last executing test programs: 12.854743166s ago: executing program 2 (id=64): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xffffffffffffff66) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x0) 11.630683973s ago: executing program 2 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000dcffffff0000000000000000850000003600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.339519442s ago: executing program 2 (id=69): mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./bus\x00', 0x40000100) fcntl$setstatus(r0, 0x4, 0x42400) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffe1, 0x0) sendfile(r0, r3, &(0x7f0000000500), 0x8) 10.108811089s ago: executing program 2 (id=75): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)=',*:$*,[\x00', &(0x7f0000000480)='wlan0\x00', 0x0) 6.470563246s ago: executing program 2 (id=94): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) 6.226207862s ago: executing program 1 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/220], 0x164}}, 0x0) 5.555155539s ago: executing program 1 (id=100): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110) socket$inet6(0xa, 0x4, 0x3a) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = msgget$private(0x0, 0x0) msgget(0x2, 0x4c) socket$nl_xfrm(0x10, 0x3, 0x6) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000100)=""/10) msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000003e5fa38cf76d0d443a94d603accf82b4bad6a884b34aa0fa9a1cda54fa6a67d5a985310ab3ec851c3933f745d922fc58e2d6b1d34d9df8b0df2c642390a3c609f0c25f9bdac853928064f9cd49ac08d2b34a856707c0ce12033092b75e0c192510706fca23c3eabc9b2e7d07ee8fd4d678e88a68fbf441cadfce72e8fba1503b510c45518affb203ef8915c7ed287f9340cb838091f81c4c4fabc80af056bc9358ee6895be3603aa8408f37cd3018a107e8fecff5bd08dda9019f0e758ce9cfcf8240010000066c17a95a88950d5cfe041ba8e41af6b1cbfc75ad5ec"], 0xe4, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.552762454s ago: executing program 2 (id=104): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)=',*:$*,[\x00', &(0x7f0000000480)='wlan0\x00', 0x0) 4.522889732s ago: executing program 3 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000dcffffff00000000000000008500000036000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.387400997s ago: executing program 1 (id=106): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bind$tipc(r0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0) 4.344622321s ago: executing program 4 (id=107): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.974367077s ago: executing program 3 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20) 3.808985089s ago: executing program 1 (id=109): socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 3.782260718s ago: executing program 4 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/236], 0x164}}, 0x0) 3.473198102s ago: executing program 3 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil}) r3 = dup(r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.117618322s ago: executing program 0 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x3, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61]}}, 0x0, 0x37}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)={0xcc, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x6}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8081}, 0x800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_id=0xffffffffffffffff}, 0x20) socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.036712969s ago: executing program 4 (id=113): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x400443c8, 0x20000002) 2.596718019s ago: executing program 3 (id=114): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) 2.438479842s ago: executing program 0 (id=115): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x4) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) 2.362848256s ago: executing program 1 (id=116): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110) socket$inet6(0xa, 0x4, 0x3a) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = msgget$private(0x0, 0x0) msgget(0x2, 0x4c) socket$nl_xfrm(0x10, 0x3, 0x6) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000100)=""/10) msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000003e5fa38cf76d0d443a94d603accf82b4bad6a884b34aa0fa9a1cda54fa6a67d5a985310ab3ec851c3933f745d922fc58e2d6b1d34d9df8b0df2c642390a3c609f0c25f9bdac853928064f9cd49ac08d2b34a856707c0ce12033092b75e0c192510706fca23c3eabc9b2e7d07ee8fd4d678e88a68fbf441cadfce72e8fba1503b510c45518affb203ef8915c7ed287f9340cb838091f81c4c4fabc80af056bc9358ee6895be3603aa8408f37cd3018a107e8fecff5bd08dda9019f0e758ce9cfcf8240010000066c17a95a88950d5cfe041ba8e41af6b1cbfc75ad5ec"], 0xe4, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.991569586s ago: executing program 0 (id=117): syz_emit_ethernet(0x94, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "66f014", 0x5e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x2, "fe906d26efe39393fe08f73eabc5"}]}}}}}}, 0x0) 1.761373061s ago: executing program 4 (id=118): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='batadv_slave_1\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 1.714208819s ago: executing program 3 (id=119): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bind$tipc(r0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0) 1.505883037s ago: executing program 0 (id=120): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.193666084s ago: executing program 4 (id=121): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20) 611.912545ms ago: executing program 0 (id=123): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/236], 0x164}}, 0x0) 583.251944ms ago: executing program 1 (id=124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "b0423536"}, @global, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @local=@item_4={0x3, 0x2, 0x3, "00001800"}, @global=@item_012={0x1, 0x1, 0x0, "1a"}, @local=@item_012={0x1, 0x2, 0x2, 'j'}, @local=@item_4={0x3, 0x2, 0x0, "dc3e0803"}, @global=@item_012={0x1, 0x1, 0x0, "a7"}]}}, 0x0}, 0x0) 482.004092ms ago: executing program 4 (id=125): sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x90) 366.094939ms ago: executing program 3 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x8000, 0x7, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@generic={0x44, 0x4, "f3f5"}, @timestamp_prespec={0x44, 0x3c, 0x54, 0x3, 0x7, [{@private=0xa010102, 0x8001}, {@empty, 0x3}, {@local, 0x9b}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@remote, 0x9ee}, {@broadcast, 0x6521}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1c}]}]}}}}}) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000003c0)=0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080100000000000000f8ff00000000bfa20000000000000702000004000000b703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB], 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r3 = socket(0x1d, 0x2, 0x6) bind$unix(r3, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 0s ago: executing program 0 (id=127): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x4) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 148.278676][ T5163] cgroup: Unknown subsys name 'net' [ 148.433010][ T5163] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.593274][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.599935][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.817789][ T5163] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 197.631825][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.652010][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.662594][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.671630][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.680095][ T5197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.688814][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.697252][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.706127][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.715024][ T5197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.728916][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.755492][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.764846][ T5197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.775459][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.777465][ T5202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.784562][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.795602][ T5201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.805855][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.810653][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.814458][ T5201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.820800][ T5199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.829072][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.839559][ T5197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.849121][ T5201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.852009][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.858166][ T5202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.874951][ T5201] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.889553][ T5202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.898712][ T5201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.908641][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.919464][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.089648][ T5196] chnl_net:caif_netlink_parms(): no params data found [ 199.301698][ T5185] chnl_net:caif_netlink_parms(): no params data found [ 199.637692][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 199.706851][ T5183] chnl_net:caif_netlink_parms(): no params data found [ 199.901775][ T5192] Bluetooth: hci1: command tx timeout [ 199.927748][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 199.980703][ T5192] Bluetooth: hci2: command tx timeout [ 199.981056][ T5197] Bluetooth: hci4: command tx timeout [ 199.986236][ T5192] Bluetooth: hci0: command tx timeout [ 199.993967][ T5188] Bluetooth: hci3: command tx timeout [ 200.277899][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.285713][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.293580][ T5196] bridge_slave_0: entered allmulticast mode [ 200.302536][ T5196] bridge_slave_0: entered promiscuous mode [ 200.374301][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.383247][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.391218][ T5196] bridge_slave_1: entered allmulticast mode [ 200.400174][ T5196] bridge_slave_1: entered promiscuous mode [ 200.588241][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.596419][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.604277][ T5185] bridge_slave_0: entered allmulticast mode [ 200.613242][ T5185] bridge_slave_0: entered promiscuous mode [ 200.745358][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.756156][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.767507][ T5185] bridge_slave_1: entered allmulticast mode [ 200.776503][ T5185] bridge_slave_1: entered promiscuous mode [ 200.794664][ T5196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.878864][ T5196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.998400][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.006239][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.014153][ T5183] bridge_slave_0: entered allmulticast mode [ 201.023084][ T5183] bridge_slave_0: entered promiscuous mode [ 201.081236][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.096229][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.104240][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.112032][ T5184] bridge_slave_0: entered allmulticast mode [ 201.119933][ T5184] bridge_slave_0: entered promiscuous mode [ 201.131716][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.139386][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.147224][ T5183] bridge_slave_1: entered allmulticast mode [ 201.156204][ T5183] bridge_slave_1: entered promiscuous mode [ 201.226949][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.236906][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.244984][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.252844][ T5184] bridge_slave_1: entered allmulticast mode [ 201.263990][ T5184] bridge_slave_1: entered promiscuous mode [ 201.357966][ T5196] team0: Port device team_slave_0 added [ 201.382214][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.522463][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.530179][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.538100][ T5187] bridge_slave_0: entered allmulticast mode [ 201.546944][ T5187] bridge_slave_0: entered promiscuous mode [ 201.674749][ T5196] team0: Port device team_slave_1 added [ 201.696890][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.710004][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.718020][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.725887][ T5187] bridge_slave_1: entered allmulticast mode [ 201.734842][ T5187] bridge_slave_1: entered promiscuous mode [ 201.823797][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.952794][ T5185] team0: Port device team_slave_0 added [ 201.968827][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.989038][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.999014][ T5197] Bluetooth: hci1: command tx timeout [ 202.006021][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.061213][ T5197] Bluetooth: hci4: command tx timeout [ 202.065892][ T5188] Bluetooth: hci3: command tx timeout [ 202.071177][ T5197] Bluetooth: hci0: command tx timeout [ 202.072409][ T5186] Bluetooth: hci2: command tx timeout [ 202.097442][ T5183] team0: Port device team_slave_0 added [ 202.111517][ T5185] team0: Port device team_slave_1 added [ 202.125102][ T5183] team0: Port device team_slave_1 added [ 202.223705][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.231094][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.257541][ T5196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.400086][ T5187] team0: Port device team_slave_0 added [ 202.409352][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.417259][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.444250][ T5196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.458038][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.465390][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.491662][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.508267][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.515792][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.542199][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.585092][ T5184] team0: Port device team_slave_0 added [ 202.594298][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.601564][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.627979][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.651710][ T5187] team0: Port device team_slave_1 added [ 202.661116][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.668318][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.694705][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.742513][ T5184] team0: Port device team_slave_1 added [ 202.832483][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.839646][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.866261][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.920901][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.928047][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.954508][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.032681][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.039851][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.066279][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.182941][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.190092][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.217675][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.257635][ T5196] hsr_slave_0: entered promiscuous mode [ 203.268784][ T5196] hsr_slave_1: entered promiscuous mode [ 203.326607][ T5183] hsr_slave_0: entered promiscuous mode [ 203.336976][ T5183] hsr_slave_1: entered promiscuous mode [ 203.346192][ T5183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.354415][ T5183] Cannot create hsr debugfs directory [ 203.505801][ T5185] hsr_slave_0: entered promiscuous mode [ 203.515083][ T5185] hsr_slave_1: entered promiscuous mode [ 203.524546][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.532507][ T5185] Cannot create hsr debugfs directory [ 203.590747][ T5187] hsr_slave_0: entered promiscuous mode [ 203.599252][ T5187] hsr_slave_1: entered promiscuous mode [ 203.607562][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.615584][ T5187] Cannot create hsr debugfs directory [ 203.821022][ T5184] hsr_slave_0: entered promiscuous mode [ 203.831332][ T5184] hsr_slave_1: entered promiscuous mode [ 203.839705][ T5184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.847643][ T5184] Cannot create hsr debugfs directory [ 204.076921][ T5188] Bluetooth: hci1: command tx timeout [ 204.146606][ T5188] Bluetooth: hci0: command tx timeout [ 204.159577][ T5186] Bluetooth: hci3: command tx timeout [ 204.165498][ T5186] Bluetooth: hci4: command tx timeout [ 204.171190][ T5186] Bluetooth: hci2: command tx timeout [ 204.906452][ T5196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.978416][ T5196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.008785][ T5196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.039458][ T5196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.073325][ T5183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.155401][ T5183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.199745][ T5183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.240594][ T5183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.277703][ T5185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.316705][ T5185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.371115][ T5185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.447871][ T5185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.626075][ T5187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.716522][ T5187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.781881][ T5187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.829512][ T5184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.853282][ T5184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.875846][ T5187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.936261][ T5184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.007427][ T5184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.181843][ T5188] Bluetooth: hci1: command tx timeout [ 206.226003][ T5188] Bluetooth: hci2: command tx timeout [ 206.232101][ T5188] Bluetooth: hci4: command tx timeout [ 206.237698][ T5188] Bluetooth: hci3: command tx timeout [ 206.243891][ T5188] Bluetooth: hci0: command tx timeout [ 206.422184][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.443416][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.598889][ T5196] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.711533][ T5183] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.744326][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.752126][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.875251][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.883028][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.946075][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.953942][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.073484][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.081262][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.156491][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.246330][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.524470][ T5185] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.583332][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.676455][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.684455][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.817280][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.825081][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.842875][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.850836][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.872856][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.880697][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.906585][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.148104][ T5184] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.226398][ T5185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.266569][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.274314][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.525211][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.533040][ T5249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.746332][ T5184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.757431][ T5184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.548473][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.659707][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.148893][ T5196] veth0_vlan: entered promiscuous mode [ 210.276183][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.289815][ T5183] veth0_vlan: entered promiscuous mode [ 210.350000][ T5196] veth1_vlan: entered promiscuous mode [ 210.372859][ T5183] veth1_vlan: entered promiscuous mode [ 210.658021][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.707569][ T5183] veth0_macvtap: entered promiscuous mode [ 210.788595][ T5183] veth1_macvtap: entered promiscuous mode [ 210.882621][ T5196] veth0_macvtap: entered promiscuous mode [ 210.906722][ T5185] veth0_vlan: entered promiscuous mode [ 210.972709][ T5196] veth1_macvtap: entered promiscuous mode [ 210.996705][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.038860][ T5185] veth1_vlan: entered promiscuous mode [ 211.105394][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.191239][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.255469][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.270234][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.285256][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.349909][ T5183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.359965][ T5183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.369240][ T5183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.378517][ T5183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.431652][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.442463][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.457606][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.621942][ T5185] veth0_macvtap: entered promiscuous mode [ 211.685083][ T5196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.694715][ T5196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.703982][ T5196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.713139][ T5196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.735325][ T5184] veth0_vlan: entered promiscuous mode [ 211.768905][ T5185] veth1_macvtap: entered promiscuous mode [ 211.829974][ T5184] veth1_vlan: entered promiscuous mode [ 211.928362][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.939674][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.950864][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.961589][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.976369][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.172706][ T5184] veth0_macvtap: entered promiscuous mode [ 212.284452][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.300562][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.311693][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.322455][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.337845][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.352040][ T5184] veth1_macvtap: entered promiscuous mode [ 212.514504][ T5185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.523670][ T5185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.532887][ T5185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.545096][ T5185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.588821][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.601286][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.612158][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.622947][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.633129][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.643904][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.658808][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.930030][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.946047][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.960859][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.971751][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.981834][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.992630][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.007623][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.082812][ T5184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.094578][ T5184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.108021][ T5184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.118682][ T5184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.456871][ T5187] veth0_vlan: entered promiscuous mode [ 213.578745][ T5187] veth1_vlan: entered promiscuous mode [ 213.972239][ T5187] veth0_macvtap: entered promiscuous mode [ 214.095073][ T5187] veth1_macvtap: entered promiscuous mode [ 214.317134][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.329723][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.340059][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.351303][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.361440][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.374596][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.386370][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.397914][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.413199][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.456632][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.469597][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.481081][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.491941][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.502044][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.512954][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.523075][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.533913][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.549712][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.648081][ T5187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.658801][ T5187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.669444][ T5187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.679104][ T5187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.069177][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.078497][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.314357][ T3348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.322537][ T3348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.581739][ T3262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.589871][ T3262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.819887][ T3262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.828180][ T3262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.042515][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.049298][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.372411][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.380932][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.561292][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.569346][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.739946][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.749618][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.774967][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.783225][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.879280][ T5376] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 220.726541][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 220.964861][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.981394][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.994270][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.005794][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.019153][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.028597][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.088056][ T44] usb 2-1: config 0 descriptor?? [ 221.096538][ T5384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.456448][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.465066][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.745771][ T3167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.754206][ T3167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.913052][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 221.919806][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.967077][ T44] usb 2-1: USB disconnect, device number 2 [ 221.999746][ T5402] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 222.126391][ T5402] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 222.314897][ T5402] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13'. [ 222.447312][ T5407] Bluetooth: MGMT ver 1.23 [ 223.657183][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042365e00: rx timeout, send abort [ 224.165841][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042365e00: abort rx timeout. Force session deactivation [ 224.948785][ T5188] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18 [ 225.392013][ T5446] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.852103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.862143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.881318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 225.892876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 226.076869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 226.193400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 226.989426][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 227.731086][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 228.000747][ T25] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 228.010290][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.018758][ T25] usb 5-1: Product: syz [ 228.023327][ T25] usb 5-1: Manufacturer: syz [ 228.028152][ T25] usb 5-1: SerialNumber: syz [ 228.110006][ T25] usb 5-1: config 0 descriptor?? [ 228.229027][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d17600: rx timeout, send abort [ 228.393220][ T25] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 228.738009][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d17600: abort rx timeout. Force session deactivation [ 228.856588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.901187][ T25] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 228.907638][ T25] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 228.975554][ T25] usb 5-1: USB disconnect, device number 2 [ 229.051710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 229.188890][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.411235][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 229.471038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.479607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.492708][ T25] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 229.503613][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.512059][ T25] usb 5-1: Product: syz [ 229.516431][ T25] usb 5-1: Manufacturer: syz [ 229.521338][ T25] usb 5-1: SerialNumber: syz [ 229.623467][ T25] usb 5-1: config 0 descriptor?? [ 229.903793][ T25] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 230.010675][ T5513] nbd0: detected capacity change from 0 to 6 [ 230.170239][ T5520] block nbd0: shutting down sockets [ 230.211057][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.220687][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.229636][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.239420][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.248346][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.257809][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.266206][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.275769][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.287332][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.298149][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.306338][ T5519] ldm_validate_partition_table(): Disk read failed. [ 230.313454][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.323004][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.331391][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.340929][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.349356][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.358890][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.367207][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.376853][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.382507][ T5523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 230.384933][ T5519] Dev nbd0: unable to read RDB block 0 [ 230.404704][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.414155][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read [ 230.422709][ T5519] nbd0: unable to read partition table [ 230.438458][ T5519] nbd0: partition table beyond EOD, truncated [ 230.484446][ T5360] ldm_validate_partition_table(): Disk read failed. [ 230.497814][ T5360] Dev nbd0: unable to read RDB block 0 [ 230.505744][ T5360] nbd0: unable to read partition table [ 230.608699][ T5360] nbd0: partition table beyond EOD, truncated [ 230.637628][ T5360] ldm_validate_partition_table(): Disk read failed. [ 230.645343][ T5360] Dev nbd0: unable to read RDB block 0 [ 230.651726][ T5360] nbd0: unable to read partition table [ 230.690701][ T5360] nbd0: partition table beyond EOD, truncated [ 230.805063][ T25] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 230.813946][ T25] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 230.924796][ T25] usb 5-1: USB disconnect, device number 3 [ 231.381297][ T29] audit: type=1326 audit(1721993831.575:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.1.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f350cd77299 code=0x0 [ 231.912407][ T1502] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.134018][ T1502] usb 1-1: Using ep0 maxpacket: 16 [ 232.159733][ T1502] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 232.193681][ T1502] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 232.203706][ T1502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.212306][ T1502] usb 1-1: Product: syz [ 232.216702][ T1502] usb 1-1: Manufacturer: syz [ 232.221862][ T1502] usb 1-1: SerialNumber: syz [ 232.256370][ T1502] usb 1-1: config 0 descriptor?? [ 232.277725][ T1502] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 232.288604][ T1502] usb 1-1: Detected FT232R [ 232.428032][ C0] hrtimer: interrupt took 226354 ns [ 232.553106][ T1502] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 232.575249][ T1502] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 232.601529][ T1502] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 232.625362][ T1502] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.694914][ T1502] usb 1-1: USB disconnect, device number 2 [ 232.773514][ T1502] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 232.785981][ T1502] ftdi_sio 1-1:0.0: device disconnected [ 233.211818][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d1ac00: rx timeout, send abort [ 233.631115][ T5554] nbd0: detected capacity change from 0 to 6 [ 233.708693][ T5559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.71'. [ 233.720851][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d1ac00: abort rx timeout. Force session deactivation [ 233.803000][ T5561] block nbd0: shutting down sockets [ 233.816565][ T5396] ldm_validate_partition_table(): Disk read failed. [ 233.824424][ T5396] Dev nbd0: unable to read RDB block 0 [ 233.830998][ T5396] nbd0: unable to read partition table [ 233.837610][ T5396] nbd0: partition table beyond EOD, truncated [ 233.848960][ T5557] ldm_validate_partition_table(): Disk read failed. [ 233.856816][ T5557] Dev nbd0: unable to read RDB block 0 [ 233.863316][ T5557] nbd0: unable to read partition table [ 233.884348][ T5557] nbd0: partition table beyond EOD, truncated [ 233.894855][ T5396] ldm_validate_partition_table(): Disk read failed. [ 233.902583][ T5396] Dev nbd0: unable to read RDB block 0 [ 233.908873][ T5396] nbd0: unable to read partition table [ 233.957660][ T5396] nbd0: partition table beyond EOD, truncated [ 234.774505][ T29] audit: type=1326 audit(1721993834.945:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5571 comm="syz.4.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd724d77299 code=0x0 [ 235.807161][ T5578] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 235.865429][ T5588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.83'. [ 236.649294][ T5598] loop3: detected capacity change from 0 to 2048 [ 236.723956][ T5598] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 236.796615][ T5598] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 236.804628][ T5598] UDF-fs: Scanning with blocksize 512 failed [ 236.905367][ T5598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.321114][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 238.438675][ T5616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.97'. [ 238.680021][ T29] audit: type=1326 audit(1721993838.845:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.2.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e89b77299 code=0x0 [ 239.140839][ T5614] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 240.190135][ T5637] loop0: detected capacity change from 0 to 2048 [ 240.269420][ T5637] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.301321][ T5637] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 240.309212][ T5637] UDF-fs: Scanning with blocksize 512 failed [ 240.406193][ T5637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.926768][ T5637] netlink: 900 bytes leftover after parsing attributes in process `syz.0.102'. [ 241.011637][ T5654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.110'. [ 241.557272][ T5661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.037590][ T29] audit: type=1326 audit(1721993842.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.064082][ T29] audit: type=1326 audit(1721993842.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.092141][ T29] audit: type=1326 audit(1721993842.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.119492][ T29] audit: type=1326 audit(1721993842.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.142096][ T29] audit: type=1326 audit(1721993842.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.168194][ T29] audit: type=1326 audit(1721993842.225:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.191951][ T29] audit: type=1326 audit(1721993842.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.214644][ T29] audit: type=1326 audit(1721993842.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.237191][ T29] audit: type=1326 audit(1721993842.235:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000 [ 242.390307][ T5663] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 244.091376][ T5691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.123'. [ 244.227419][ T1502] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 244.461855][ T5696] ===================================================== [ 244.469117][ T5696] BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260 [ 244.469743][ T1502] usb 2-1: Using ep0 maxpacket: 16 [ 244.477280][ T5696] tcf_ct_flow_table_get+0x611/0x2260 [ 244.488101][ T5696] tcf_ct_init+0xa67/0x2890 [ 244.492923][ T5696] tcf_action_init_1+0x6cc/0xb30 [ 244.498070][ T5696] tcf_action_init+0x458/0xf00 [ 244.503188][ T5696] tc_ctl_action+0x4be/0x19d0 [ 244.508106][ T5696] rtnetlink_rcv_msg+0x12fc/0x1410 [ 244.513586][ T5696] netlink_rcv_skb+0x375/0x650 [ 244.524915][ T5696] rtnetlink_rcv+0x34/0x40 [ 244.529523][ T5696] netlink_unicast+0xf52/0x1260 [ 244.533916][ T1502] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.536702][ T5696] netlink_sendmsg+0x10da/0x11e0 [ 244.545894][ T1502] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.550755][ T5696] __sock_sendmsg+0x30f/0x380 [ 244.560573][ T1502] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.565276][ T5696] ____sys_sendmsg+0x877/0xb60 [ 244.565385][ T5696] ___sys_sendmsg+0x28d/0x3c0 [ 244.578296][ T1502] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.584677][ T5696] __x64_sys_sendmsg+0x307/0x4a0 [ 244.588032][ T1502] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 244.595156][ T5696] x64_sys_call+0x2dd6/0x3c10 [ 244.599725][ T1502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.608852][ T5696] do_syscall_64+0xcd/0x1e0 [ 244.608993][ T5696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.609142][ T5696] [ 244.609164][ T5696] Local variable key created at: [ 244.609196][ T5696] tcf_ct_flow_table_get+0x4a/0x2260 [ 244.609304][ T5696] tcf_ct_init+0xa67/0x2890 [ 244.669140][ T5696] [ 244.671738][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: syz.3.126 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 244.682310][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 244.692704][ T5696] ===================================================== [ 244.699758][ T5696] Disabling lock debugging due to kernel taint [ 244.710027][ T5696] Kernel panic - not syncing: kmsan.panic set ... [ 244.716603][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: syz.3.126 Tainted: G B 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 244.728555][ T5696] Tainted: [B]=BAD_PAGE [ 244.732907][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 244.743120][ T5696] Call Trace: [ 244.746521][ T5696] [ 244.749557][ T5696] dump_stack_lvl+0x216/0x2d0 [ 244.754446][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.760457][ T5696] dump_stack+0x1e/0x30 [ 244.764800][ T5696] panic+0x4e2/0xcd0 [ 244.768880][ T5696] ? kmsan_get_metadata+0xf1/0x1c0 [ 244.774216][ T5696] kmsan_report+0x2c7/0x2d0 [ 244.778933][ T5696] ? pcpu_alloc_area+0x114e/0x12c0 [ 244.784403][ T5696] ? __msan_warning+0x95/0x120 [ 244.789353][ T5696] ? tcf_ct_flow_table_get+0x611/0x2260 [ 244.795078][ T5696] ? tcf_ct_init+0xa67/0x2890 [ 244.799905][ T5696] ? tcf_action_init_1+0x6cc/0xb30 [ 244.805192][ T5696] ? tcf_action_init+0x458/0xf00 [ 244.810385][ T5696] ? tc_ctl_action+0x4be/0x19d0 [ 244.815510][ T5696] ? rtnetlink_rcv_msg+0x12fc/0x1410 [ 244.820972][ T5696] ? netlink_rcv_skb+0x375/0x650 [ 244.826082][ T5696] ? rtnetlink_rcv+0x34/0x40 [ 244.830847][ T5696] ? netlink_unicast+0xf52/0x1260 [ 244.836083][ T5696] ? netlink_sendmsg+0x10da/0x11e0 [ 244.841446][ T5696] ? __sock_sendmsg+0x30f/0x380 [ 244.846474][ T5696] ? ____sys_sendmsg+0x877/0xb60 [ 244.851565][ T5696] ? ___sys_sendmsg+0x28d/0x3c0 [ 244.856569][ T5696] ? __x64_sys_sendmsg+0x307/0x4a0 [ 244.861838][ T5696] ? x64_sys_call+0x2dd6/0x3c10 [ 244.866874][ T5696] ? do_syscall_64+0xcd/0x1e0 [ 244.871740][ T5696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.878006][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.883426][ T5696] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 244.889940][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.895328][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.901350][ T5696] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 244.907343][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.912726][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.918197][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.924226][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.929623][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.935637][ T5696] __msan_warning+0x95/0x120 [ 244.940402][ T5696] tcf_ct_flow_table_get+0x611/0x2260 [ 244.945961][ T5696] ? nf_ct_tmpl_alloc+0xbd/0x2d0 [ 244.951085][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.956487][ T5696] tcf_ct_init+0xa67/0x2890 [ 244.961197][ T5696] tcf_action_init_1+0x6cc/0xb30 [ 244.966341][ T5696] ? __pfx_tcf_ct_init+0x10/0x10 [ 244.971477][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.977502][ T5696] tcf_action_init+0x458/0xf00 [ 244.982463][ T5696] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 244.989060][ T5696] tc_ctl_action+0x4be/0x19d0 [ 244.993926][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 244.999457][ T5696] ? __pfx_tc_ctl_action+0x10/0x10 [ 245.004743][ T5696] ? __pfx_tc_ctl_action+0x10/0x10 [ 245.010463][ T5696] rtnetlink_rcv_msg+0x12fc/0x1410 [ 245.015740][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 245.021159][ T5696] netlink_rcv_skb+0x375/0x650 [ 245.026095][ T5696] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.031739][ T5696] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 245.037013][ T5696] rtnetlink_rcv+0x34/0x40 [ 245.041580][ T5696] netlink_unicast+0xf52/0x1260 [ 245.046651][ T5696] netlink_sendmsg+0x10da/0x11e0 [ 245.051764][ T5696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.057295][ T5696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.062761][ T5696] __sock_sendmsg+0x30f/0x380 [ 245.067709][ T5696] ____sys_sendmsg+0x877/0xb60 [ 245.072653][ T5696] ___sys_sendmsg+0x28d/0x3c0 [ 245.077761][ T5696] ? __rcu_read_unlock+0x7b/0xe0 [ 245.082897][ T5696] ? __fget_files+0x4fe/0x5d0 [ 245.087751][ T5696] ? kmsan_get_metadata+0x13e/0x1c0 [ 245.093150][ T5696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 245.099161][ T5696] __x64_sys_sendmsg+0x307/0x4a0 [ 245.104295][ T5696] x64_sys_call+0x2dd6/0x3c10 [ 245.109156][ T5696] do_syscall_64+0xcd/0x1e0 [ 245.113855][ T5696] ? clear_bhb_loop+0x25/0x80 [ 245.118680][ T5696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.124773][ T5696] RIP: 0033:0x7f7804177299 [ 245.129326][ T5696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.149129][ T5696] RSP: 002b:00007f7804f6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.157996][ T5696] RAX: ffffffffffffffda RBX: 00007f7804306058 RCX: 00007f7804177299 [ 245.166109][ T5696] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000010 [ 245.174208][ T5696] RBP: 00007f78041e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 245.182307][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.190495][ T5696] R13: 000000000000006e R14: 00007f7804306058 R15: 00007ffd6eac3d28 [ 245.198619][ T5696] [ 245.201848][ T5696] Kernel Offset: disabled [ 245.206237][ T5696] Rebooting in 86400 seconds..