1}], 0x1}}, {{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x2400c0ed) 18:39:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) dup3(r1, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0xe1, 0x0, 0x0, 0x0, 0x4b564d03]}) dup2(r4, r5) dup(r0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="5cfc1d98ce3744b991a20e12549f59e0109d03740e673b3fcd7a64ea889374a2ffb54362e82a", 0x26) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1601000088b70f08070a78003ea7000000010902240001000000000904000002b742a30009058f03002100000009050d03"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 174.916257][T10033] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:39:57 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x0) r2 = dup3(r0, r0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x3, 0x9, 0x81, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10000, 0xffff, 0x7fffffff, 0x3, 0x1000, 0x0, 0x7}, r1, 0x4, r0, 0x1) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:39:57 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) 18:39:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x40046305, 0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:39:57 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) 18:39:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000000000104500001400000000002f907800000000ac"]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}) [ 175.546586][T10004] syz-executor.2 (10004) used greatest stack depth: 22632 bytes left 18:39:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) lseek(r0, 0x0, 0x3) 18:39:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 18:39:57 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) fchmod(0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) capget(&(0x7f0000001180)={0x19980330, r0}, &(0x7f00000011c0)={0x5, 0x0, 0x3, 0xba, 0x23a}) [ 175.965209][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd 18:39:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = getpid() read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/80, 0x50) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6}) r2 = syz_usbip_server_init(0x1) sendfile(r2, r0, 0x0, 0x200000006) 18:39:58 executing program 1: r0 = socket(0x18, 0x0, 0x0) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) [ 176.265852][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 176.385391][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.449940][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 176.523589][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 176.560163][T10059] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.569941][T10059] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.579819][T10059] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.589095][T10059] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.605789][ T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=0078, bcdDevice=a7.3e [ 176.620422][T10059] device vxlan0 entered promiscuous mode [ 176.642470][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.697651][ T7] usb 1-1: config 0 descriptor?? [ 176.738663][T10081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 176.745533][T10081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.757993][T10059] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.769367][T10059] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.778352][T10059] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.787338][T10059] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 18:39:58 executing program 1: r0 = socket(0x18, 0x0, 0x0) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) [ 177.019798][ T7] adutux 1-1:0.0: ADU120 now attached to /dev/usb/adutux0 [ 177.165416][ T9809] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 177.210234][T10033] udc-core: couldn't find an available UDC or it's busy [ 177.225448][T10033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.264648][T10086] vhci_hcd: connection reset by peer [ 177.274020][ T8] vhci_hcd: stop threads [ 177.280180][ T8] vhci_hcd: release socket [ 177.287240][ T8] vhci_hcd: disconnect device [ 177.290937][ T9832] usb 1-1: USB disconnect, device number 2 [ 177.919829][T10081] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(4) [ 177.926427][T10081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.014968][T10123] vhci_hcd: connection closed [ 178.015873][ T964] ================================================================== [ 178.028901][ T964] BUG: KASAN: null-ptr-deref in kthread_stop+0x90/0x760 [ 178.035865][ T964] Write of size 4 at addr 0000000000000024 by task kworker/u4:5/964 [ 178.043855][ T964] [ 178.046210][ T964] CPU: 0 PID: 964 Comm: kworker/u4:5 Not tainted 5.10.0-syzkaller #0 [ 178.054324][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.064421][ T964] Workqueue: usbip_event event_handler [ 178.069908][ T964] Call Trace: [ 178.073238][ T964] dump_stack+0x107/0x163 [ 178.077652][ T964] ? kthread_stop+0x90/0x760 [ 178.082273][ T964] ? kthread_stop+0x90/0x760 [ 178.086884][ T964] kasan_report.cold+0x5/0x37 [ 178.091594][ T964] ? kthread_stop+0x90/0x760 [ 178.096220][ T964] check_memory_region+0x13d/0x180 [ 178.101371][ T964] kthread_stop+0x90/0x760 [ 178.105811][ T964] vhci_shutdown_connection+0x17f/0x340 [ 178.111388][ T964] ? event_handler+0x14c/0x4f0 [ 178.116183][ T964] ? kfree+0xdb/0x3c0 [ 178.120202][ T964] event_handler+0x1f0/0x4f0 [ 178.124827][ T964] process_one_work+0x98d/0x1630 [ 178.129806][ T964] ? pwq_dec_nr_in_flight+0x320/0x320 [ 178.135215][ T964] ? rwlock_bug.part.0+0x90/0x90 [ 178.140185][ T964] ? _raw_spin_lock_irq+0x41/0x50 [ 178.145257][ T964] worker_thread+0x64c/0x1120 [ 178.149976][ T964] ? __kthread_parkme+0x13f/0x1e0 [ 178.155029][ T964] ? process_one_work+0x1630/0x1630 [ 178.160260][ T964] kthread+0x3b1/0x4a0 [ 178.164361][ T964] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 178.170290][ T964] ret_from_fork+0x1f/0x30 [ 178.174744][ T964] ================================================================== [ 178.182824][ T964] Disabling lock debugging due to kernel taint [ 178.225459][ T964] Kernel panic - not syncing: panic_on_warn set ... [ 178.232089][ T964] CPU: 0 PID: 964 Comm: kworker/u4:5 Tainted: G B 5.10.0-syzkaller #0 [ 178.241547][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.251633][ T964] Workqueue: usbip_event event_handler [ 178.257110][ T964] Call Trace: [ 178.260416][ T964] dump_stack+0x107/0x163 [ 178.264766][ T964] panic+0x343/0x77f [ 178.268682][ T964] ? __warn_printk+0xf3/0xf3 [ 178.273284][ T964] ? preempt_schedule_common+0x59/0xc0 [ 178.278763][ T964] ? kthread_stop+0x90/0x760 [ 178.283369][ T964] ? preempt_schedule_thunk+0x16/0x18 [ 178.288751][ T964] ? trace_hardirqs_on+0x38/0x1c0 [ 178.293790][ T964] ? trace_hardirqs_on+0x51/0x1c0 [ 178.298854][ T964] ? kthread_stop+0x90/0x760 [ 178.303451][ T964] ? kthread_stop+0x90/0x760 [ 178.308051][ T964] end_report+0x58/0x5e [ 178.312213][ T964] kasan_report.cold+0xd/0x37 [ 178.316927][ T964] ? kthread_stop+0x90/0x760 [ 178.321525][ T964] check_memory_region+0x13d/0x180 [ 178.326681][ T964] kthread_stop+0x90/0x760 [ 178.331080][ T964] vhci_shutdown_connection+0x17f/0x340 [ 178.336661][ T964] ? event_handler+0x14c/0x4f0 [ 178.341449][ T964] ? kfree+0xdb/0x3c0 [ 178.345433][ T964] event_handler+0x1f0/0x4f0 [ 178.350021][ T964] process_one_work+0x98d/0x1630 [ 178.354950][ T964] ? pwq_dec_nr_in_flight+0x320/0x320 [ 178.360309][ T964] ? rwlock_bug.part.0+0x90/0x90 [ 178.365231][ T964] ? _raw_spin_lock_irq+0x41/0x50 [ 178.370242][ T964] worker_thread+0x64c/0x1120 [ 178.374933][ T964] ? __kthread_parkme+0x13f/0x1e0 [ 178.379952][ T964] ? process_one_work+0x1630/0x1630 [ 178.385134][ T964] kthread+0x3b1/0x4a0 [ 178.389188][ T964] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 178.395083][ T964] ret_from_fork+0x1f/0x30 [ 178.399978][ T964] Kernel Offset: disabled [ 178.404321][ T964] Rebooting in 86400 seconds..