last executing test programs: 1.651835135s ago: executing program 3 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 1.332919553s ago: executing program 3 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x70}}, 0x600c000) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 1.206262854s ago: executing program 1 (id=12): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/143, 0x8f}, {0x0}], 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20082, 0x0) write$vga_arbiter(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0xace, 0x1d}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x7d, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) semget$private(0x0, 0x6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 1.146523819s ago: executing program 3 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000214010000000000000000000500540006000000080001000000000008004400", @ANYRES32, @ANYBLOB="0900020073797a3000"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008010) 1.008352621s ago: executing program 3 (id=14): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast2, 0x42, 0x1}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) 916.06946ms ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 900.469721ms ago: executing program 3 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="030000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 861.642124ms ago: executing program 2 (id=16): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 797.51552ms ago: executing program 4 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 761.525843ms ago: executing program 3 (id=19): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) shmget(0x0, 0xa000, 0x2, &(0x7f0000ff3000/0xa000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff"], 0x40}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) chdir(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 752.594904ms ago: executing program 2 (id=20): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 624.020905ms ago: executing program 2 (id=22): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000214010000000000000000000500540006000000080001000000000008004400", @ANYRES32, @ANYBLOB="0900020073797a3000"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008010) 611.095246ms ago: executing program 0 (id=23): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) 600.806867ms ago: executing program 2 (id=24): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) geteuid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 534.672163ms ago: executing program 4 (id=25): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast2, 0x42, 0x1}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) 482.974467ms ago: executing program 0 (id=26): syz_open_dev$ndb(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) socket(0x15, 0x5, 0x0) 480.052138ms ago: executing program 1 (id=27): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0}) 420.724993ms ago: executing program 4 (id=28): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 327.897431ms ago: executing program 0 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 327.735851ms ago: executing program 1 (id=30): bpf$PROG_LOAD(0x5, 0x0, 0x0) 289.931474ms ago: executing program 1 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 289.247464ms ago: executing program 0 (id=32): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 272.792446ms ago: executing program 2 (id=33): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x7, 0x4, "75429effa66f00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 200.016002ms ago: executing program 0 (id=34): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000214010000000000000000000500540006000000080001000000000008004400", @ANYRES32, @ANYBLOB="0900020073797a3000"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008010) 193.666073ms ago: executing program 1 (id=35): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 181.782404ms ago: executing program 0 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 172.959604ms ago: executing program 2 (id=37): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[], 0x470}}, 0x48000) sendmmsg$unix(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="23ca", 0x2}], 0x1, &(0x7f0000000a80)=ANY=[], 0xb0, 0x8000}}], 0x1, 0x0) 0s ago: executing program 1 (id=38): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x4, {{0xc, 0x4, 0x1, 0x35, 0x30, 0x66, 0x0, 0x1, 0x13, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x7, 0x5d, [@remote]}, @generic={0x7, 0x3, "8a"}, @noop, @lsrr={0x83, 0x7, 0x37, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x79}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1ff, 0x0, 0x5, 0x280, r0, 0x1, '\x00', r1, r2, 0x2, 0x3, 0x4, 0x8, @void, @value, @void, @value}, 0xffffffffffffff5f) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcfffdff0000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) kernel console output (not intermixed with test programs): [ 15.319148][ T3963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.322495][ T3963] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.368579][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.371580][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. syzkaller login: [ 36.476169][ T4281] cgroup: Unknown subsys name 'net' [ 36.782474][ T4281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.139375][ T4281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.184455][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.187180][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.189874][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.192736][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.196341][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.200104][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.203238][ T4297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.210438][ T4297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.212597][ T4297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.215005][ T4297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.219001][ T4297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.221414][ T4297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.264446][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.267040][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.269984][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.272381][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.274227][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.276411][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.297597][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.300017][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.302376][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.304564][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.306563][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.308385][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.310946][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.312882][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.314831][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.324323][ T4306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.330739][ T4306] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.332736][ T4306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.465573][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 38.501053][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 38.544170][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 38.601204][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.602949][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.605139][ T4296] device bridge_slave_0 entered promiscuous mode [ 38.609212][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 38.612470][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.614043][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.616327][ T4296] device bridge_slave_1 entered promiscuous mode [ 38.621970][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.623618][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.625831][ T4292] device bridge_slave_0 entered promiscuous mode [ 38.633555][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.635142][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.638560][ T4292] device bridge_slave_1 entered promiscuous mode [ 38.692751][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.694876][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.696533][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.699424][ T4301] device bridge_slave_0 entered promiscuous mode [ 38.703546][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.705105][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.707289][ T4301] device bridge_slave_1 entered promiscuous mode [ 38.715845][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.725791][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.746442][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.750213][ T4296] team0: Port device team_slave_0 added [ 38.775356][ T4296] team0: Port device team_slave_1 added [ 38.776984][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.778893][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.781640][ T4299] device bridge_slave_0 entered promiscuous mode [ 38.791865][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.795815][ T4292] team0: Port device team_slave_0 added [ 38.799987][ T4292] team0: Port device team_slave_1 added [ 38.806554][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.808324][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.810387][ T4299] device bridge_slave_1 entered promiscuous mode [ 38.819415][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.860857][ T4301] team0: Port device team_slave_0 added [ 38.868217][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.869779][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.875485][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.884899][ T4301] team0: Port device team_slave_1 added [ 38.888076][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.890476][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.891916][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.897270][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.905543][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.907199][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.913468][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.921664][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.924005][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.925469][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.931532][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.935911][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 38.971731][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.973324][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.982635][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.004295][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.005840][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.011959][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.016439][ T4299] team0: Port device team_slave_0 added [ 39.079184][ T4296] device hsr_slave_0 entered promiscuous mode [ 39.117683][ T4296] device hsr_slave_1 entered promiscuous mode [ 39.209096][ T4292] device hsr_slave_0 entered promiscuous mode [ 39.247702][ T4292] device hsr_slave_1 entered promiscuous mode [ 39.307526][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.309435][ T4292] Cannot create hsr debugfs directory [ 39.314254][ T4299] team0: Port device team_slave_1 added [ 39.366399][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.368158][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.370315][ T4303] device bridge_slave_0 entered promiscuous mode [ 39.374969][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.376611][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.379340][ T4303] device bridge_slave_1 entered promiscuous mode [ 39.449151][ T4301] device hsr_slave_0 entered promiscuous mode [ 39.487700][ T4301] device hsr_slave_1 entered promiscuous mode [ 39.527444][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.529141][ T4301] Cannot create hsr debugfs directory [ 39.551296][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.552834][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.558924][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.599348][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.602604][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.604105][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.610168][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.614629][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.655637][ T4303] team0: Port device team_slave_0 added [ 39.670595][ T4303] team0: Port device team_slave_1 added [ 39.739128][ T4299] device hsr_slave_0 entered promiscuous mode [ 39.778005][ T4299] device hsr_slave_1 entered promiscuous mode [ 39.817478][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.819245][ T4299] Cannot create hsr debugfs directory [ 39.848041][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.849732][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.855529][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.861127][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.862749][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.868424][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.949300][ T4303] device hsr_slave_0 entered promiscuous mode [ 39.997743][ T4303] device hsr_slave_1 entered promiscuous mode [ 40.037482][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.039077][ T4303] Cannot create hsr debugfs directory [ 40.041662][ T4296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.091161][ T4296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.129072][ T4296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.187142][ T4296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.258020][ T4293] Bluetooth: hci0: command tx timeout [ 40.258029][ T4306] Bluetooth: hci1: command tx timeout [ 40.299830][ T4292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.337555][ T4307] Bluetooth: hci3: command tx timeout [ 40.338845][ T4307] Bluetooth: hci2: command tx timeout [ 40.359057][ T4292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.414579][ T4292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.417828][ T4293] Bluetooth: hci4: command tx timeout [ 40.459218][ T4292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.561274][ T4301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.590853][ T4301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.649295][ T4301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.679417][ T4301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.720581][ T4299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.759388][ T4299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.799065][ T4299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.861993][ T4299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.921769][ T4303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.971076][ T4303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.015582][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.035147][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.036881][ T4303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.080569][ T4303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.128829][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.145500][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.149459][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.151709][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.154226][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.157356][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.159001][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.164286][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.194435][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.231121][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.233243][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.235303][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.238339][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.240582][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.242015][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.243991][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.246386][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.250115][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.252978][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.255141][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.258976][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.261274][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.263540][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.268534][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.276479][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.289138][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.293255][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.295327][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.301200][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.303382][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.305332][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.309420][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.315033][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.319049][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.321902][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.352038][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.354342][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.356963][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.358725][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.362046][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.364462][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.366535][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.368127][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.370500][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.372930][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.375094][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.376625][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.379319][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.381603][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.384132][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.385552][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.389340][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.391828][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.393944][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.396096][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.398811][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.400346][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.402326][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.404878][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.407259][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.410682][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.421156][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.427838][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.445288][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.453743][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.456102][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.458718][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.460276][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.462261][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.464976][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.470995][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.474708][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.476972][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.480325][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.488851][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.491582][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.494061][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.499708][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.502601][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.509918][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.529068][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.531431][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.534283][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.539267][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.541531][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.544099][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.546615][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.550495][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.552938][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.555296][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.562523][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.565637][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.569861][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.572119][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.577093][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.584547][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.586937][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.590796][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.603951][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.605972][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.611360][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.633871][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.639087][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.641466][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.643778][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.646672][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.649658][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.651903][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.656862][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.662575][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.664796][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.675558][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.680183][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.681660][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.686701][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.708397][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.711143][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.715723][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.734918][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.748443][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.751240][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.754192][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.756655][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.762587][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.765074][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.773682][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.776514][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.785196][ T4296] device veth0_vlan entered promiscuous mode [ 41.793500][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.796459][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.800981][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.803868][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.812367][ T4296] device veth1_vlan entered promiscuous mode [ 41.819422][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.821929][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.824345][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.826513][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.849525][ T4296] device veth0_macvtap entered promiscuous mode [ 41.851535][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.853760][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.869853][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.874156][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.883698][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.885605][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.910356][ T4296] device veth1_macvtap entered promiscuous mode [ 41.914260][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.916739][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.920272][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.922135][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.929047][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.954738][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.956899][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.959611][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.964030][ T4292] device veth0_vlan entered promiscuous mode [ 41.972390][ T4292] device veth1_vlan entered promiscuous mode [ 41.975944][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.979529][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.981640][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.999018][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.002142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.004479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.016488][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.041732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.044187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.046460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.050713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.052444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.054173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.056546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.059314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.061742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.074106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.076278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.083079][ T4296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.085140][ T4296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.086976][ T4296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.090914][ T4296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.094460][ T4292] device veth0_macvtap entered promiscuous mode [ 42.108377][ T4301] device veth0_vlan entered promiscuous mode [ 42.113587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.115771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.119513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.124437][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.130163][ T4292] device veth1_macvtap entered promiscuous mode [ 42.134134][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.136527][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.138746][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.149241][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.156896][ T4301] device veth1_vlan entered promiscuous mode [ 42.191059][ T4301] device veth0_macvtap entered promiscuous mode [ 42.196313][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.199307][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.202715][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.207889][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.210050][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.212112][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.214336][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.216531][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.223746][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.232756][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.235760][ T4301] device veth1_macvtap entered promiscuous mode [ 42.244931][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.247168][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.250060][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.252292][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.255348][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.266417][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.269915][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.273244][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.275278][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.278281][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.280645][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.283640][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.285938][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.289540][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.291791][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.296284][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.300253][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.302463][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.304633][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.310086][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.323149][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.323577][ T4292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.325007][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.327114][ T4292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.338127][ T4307] Bluetooth: hci1: command tx timeout [ 42.339472][ T4307] Bluetooth: hci0: command tx timeout [ 42.341213][ T4292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.343174][ T4292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.351220][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.355640][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.361209][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.369963][ T4301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.371816][ T4301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.373834][ T4301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.375642][ T4301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.394956][ T4299] device veth0_vlan entered promiscuous mode [ 42.405925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.408743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.425373][ T4293] Bluetooth: hci2: command tx timeout [ 42.426644][ T4293] Bluetooth: hci3: command tx timeout [ 42.438274][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.440051][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.443561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.446198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.450659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.468034][ T4299] device veth1_vlan entered promiscuous mode [ 42.497610][ T4307] Bluetooth: hci4: command tx timeout [ 42.532721][ T4299] device veth0_macvtap entered promiscuous mode [ 42.540444][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.542640][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.544857][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.547075][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.550237][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.552178][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.559627][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.561934][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.589974][ T4299] device veth1_macvtap entered promiscuous mode [ 42.595615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.598307][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.601851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.603954][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.605543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.612057][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.614174][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.614708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.619250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.653345][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.665760][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.672442][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.674834][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.676856][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.684644][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.693520][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.710236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.712742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.719159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.723749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.752778][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.755103][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.760063][ T4303] device veth0_vlan entered promiscuous mode [ 42.763487][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.766079][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.769310][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.771743][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.773919][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.785813][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.789724][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.796791][ T4374] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 42.798809][ T4374] bridge0: port 3(netdevsim0) entered blocking state [ 42.800199][ T4374] bridge0: port 3(netdevsim0) entered disabled state [ 42.802826][ T4374] device netdevsim0 entered promiscuous mode [ 42.805063][ T4374] bridge0: port 3(netdevsim0) entered blocking state [ 42.806554][ T4374] bridge0: port 3(netdevsim0) entered forwarding state [ 42.812182][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.812324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.813964][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.818959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.828772][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.830622][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.832471][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.834209][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.871928][ T4303] device veth1_vlan entered promiscuous mode [ 42.882235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.884433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.886658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.946914][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.950165][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.952412][ T4378] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 42.961850][ T4303] device veth0_macvtap entered promiscuous mode [ 42.966412][ T4303] device veth1_macvtap entered promiscuous mode [ 42.972356][ T4380] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 43.021673][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.024094][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.026805][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.040091][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.042322][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.044599][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.046860][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.066827][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.082237][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.152840][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.155259][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.157666][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.160068][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.162144][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.164225][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.166262][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.168970][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.172421][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.174309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.180806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.184326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.190426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.196028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.201073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.212287][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 43.216912][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.228349][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.230728][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.232577][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.310734][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.312534][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.360486][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.412329][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.414111][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.431635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.441579][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.455482][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.472827][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.479426][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.517235][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.527540][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.529508][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.533247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.666510][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15'. [ 43.763154][ T4413] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 43.857479][ T27] audit: type=1326 audit(43.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9494a6e8 code=0x7fc00000 [ 43.961133][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 44.417555][ T4293] Bluetooth: hci0: command tx timeout [ 44.418900][ T4293] Bluetooth: hci1: command tx timeout [ 44.497563][ T4307] Bluetooth: hci3: command tx timeout [ 44.498610][ T4293] Bluetooth: hci2: command tx timeout [ 44.509004][ T4456] device syzkaller0 entered promiscuous mode [ 44.514671][ T24] syzkaller0: tun_net_xmit 48 [ 44.516695][ T4466] ------------[ cut here ]------------ [ 44.518109][ T4466] WARNING: CPU: 0 PID: 4466 at net/wireless/core.h:231 cfg80211_wext_siwgenie+0x374/0x418 [ 44.520300][ T4466] Modules linked in: [ 44.521079][ T4466] CPU: 0 PID: 4466 Comm: syz.1.38 Not tainted 6.1.110-syzkaller #0 [ 44.522917][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.525167][ T4466] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.527050][ T4466] pc : cfg80211_wext_siwgenie+0x374/0x418 [ 44.528426][ T4466] lr : cfg80211_wext_siwgenie+0x374/0x418 [ 44.529668][ T4466] sp : ffff8000212577b0 [ 44.530637][ T4466] x29: ffff8000212577d0 x28: dfff800000000000 x27: 1fffe0001a13c192 [ 44.532493][ T4466] x26: ffff0000d5b66000 x25: ffff0000d5b66000 x24: ffff0000d09e0c98 [ 44.534462][ T4466] x23: 1ffff00002b3a0af x22: 0000000000000001 x21: 0000000000000000 [ 44.536326][ T4466] x20: ffff0000d09b0760 x19: ffff0000d09e0c90 x18: 1fffe0003679f176 [ 44.538124][ T4466] x17: ffff800011ae984c x16: ffff8000084fb1ec x15: 0000000020000080 [ 44.539997][ T4466] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000040000 [ 44.541762][ T4466] x11: 0000000000000f70 x10: ffff8000219c9000 x9 : ffff800011ae80e0 [ 44.543520][ T4466] x8 : 0000000000000f71 x7 : ffff800008869484 x6 : ffff0000d5b66001 [ 44.545234][ T4466] x5 : ffff0000d5b66001 x4 : 0000000000000001 x3 : ffff0000d5b66000 [ 44.546977][ T4466] x2 : ffff800021257b20 x1 : 0000000000000000 x0 : 0000000000000000 [ 44.548661][ T4466] Call trace: [ 44.549401][ T4466] cfg80211_wext_siwgenie+0x374/0x418 [ 44.550626][ T4466] __cfg80211_wext_siwgenie+0x3c/0x50 [ 44.551912][ T4466] ioctl_standard_iw_point+0x7f0/0xdc4 [ 44.553057][ T4466] ioctl_standard_call+0xcc/0x264 [ 44.554190][ T4466] wext_ioctl_dispatch+0x16c/0x3ec [ 44.555217][ T4466] wext_handle_ioctl+0x1f8/0x3f4 [ 44.556321][ T4466] sock_ioctl+0x140/0x858 [ 44.557320][ T4466] __arm64_sys_ioctl+0x14c/0x1c8 [ 44.558276][ T4466] invoke_syscall+0x98/0x2c0 [ 44.559235][ T4466] el0_svc_common+0x138/0x258 [ 44.560335][ T4466] do_el0_svc+0x64/0x218 [ 44.561291][ T4466] el0_svc+0x58/0x168 [ 44.562176][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 44.563315][ T4466] el0t_64_sync+0x18c/0x190 [ 44.564228][ T4466] irq event stamp: 842 [ 44.565052][ T4466] hardirqs last enabled at (841): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 44.567222][ T4466] hardirqs last disabled at (842): [] el1_dbg+0x24/0x80 [ 44.569167][ T4466] softirqs last enabled at (808): [] local_bh_enable+0x10/0x34 [ 44.571196][ T4466] softirqs last disabled at (806): [] local_bh_disable+0x10/0x34 [ 44.573400][ T4466] ---[ end trace 0000000000000000 ]--- [ 44.579817][ T4307] Bluetooth: hci4: command tx timeout [ 44.585356][ T4466] ------------[ cut here ]------------ [ 44.586648][ T4466] WARNING: CPU: 0 PID: 4466 at net/wireless/core.h:239 cfg80211_wext_siwgenie+0x380/0x418 [ 44.588770][ T4466] Modules linked in: [ 44.589600][ T4466] CPU: 0 PID: 4466 Comm: syz.1.38 Tainted: G W 6.1.110-syzkaller #0 [ 44.591659][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.593857][ T4466] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.595740][ T4466] pc : cfg80211_wext_siwgenie+0x380/0x418 [ 44.597016][ T4466] lr : cfg80211_wext_siwgenie+0x380/0x418 [ 44.598210][ T4466] sp : ffff8000212577b0 [ 44.598977][ T4468] usb usb8: usbfs: process 4468 (syz.2.39) did not claim interface 0 before use [ 44.599082][ T4466] x29: ffff8000212577d0 x28: dfff800000000000 x27: 1fffe0001a13c192 [ 44.603362][ T4466] x26: 1fffe0001a13c213 x25: ffff0000d09e1098 x24: ffff0000d09e10a0 [ 44.605077][ T4466] x23: 1ffff00002b3a0af x22: 0000000000000001 x21: ffff0000d09e0cd8 [ 44.606999][ T4466] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800021257120 [ 44.608815][ T4466] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800008a95038 [ 44.610635][ T4466] x14: 0000000000000000 x13: ffff800012290ec8 x12: 0000000000040000 [ 44.612250][ T4466] x11: 0000000000024905 x10: ffff8000219c9000 x9 : ffff800011ae80ec [ 44.613576][ T4466] x8 : 0000000000024906 x7 : ffff800008061c64 x6 : 0000000000000003 [ 44.615062][ T4466] x5 : ffff0000c62e8d01 x4 : ffff0000d5b66001 x3 : ffff8000087f5218 [ 44.616985][ T4466] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 44.618759][ T4466] Call trace: [ 44.619474][ T4466] cfg80211_wext_siwgenie+0x380/0x418 [ 44.620700][ T4466] __cfg80211_wext_siwgenie+0x3c/0x50 [ 44.621925][ T4466] ioctl_standard_iw_point+0x7f0/0xdc4 [ 44.623073][ T4466] ioctl_standard_call+0xcc/0x264 [ 44.624338][ T4466] wext_ioctl_dispatch+0x16c/0x3ec [ 44.625668][ T4466] wext_handle_ioctl+0x1f8/0x3f4 [ 44.626816][ T4466] sock_ioctl+0x140/0x858 [ 44.627868][ T4466] __arm64_sys_ioctl+0x14c/0x1c8 [ 44.628968][ T4466] invoke_syscall+0x98/0x2c0 [ 44.630003][ T4466] el0_svc_common+0x138/0x258 [ 44.631110][ T4466] do_el0_svc+0x64/0x218 [ 44.632098][ T4466] el0_svc+0x58/0x168 [ 44.633092][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 44.634301][ T4466] el0t_64_sync+0x18c/0x190 [ 44.635210][ T4466] irq event stamp: 1198 [ 44.636196][ T4466] hardirqs last enabled at (1197): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 44.638614][ T4466] hardirqs last disabled at (1198): [] el1_dbg+0x24/0x80 [ 44.640545][ T4466] softirqs last enabled at (1190): [] handle_softirqs+0xb84/0xd58 [ 44.642658][ T4466] softirqs last disabled at (845): [] __do_softirq+0x14/0x20 [ 44.644582][ T4466] ---[ end trace 0000000000000000 ]--- [ 44.648500][ T27] audit: type=1326 audit(44.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9494224c code=0x7fc00000 [ 44.664927][ T27] audit: type=1326 audit(44.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9572a89c code=0x7fc00000 [ 46.498295][ T4307] Bluetooth: hci1: command tx timeout [ 46.498358][ T4293] Bluetooth: hci0: command tx timeout [ 46.578805][ T4306] Bluetooth: hci3: command tx timeout [ 46.578908][ T4293] Bluetooth: hci2: command tx timeout [ 46.658083][ T4293] Bluetooth: hci4: command tx timeout