last executing test programs: 3m38.530247843s ago: executing program 3 (id=1816): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1401000029000100000000000000000004010080810000008acbfcdf685906d9037227a090d01e3f1e9f062386416246d88f61e4f3591a1c78c75eea128bdabb4feaf12ee8b14535654293f995c6b1afbafe4a28d39d896a71245f40c4d88416245322d732fc100627ed381a9c8d1eb2f71bcce8aff4eb658cd1c7adb76faf7b94c4cd6e9e59ebe8439c15e1784b0a44fd4b69544f0000000400100008000000"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) socket$l2tp6(0xa, 0x2, 0x73) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x6, @local}, 0x4a, {0x2, 0x0, @private=0xa010100}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x50, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x40483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e13, @remote={0x63}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20, 0x74}}], 0x40002a4, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xbed4734d8d5d84f}, 0x44890) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)={0x434, 0x1fe2, 0x0, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xdc, 0x7, 0x0, 0x1, [@typed={0xd6, 0x4c, 0x0, 0x0, @binary="da06329282376adef3a14a057cbbb0db54c2b7d83017cc249da00ecb376e742b5a74a3cbbb1dc8e91540e783096203f87cb4f8a94efd798ed02adc51a244ad1b7bd2c91050870a88b876635eafc043dda345ad79cc4cb30ba359bfb5d161cdb390bfab4c9be837b686715feae0af8072a8ba4afafff166cc6b5557d10f5d4c745ffc784f450c2dfdfa8cde6b76c0ee810dba406ae0e8221e40a10e9c13014e3d99ee452b1b43d1134a7a7f7afef043a019d365501b6a6c361f4a8b4554f1aa0f7d8169dc21ed49064bc1e4f98f292627b6cc"}]}, @generic="3b6135b71b8ee5f965dd7ae38371b80943eb438c9d656f2660e173fb4a2469b7525ad3e5b83500c89dfafd2483036390c31567817c1f3568495ca5ecd10d3c69f74728e0c6a019f2b7c4bca22f6d833dff1e8f52d7de", @generic="8c1a6fd11a071ac6b382b4940b9088bab84de50db864140d43e0957ae68761ede5904b333f4790b92c839e6b", @nested={0x151, 0x0, 0x0, 0x1, [@generic="e2783914f986dab0208bb31fad8fb9691aa741ec0f22f904fa5c31866a87cd9ba550b989e884e54746f6519c8cddc607f0a95114069c69a75ccc360f17cb0cece5ffbe6961262b343cdba3c0e9d0c7307a7edc6394fa15120fdf7bb1d57b71520e616b7ea82d43258d5618680c11d19a6bd784fb414cc76bd8b4a1e1214151fe18cf13e7", @generic="187d6443ad11cdbc723fff55d6318ebb952abe03853be208bc9ae89ddc624da9928623b308358c9bd44528f69d0009ebfda39fa867980002e110a799b4149bad802e2bc8e8e83a77cfeb456f0cd57952b54a273af74967145bff707d43558726e449981673c009ad697fb1c758549d7452ca22c9da02aa78771e961fb13e1b0f3f3d2ba2fcdfbcec934a3df6d4914343fa2aa397528c7b981ef698794e450146ff8f1d91806c9e89ba632b67e5b840891410c53372c24a8f264631838133371777f71dbc271119d2c1"]}, @generic="feaaa6e3a05e42656addedf07c9f4a32b902763c0c59313fe0ef6b571be8ecd40e7c159153a0ab91fe9cda6adc2ae36c93fed186ef1b86b6d0fff134fd85f0f35fb5bcd0c4d6f76dc41ad5814e01176e186be278226986c99976", @generic="11411086c5eacd83a2a518285006f4115a3f4797f7690cde0e3b63d4309b4a509a2c69eef0108f08ce391061064483203ef774ffea98d9f1292dbff646354750ab4f448578cb3201596d9519dcf76795bc3a08fa32be4583badcf72068e3fa535b7323822d4bb4c124b38862cc9c9c2e8199198055c42e3de944b5fc36679e1e0e16b79441af68b5afc4117e14d30638c8dd", @generic="fac729ac047efb0a0c55c795e429d0b66bea4b7f2194f6bf1fc6abe892ad756fcbb580abaa86d360c298c12e003b8cfae67f79b6851b54340e18adabf6cb9ae2cfae67e80808d9498f52c4ac24a634cc612096fddb9452b3b28e4f946d1fd81212156c0427147b7c9518cd85"]}, 0x434}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000b00)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/121, 0x79}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/68, 0x44}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/73, 0x49}, {&(0x7f0000000900)=""/232, 0xe8}], 0x6, &(0x7f0000000a80)=""/94, 0x5e}, 0x3}], 0x1, 0x120, &(0x7f0000000b40)) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="210001106a20e7c94f61de04a151404400aa", @ANYRES16=r11], 0xd) 3m10.987797579s ago: executing program 2 (id=1842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9", 0x2f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) io_uring_setup(0x1782, &(0x7f00000011c0)) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x18) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x1, 0x5da0e239, 0x3, 0x5, 0xe8, 0x718, 0x4, 0x0, 0x80, 0x9, 0x4, 0x7fffffffffffffff, 0x400, 0x40000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001480)={{r6, 0x0, 0x3, 0x6, 0x7, 0x0, 0x9, 0x6, 0xd, 0x1, 0x5, 0x380000000000000, 0x6da43394, 0x3, 0x6}}) 2m36.96281775s ago: executing program 3 (id=1820): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400005a4d001100ff0010000000000000000100261f6caad5842e79ff3b1e6117b253"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @empty}}) 2m36.171253077s ago: executing program 3 (id=1854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9", 0x2f}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) io_uring_setup(0x1782, &(0x7f00000011c0)) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x18) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x1, 0x5da0e239, 0x3, 0x5, 0xe8, 0x718, 0x4, 0x0, 0x80, 0x9, 0x4, 0x7fffffffffffffff, 0x400, 0x40000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001480)={{r6, 0x0, 0x3, 0x6, 0x7, 0x0, 0x9, 0x6, 0xd, 0x1, 0x5, 0x380000000000000, 0x6da43394, 0x3, 0x6}}) 2m28.424406732s ago: executing program 2 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, r8, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4621, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x4004895) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6(0xa, 0x0, 0x8000000003c) 2m27.298843269s ago: executing program 3 (id=1857): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet(0x2, 0x0, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x200) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, &(0x7f0000000b40)=ANY=[@ANYBLOB='max=-']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) 2m27.282480347s ago: executing program 2 (id=1858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 2m26.231176714s ago: executing program 3 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9", 0x2f}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) io_uring_setup(0x1782, &(0x7f00000011c0)) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x1, 0x5da0e239, 0x3, 0x5, 0xe8, 0x718, 0x4, 0x0, 0x80, 0x9, 0x4, 0x7fffffffffffffff, 0x400, 0x40000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001480)={{r6, 0x0, 0x3, 0x6, 0x7, 0x0, 0x9, 0x6, 0xd, 0x1, 0x5, 0x380000000000000, 0x6da43394, 0x3, 0x6}}) 2m25.548587676s ago: executing program 3 (id=1861): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400005a4d001100ff0010000000000000000100261f6caad5842e79ff3b1e6117b253c52e2c56887d"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @empty}}) 1m26.407247898s ago: executing program 2 (id=1870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9", 0x2f}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) io_uring_setup(0x1782, &(0x7f00000011c0)) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x1, 0x5da0e239, 0x3, 0x5, 0xe8, 0x718, 0x4, 0x0, 0x80, 0x9, 0x4, 0x7fffffffffffffff, 0x400, 0x40000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001480)={{r6, 0x0, 0x3, 0x6, 0x7, 0x0, 0x9, 0x6, 0xd, 0x1, 0x5, 0x380000000000000, 0x6da43394, 0x3, 0x6}}) 1m19.485826445s ago: executing program 2 (id=1904): r0 = syz_open_dev$ndb(&(0x7f0000001540), 0x0, 0x88000) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto(r4, 0x0, 0x0, 0x40084, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x6, @private0, 0x2, 0x3}, 0x80) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) syz_io_uring_setup(0x59e8, 0x0, &(0x7f00000002c0), &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x134, 0x0, &(0x7f0000000780)=[@acquire_done, @dead_binder_done, @register_looper, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}, @request_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x0, 0x2, 0x11}, @flat=@handle={0x73682a85, 0x200, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000540), 0x0, 0x1, 0x14}}, &(0x7f0000000600)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x8, 0x1, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f00000006c0)={0x0, 0x20, 0x38}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001040), 0x1, 0x2000000, &(0x7f0000000f00)='\"'}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) 1m14.464988133s ago: executing program 2 (id=1905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c0200, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xde, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000223a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x8000000}, 0x50) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpgid(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map, 0x2b, 0x0, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0x0, @val=@netkit={@link_fd=r5, r6}}, 0x40) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x9b, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x1, 0x1, 0x8, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0xa9, 0x3, 0x2, 0x6, 0x0, 0x3d, {{0xb, 0x24, 0x6, 0x0, 0x0, "28c5fe200d62"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xf02, 0x8, 0xfff9, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x100, 0x1, 0x1f, 0x40, 0xb7, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xa80, 0x2, 0x0, 0x2, 0x0, 0xea}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x81, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x1000, 0x1e}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x20, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x5, 0xee}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xc5, 0x81}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x72, 0xa8, 0x3f, 0x10, 0x4}, 0x181, &(0x7f0000000380)={0x5, 0xf, 0x181, 0x6, [@generic={0x80, 0x10, 0x3, "4b83dcdbad2695c98ee64d07fe4c9ee0f3ed7ad9d33f7e9a1c42de0635d0af51269d0eaa250bd117159c0bf4aa993258d9d228869a34c1fd5f183ccf16f6fb24276c19eb45414c572b0a6ab2dd618b5d5fd8df3dfcfb09f2c7ad8b40613a2eaa6ad8b3e9beb60942d9fcdfc49c7ac7ef8d42000c01e68658e61769f725"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7430a533f5b6e60b5d8ced7f443b4ff9"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xe1, 0x6, 0x0, 0xf000, 0x5, [0xc0c0, 0x3fc0, 0x30, 0xc00f, 0xff0000, 0x3f0f]}, @generic={0xb5, 0x10, 0xf, "797073d0c5882581c3caed5f19ada99376ff0dc30c0eda843453db623a1ae57a02fae1cce7c317e48699e8ccc420de448ce9940f3e75bdf820296b2ee0f417ce703682f9472e595b63bd2d1c57d85075a34a84a939212259ecd4c2cb45294dac400336c92fe1d8acfd19329c1e9be7e92d65b34590018c0f2fe8c30a6535df25537163b943051cd434301791a76dffb33d5134970f74990e804c09d87a2e2ff497a522f870be5d34081744d25fba445da048"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0xb4, 0xf00, 0x6}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81d}}, {0xac, &(0x7f0000000540)=ANY=[@ANYBLOB="ac03a806431d1077f413e2165a60bfb7d4858e86e039b20ff7fe84b322ef0993dc78f13537737a380dc49209ba85b1b7f2d4ef20d4ae32cba6faf91d3bb6b91638d655fd54958bbf2c7ef1b453d23b5815ca1c62ec3dadf142199ef5a9baceb08f3885b5670d1b0712a15d6397a615fded3f3d514ab38d695136acd62f1e11e01ec8367f43f0727cddb0203f4ef6348a990f1f45a821d6744209911d1736e0254ade0c2016f86f2768c881f6"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3001}}, {0xb, &(0x7f00000006c0)=@string={0xb, 0x3, "0aa3aa7df9e4ea6ef6"}}, {0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="081131b7afb6078c"]}, {0xfa, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) 49.401503992s ago: executing program 4 (id=1930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) migrate_pages(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)={0x80100}, 0x18) socket$inet(0x2, 0x2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001700)={0x3, &(0x7f0000001680)=[{}, {0x34, 0x0, 0x0, 0xa14a}, {0x6}]}) socket(0xa, 0x3, 0x3a) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) 46.501071363s ago: executing program 4 (id=1933): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x20000400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)) shutdown(r4, 0x1) listen(r3, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) 45.127268758s ago: executing program 4 (id=1934): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x3}, {}]}, @func, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x6a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x45, &(0x7f0000000480), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r4, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r4, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) 43.040697555s ago: executing program 4 (id=1937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x6}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0ed9e2d0a9698664cea4fe6f31e122b4704e04905643c3ce5e58b2ff98d507dcc9aa5e08dfe63d18dd61ec0ad57242fb1668268c7dee5d9bc4a2e321ab0e778c20f43b76f68dcdf9afbe8b86389e1b213b02cfb2d361d1633bfe45295efa4e3d0d129a2308469ed4539346412c05882661b8460fb2722f82c4c70f025617b04e6a2365e30006addf31f356987c28469a1026b9726b313266dc35c3b49c9dac79fa5f907a714d93ed21008031c2f7f82ae208dfc27154e78a1a190dd724ca316e84def890ae47e7470a5418295cf5d1ae4c35dc1ee65b2028463397dbee9b859826e06d648cfeab720023056d0043d78380ae3c5167b18a7094ab734350474cbb471ad311f27a5583e9946a412c40ecc0fa0549d238db389b8d7dfbabce9c6868e23687250a181efcb2739dc1c6e6b018b49c83147e0e72c44c66c998303042f320b47298f23f18b6e6e3fc65442f6cf070364166f84cd1d0734d6b518bcfdd3d8f5fde2f4c41bbc8febc5652428bb4ce7b8d70bb0318f4"], 0x1c}}, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000003ac0)={0x1, [[0x3], [0x7f7f], [0x1]], '\x00', [{0x0, 0xfffffff8, 0x0, 0x1}, {0x0, 0x1ff}, {0x9, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}], '\x00', 0xff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=@updsa={0x41c, 0x1a, 0x200, 0x70bd29, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x911, 0x4e24, 0x4, 0x2, 0xa0, 0x80, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x3, 0xffffffff80000001, 0x6, 0xe49a, 0x3, 0x4, 0xfffffffffffffff9, 0x4}, {0x9, 0x40, 0x778, 0x7}, {0x4, 0x5, 0x8}, 0x70bd27, 0x0, 0x2, 0x0, 0x8, 0x41}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffe}}, @algo_auth_trunc={0xf8, 0x14, {{'wp512-generic\x00'}, 0x560, 0x60, "327d4aedbca5eff58190ff2aedc8a99214cfbc0f9a725655cddf102006967642ffdd12d7bd5db62611781273d7be88e6535d5e6e84a41a2ab8084913cc336ec23a097d1c4003deb148662df7ccfe0077a74c244708bd100acc94f49f0e06d43dd22c50d14ea2b5e39cb63a6ddb2c4d26e5bd99e987f6a3a75a4bc9a4a17b0e5b5fa939e772257c169f4f62b56f71d878578dad03dd27d3c79a756b6274c515ee3ab0a1415c88211678f66a7f"}}, @migrate={0x134, 0x11, [{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@loopback, 0x32, 0x3, 0x0, 0x3, 0x2, 0xa}, {@in6=@remote, @in6=@mcast1, @in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x3, 0x0, 0x3500, 0x0, 0xa}, {@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private1, @in=@broadcast, 0x32, 0x4, 0x0, 0x3500, 0x2, 0xa}]}, @migrate={0xe8, 0x11, [{@in=@multicast1, @in6=@empty, @in=@local, @in6=@local, 0x32, 0x1, 0x0, 0x3507, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@local, @in6=@remote, @in=@empty, 0x3c, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x2}]}, @policy_type={0xa}]}, 0x41c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) recvfrom$inet(r8, 0x0, 0x62, 0x0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) accept(r7, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.107100174s ago: executing program 4 (id=1940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x3, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x8100, 0x0) 38.943770299s ago: executing program 4 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_setup(0x497c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef000c2c00fe80000000000000000000"], 0x0) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="ef720c4c7ffb90673f372a0ee8cd8e11e9c66330c9fa38e043af1b6e17dfdce04bf0548e8a83b88cc0a47bbaa9216e651ec735ee72f8793e6b3b2c9a"], 0x64}, 0x1, 0x0, 0x0, 0x200840c0}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000846"], 0xfdef) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x3f0, 0x538, 0x538, 0x3f0, 0xd0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@private2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) 17.402668087s ago: executing program 1 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, r8, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4621, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x4004895) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6(0xa, 0x0, 0x8000000003c) 16.290380512s ago: executing program 1 (id=1959): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = fsopen(&(0x7f0000000200)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='\x00\x80', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fc020000000000000000000000000000fe8000000000000000000000000000aa0200907800000500605b29ab00001100fc010000000000000000000000000000ff0100000000000000000000000000010000000000000000053a000000000000fb36eeca6fad50b375a22a584d16ea55"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) 14.022914751s ago: executing program 1 (id=1962): mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = fsopen(&(0x7f0000000200)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x184) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) setrlimit(0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fc020000000000000000000000000000fe8000000000000000000000000000aa0200907800000500605b29ab00001100fc010000000000000000000000000000ff0100000000000000000000000000010000000000000000053a000000000000fb36eeca6fad50b375a22a584d16ea55"], 0x0) creat(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) 12.751350843s ago: executing program 0 (id=1963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 12.744627795s ago: executing program 1 (id=1964): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000000000002000000000000000000000000000004"], 0x0, 0x3e, 0x0, 0x1}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x2c}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000280)={0x7}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.23307477s ago: executing program 1 (id=1965): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x20000400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)) shutdown(r4, 0x1) listen(r3, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) 10.69649518s ago: executing program 0 (id=1966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x6}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0ed9e2d0a9698664cea4fe6f31e122b4704e04905643c3ce5e58b2ff98d507dcc9aa5e08dfe63d18dd61ec0ad57242fb1668268c7dee5d9bc4a2e321ab0e778c20f43b76f68dcdf9afbe8b86389e1b213b02cfb2d361d1633bfe45295efa4e3d0d129a2308469ed4539346412c05882661b8460fb2722f82c4c70f025617b04e6a2365e30006addf31f356987c28469a1026b9726b313266dc35c3b49c9dac79fa5f907a714d93ed21008031c2f7f82ae208dfc27154e78a1a190dd724ca316e84def890ae47e7470a5418295cf5d1ae4c35dc1ee65b2028463397dbee9b859826e06d648cfeab720023056d0043d78380ae3c5167b18a7094ab734350474cbb471ad311f27a5583e9946a412c40ecc0fa0549d238db389b8d7dfbabce9c6868e23687250a181efcb2739dc1c6e6b018b49c83147e0e72c44c66c998303042f320b47298f23f18b6e6e3fc65442f6cf070364166f84cd1d0734d6b518bcfdd3d8f5fde2f4c41bbc8febc5652428bb4ce7b8d70bb0318f4"], 0x1c}}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.676813716s ago: executing program 0 (id=1967): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000011c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305839, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = io_uring_setup(0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x20000000, r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x963, 0x0, 0x9}, {0x1ad, 0x0, 0x1}, {0x983, 0x0, 0x8}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3.365477372s ago: executing program 1 (id=1968): bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000300)="00ae00", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x4c) 3.316162034s ago: executing program 0 (id=1969): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = fsopen(&(0x7f0000000200)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='\x00\x80', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fc020000000000000000000000000000fe8000000000000000000000000000aa0200907800000500605b29ab00001100fc010000000000000000000000000000ff0100000000000000000000000000010000000000000000053a000000000000fb36eeca6fad50b375a22a584d16ea55"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) 1.136703338s ago: executing program 0 (id=1971): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f0000000400)="d0063d03baa70905df49a9f10a815021b6e097a1a4fef4719df045028b991d4c1e4451c1a9bbc6f58f7ea88a000b038df173c631a54909afd9c6b168f4", 0x0, 0x2, 0x0, 0x3}, 0x50) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000100)) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r6, 0x0}]) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="2a6e4201244e2a7940b4ef466ad71a9715519646d90e2c907987340527bf946d50dadb703c64839ed1c180e3412655bf4cdb026c5c1a515230f169a501dfb3a33ad05ee9243f8008fc0171f159ffcbe6bd084348352c30865860c0f68e46b25ed2da9700"/114, 0x72, 0x4041, 0x0, 0x0) 0s ago: executing program 0 (id=1972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xde, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000223a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x8000000}, 0x50) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @val=@netkit}, 0x40) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): e [ 1862.851410][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.898019][ T8221] bridge_slave_1: left allmulticast mode [ 1862.903701][ T8221] bridge_slave_1: left promiscuous mode [ 1862.942629][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.973845][ T8221] bridge_slave_0: left allmulticast mode [ 1862.993077][ T8221] bridge_slave_0: left promiscuous mode [ 1863.013568][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.332985][ T5283] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1864.124503][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1864.265030][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.278425][ T8221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.289206][ T8221] bond0 (unregistering): Released all slaves [ 1864.452259][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.472330][ T8221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.482950][ T8221] bond0 (unregistering): Released all slaves [ 1864.722248][T18381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.812086][T18381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1864.872121][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.879255][ T9016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.900629][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.966367][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.973507][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.139589][ T8221] hsr_slave_0: left promiscuous mode [ 1865.145880][ T8221] hsr_slave_1: left promiscuous mode [ 1865.151804][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.162725][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.174030][ T8221] hsr_slave_0: left promiscuous mode [ 1865.181299][ T8221] hsr_slave_1: left promiscuous mode [ 1865.188050][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1865.197646][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.205908][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1865.213307][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.243340][ T8221] veth1_macvtap: left promiscuous mode [ 1865.249274][ T8221] veth0_macvtap: left promiscuous mode [ 1865.254913][ T8221] veth1_vlan: left promiscuous mode [ 1865.261370][ T8221] veth0_vlan: left promiscuous mode [ 1865.363045][ T29] audit: type=1400 audit(1725839971.522:1000): avc: denied { create } for pid=18589 comm="syz.2.1794" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1865.393105][T15652] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 1865.410554][ T29] audit: type=1400 audit(1725839971.522:1001): avc: denied { bind } for pid=18589 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1865.445105][ T29] audit: type=1400 audit(1725839971.522:1002): avc: denied { listen } for pid=18589 comm="syz.2.1794" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1865.495383][ T29] audit: type=1400 audit(1725839971.522:1003): avc: denied { accept } for pid=18589 comm="syz.2.1794" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1865.523181][T18591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1865.537127][ T29] audit: type=1400 audit(1725839971.612:1004): avc: denied { mount } for pid=18589 comm="syz.2.1794" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1865.608901][ T29] audit: type=1400 audit(1725839971.772:1005): avc: denied { write } for pid=18589 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1865.732368][ T29] audit: type=1400 audit(1725839971.792:1006): avc: denied { connect } for pid=18589 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1865.943036][ T29] audit: type=1400 audit(1725839972.102:1007): avc: denied { unmount } for pid=17579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1866.034492][ T8221] team0 (unregistering): Port device team_slave_1 removed [ 1866.077469][ T8221] team0 (unregistering): Port device team_slave_0 removed [ 1867.310991][ T8221] team0 (unregistering): Port device team_slave_1 removed [ 1867.382207][ T8221] team0 (unregistering): Port device team_slave_0 removed [ 1867.891675][T18599] netlink: 'syz.2.1796': attribute type 7 has an invalid length. [ 1867.900255][T18599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1867.912290][T18599] netlink: 'syz.2.1796': attribute type 3 has an invalid length. [ 1867.920233][T18599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1869.052467][T18605] netlink: 'syz.2.1797': attribute type 3 has an invalid length. [ 1869.060709][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1797'. [ 1869.418807][T15652] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1869.434396][T15652] Bluetooth: hci2: Injecting HCI hardware error event [ 1869.448286][T15652] Bluetooth: hci2: hardware error 0x00 [ 1870.131692][T18485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1870.159951][T18485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1870.231802][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 1870.508681][T18485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1870.540509][T18485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1870.606877][T18216] veth0_vlan: entered promiscuous mode [ 1870.619048][T18216] veth1_vlan: entered promiscuous mode [ 1870.644298][T18216] veth0_macvtap: entered promiscuous mode [ 1870.826984][T18216] veth1_macvtap: entered promiscuous mode [ 1871.019252][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.074951][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.097752][T18216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.308853][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.346244][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.394654][T18216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.446150][T18216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.495426][T18216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.504160][T18216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.544139][T18216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.579323][T15652] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1872.200401][ T1912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.223420][T18381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1872.241027][T18483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1872.247905][ T1912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.265773][T18483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1872.272892][T18636] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1872.300831][T18483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1872.344302][ T29] audit: type=1400 audit(1725839978.502:1008): avc: denied { ioctl } for pid=18631 comm="syz.2.1799" path="socket:[102595]" dev="sockfs" ino=102595 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1872.372895][T18483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1872.422813][T18485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.548587][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.591615][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.664612][T18485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.733630][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.740803][ T9016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.150732][T18649] netlink: 'syz.3.1758': attribute type 7 has an invalid length. [ 1873.163068][T18649] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1873.177955][T18649] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 1873.185820][T18649] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1873.523132][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.530406][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.119635][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.220945][T18381] veth0_vlan: entered promiscuous mode [ 1874.337950][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1874.384723][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.391973][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.437961][T18381] veth1_vlan: entered promiscuous mode [ 1874.513719][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.521015][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.790130][T18381] veth0_macvtap: entered promiscuous mode [ 1874.851204][T18483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1874.954438][T18381] veth1_macvtap: entered promiscuous mode [ 1875.125455][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.187093][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.224496][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.266713][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.317251][T18381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.383076][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.455253][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.485337][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.494965][ T8462] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1875.535510][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.571021][T18381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.612468][T18381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.622825][T18381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.633122][T18381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.645774][T18381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.711454][T18485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.925009][ T8462] usb 3-1: Using ep0 maxpacket: 16 [ 1875.940884][ T8462] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1875.950998][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.988234][ T8462] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1876.009050][T18691] netlink: 'syz.3.1804': attribute type 7 has an invalid length. [ 1876.020503][T18691] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1804'. [ 1876.032807][T18691] netlink: 'syz.3.1804': attribute type 3 has an invalid length. [ 1876.040753][T18691] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1804'. [ 1876.121285][ T8462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.523494][ T8462] usb 3-1: config 0 descriptor?? [ 1876.535288][T18485] veth0_vlan: entered promiscuous mode [ 1876.597494][ T8462] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1876.802121][T18485] veth1_vlan: entered promiscuous mode [ 1876.978958][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.017770][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.297405][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 1877.873884][ T5284] usb 3-1: USB disconnect, device number 34 [ 1878.152504][ T8221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.193996][ T8221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.230791][T18485] veth0_macvtap: entered promiscuous mode [ 1878.284356][T18485] veth1_macvtap: entered promiscuous mode [ 1878.462338][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.506651][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.548437][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.560578][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.580025][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.593911][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.655161][T18485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1878.709106][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.763408][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.804329][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.823100][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.833090][T18485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.844030][T18485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.061059][T18710] netlink: 'syz.0.1708': attribute type 7 has an invalid length. [ 1879.069894][T18710] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1708'. [ 1879.084092][T18710] netlink: 'syz.0.1708': attribute type 3 has an invalid length. [ 1879.095193][T18710] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1708'. [ 1879.117398][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 1879.875276][T18485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1880.278960][T18485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.634943][T18485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.045804][T11902] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1882.335941][T11902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.346362][T18485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.346937][T11902] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1882.913846][T18485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1883.151747][T11902] usb 1-1: string descriptor 0 read error: -71 [ 1883.204324][T11902] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1883.219971][T11902] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1883.260040][T11902] usb 1-1: config 0 descriptor?? [ 1883.289613][T11902] usb 1-1: can't set config #0, error -71 [ 1883.319962][T11902] usb 1-1: USB disconnect, device number 23 [ 1883.653447][T18483] veth0_vlan: entered promiscuous mode [ 1883.730812][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.790140][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.829078][T18483] veth1_vlan: entered promiscuous mode [ 1883.948505][ T9016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.981801][ T9016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.021008][T18483] veth0_macvtap: entered promiscuous mode [ 1884.082979][T18483] veth1_macvtap: entered promiscuous mode [ 1884.176734][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.215638][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.243217][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.272166][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.314027][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.330283][ T29] audit: type=1400 audit(1725839990.472:1009): avc: denied { ioctl } for pid=18738 comm="syz.1.1783" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=102384 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1884.416179][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.467023][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.543028][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.584218][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.683072][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.722207][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.739976][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.752491][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.769087][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.828422][ T5284] IPVS: starting estimator thread 0... [ 1884.838282][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.854796][T18744] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:0 [ 1884.862345][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.888306][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.935728][T18746] IPVS: using max 31 ests per chain, 74400 per kthread [ 1884.943618][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.979900][T18483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.010639][T18483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.042038][T18483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.075421][T18483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.452242][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 1889.262402][T18760] netlink: 'syz.2.1815': attribute type 7 has an invalid length. [ 1889.272835][T18760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1889.287127][T18760] netlink: 'syz.2.1815': attribute type 3 has an invalid length. [ 1889.295002][T18760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1889.995607][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.003818][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.256563][T17880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.425273][T17880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.986929][ T5280] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1897.184760][T18784] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1897.353798][T16188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1897.372777][T16188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1897.388571][T16188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1897.426490][T16188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1897.439654][T16188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1897.462518][T16188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1897.630584][T16188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1897.642342][T16188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1897.683589][T16188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1897.735694][T16188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1897.743743][T16188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1897.755060][T16188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1899.656577][T16188] Bluetooth: hci5: command tx timeout [ 1900.019043][T16188] Bluetooth: hci0: command tx timeout [ 1900.170049][T18811] netlink: 'syz.0.1827': attribute type 7 has an invalid length. [ 1900.184442][T18811] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1900.196544][T18811] netlink: 'syz.0.1827': attribute type 3 has an invalid length. [ 1900.204702][T18811] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1827'. [ 1901.113604][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.523956][T18820] No such timeout policy "syz1" [ 1901.735067][T16188] Bluetooth: hci5: command tx timeout [ 1901.997957][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.056512][T16188] Bluetooth: hci0: command tx timeout [ 1902.542514][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.816789][T16188] Bluetooth: hci5: command tx timeout [ 1904.135741][T16188] Bluetooth: hci0: command tx timeout [ 1905.896351][T16188] Bluetooth: hci5: command tx timeout [ 1906.297174][T16188] Bluetooth: hci0: command tx timeout [ 1906.484391][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.605170][ T5280] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1907.559035][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.618676][T18787] chnl_net:caif_netlink_parms(): no params data found [ 1907.850877][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.149248][T18867] netlink: 'syz.2.1836': attribute type 7 has an invalid length. [ 1908.157369][T18867] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1836'. [ 1908.171117][T18867] netlink: 'syz.2.1836': attribute type 3 has an invalid length. [ 1908.179517][T18867] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1836'. [ 1908.982686][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.170113][T15652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1909.182649][T15652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1909.196231][T15652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1909.205237][T15652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1909.216269][T15652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1909.223940][T15652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1909.312072][T18785] chnl_net:caif_netlink_parms(): no params data found [ 1909.411731][T18882] netlink: 'syz.0.1845': attribute type 7 has an invalid length. [ 1909.421265][T18882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1845'. [ 1909.875342][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.521013][T18787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.532200][T18787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.539487][T18787] bridge_slave_0: entered allmulticast mode [ 1910.547996][T18787] bridge_slave_0: entered promiscuous mode [ 1910.876516][T18787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.893939][T18787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.914312][T18787] bridge_slave_1: entered allmulticast mode [ 1910.936895][T18787] bridge_slave_1: entered promiscuous mode [ 1910.963353][T18785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.010734][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.045298][T18785] bridge_slave_0: entered allmulticast mode [ 1911.062276][T18785] bridge_slave_0: entered promiscuous mode [ 1911.264262][T15652] Bluetooth: hci1: command tx timeout [ 1911.279380][T18785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.334811][T18785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.391132][T18785] bridge_slave_1: entered allmulticast mode [ 1911.406334][T18785] bridge_slave_1: entered promiscuous mode [ 1911.554730][T18787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1911.700444][T18785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1911.738192][T18787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1911.981236][T18785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.099947][T18787] team0: Port device team_slave_0 added [ 1912.177203][T18785] team0: Port device team_slave_0 added [ 1912.290872][T18787] team0: Port device team_slave_1 added [ 1912.324734][T18785] team0: Port device team_slave_1 added [ 1912.332555][ T63] bridge_slave_1: left allmulticast mode [ 1912.338284][ T63] bridge_slave_1: left promiscuous mode [ 1912.348872][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.361750][ T63] bridge_slave_0: left allmulticast mode [ 1912.370811][ T63] bridge_slave_0: left promiscuous mode [ 1912.376818][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.388687][ T63] bridge_slave_1: left allmulticast mode [ 1912.394385][ T63] bridge_slave_1: left promiscuous mode [ 1912.401789][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.423605][ T63] bridge_slave_0: left allmulticast mode [ 1912.429417][ T63] bridge_slave_0: left promiscuous mode [ 1912.436207][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.343547][T15652] Bluetooth: hci1: command tx timeout [ 1918.390207][T15652] Bluetooth: hci1: command tx timeout [ 1918.401246][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1918.644015][T15568] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1919.287223][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.306015][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.318982][ T63] bond0 (unregistering): Released all slaves [ 1919.612920][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.626836][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.648239][ T63] bond0 (unregistering): Released all slaves [ 1919.811639][T18785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1919.829495][T18785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1919.873750][T18785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.064239][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1920.073288][ T29] audit: type=1400 audit(1725840282.218:1010): avc: denied { name_bind } for pid=18925 comm="syz.0.1843" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1920.078123][T18787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.130415][T18787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.204756][T18787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.271459][T18787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.279985][T18787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.306662][T18787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.352892][T18785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.376176][T18785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.413086][T18785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.460931][T16188] Bluetooth: hci1: command tx timeout [ 1920.863865][T18877] chnl_net:caif_netlink_parms(): no params data found [ 1920.938370][T18785] hsr_slave_0: entered promiscuous mode [ 1920.977001][T18785] hsr_slave_1: entered promiscuous mode [ 1920.986343][T18785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1920.994129][T18785] Cannot create hsr debugfs directory [ 1921.356364][T18787] hsr_slave_0: entered promiscuous mode [ 1921.370728][T18787] hsr_slave_1: entered promiscuous mode [ 1921.382590][T18787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1921.393452][T18787] Cannot create hsr debugfs directory [ 1922.085969][ T63] hsr_slave_0: left promiscuous mode [ 1922.093530][ T63] hsr_slave_1: left promiscuous mode [ 1922.113006][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1922.145044][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.172791][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.201852][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.254085][ T63] hsr_slave_0: left promiscuous mode [ 1922.278606][ T63] hsr_slave_1: left promiscuous mode [ 1922.297736][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1922.324029][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.339226][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.348455][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.470498][ T63] veth1_macvtap: left promiscuous mode [ 1922.476531][ T63] veth0_macvtap: left promiscuous mode [ 1922.485163][ T63] veth1_vlan: left promiscuous mode [ 1922.490596][ T63] veth0_vlan: left promiscuous mode [ 1922.519900][ T63] veth1_macvtap: left promiscuous mode [ 1922.533944][ T63] veth0_macvtap: left promiscuous mode [ 1922.535315][T16188] Bluetooth: hci1: command tx timeout [ 1922.577086][ T63] veth1_vlan: left promiscuous mode [ 1922.583001][ T63] veth0_vlan: left promiscuous mode [ 1923.815044][T15568] usb 3-1: device descriptor read/64, error -110 [ 1924.005651][T15652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1924.019232][T15652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1924.028515][T15652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1924.037298][T15652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1924.046693][T15652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1924.054843][T15652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1924.103516][T15568] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1924.255145][T15568] usb 3-1: device descriptor read/64, error -32 [ 1924.377626][T15568] usb usb3-port1: attempt power cycle [ 1924.808562][T15568] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1924.856839][T15568] usb 3-1: device descriptor read/8, error -32 [ 1924.987965][T15568] raw-gadget.0 gadget.2: failed to queue reset event [ 1925.080884][T15568] raw-gadget.0 gadget.2: failed to queue resume event [ 1925.103082][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1925.155187][T15568] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1925.205781][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1925.218508][T15568] usb 3-1: device descriptor read/8, error -32 [ 1925.228299][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1925.336552][T15568] raw-gadget.0 gadget.2: failed to queue suspend event [ 1925.344390][T15568] usb usb3-port1: unable to enumerate USB device [ 1926.137631][T15652] Bluetooth: hci4: command tx timeout [ 1927.484817][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1927.560240][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1928.215101][T15652] Bluetooth: hci4: command tx timeout [ 1928.492730][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.501562][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.513476][T18877] bridge_slave_0: entered allmulticast mode [ 1928.527483][T18877] bridge_slave_0: entered promiscuous mode [ 1928.559232][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.667870][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.687160][T18877] bridge_slave_1: entered allmulticast mode [ 1928.700045][T18877] bridge_slave_1: entered promiscuous mode [ 1929.209243][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.450805][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.516236][T18922] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1929.690948][T16188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1929.701973][T16188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1929.712124][T16188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1929.731567][T16188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1929.741220][T16188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1929.751059][T16188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1929.802979][T18877] team0: Port device team_slave_0 added [ 1929.876927][T18877] team0: Port device team_slave_1 added [ 1930.084301][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.106979][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.150988][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.296409][T16188] Bluetooth: hci4: command tx timeout [ 1930.364363][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.381357][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.424262][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1930.670536][T18975] chnl_net:caif_netlink_parms(): no params data found [ 1930.844813][ T63] IPVS: stop unused estimator thread 0... [ 1930.872327][T18877] hsr_slave_0: entered promiscuous mode [ 1930.883167][T18877] hsr_slave_1: entered promiscuous mode [ 1930.890337][T18877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1930.899235][T18877] Cannot create hsr debugfs directory [ 1931.135582][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.142838][T18975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.151601][T18975] bridge_slave_0: entered allmulticast mode [ 1931.160121][T18975] bridge_slave_0: entered promiscuous mode [ 1931.215385][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.222965][T18975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.245606][T18975] bridge_slave_1: entered allmulticast mode [ 1931.253585][T18975] bridge_slave_1: entered promiscuous mode [ 1931.354955][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.518630][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.540391][T18975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.609478][T18975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1931.687636][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.727638][T18987] chnl_net:caif_netlink_parms(): no params data found [ 1931.743267][T18787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1931.815124][T16188] Bluetooth: hci2: command tx timeout [ 1931.844141][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.863693][T18787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1931.881828][T18975] team0: Port device team_slave_0 added [ 1931.893893][T18975] team0: Port device team_slave_1 added [ 1931.938920][T18787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1931.995389][T18787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1932.024841][T18975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.032573][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.060605][T18975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.073888][T18975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.089591][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.116437][T18975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.203954][T18785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1932.290560][T18987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.299923][T18987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.307735][T18987] bridge_slave_0: entered allmulticast mode [ 1932.314707][T18987] bridge_slave_0: entered promiscuous mode [ 1932.364360][T18877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.383465][T18785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1932.390690][T16188] Bluetooth: hci4: command tx timeout [ 1932.405917][T18785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1932.486774][T18987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.493958][T18987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.505519][T18987] bridge_slave_1: entered allmulticast mode [ 1932.512533][T18987] bridge_slave_1: entered promiscuous mode [ 1932.535411][T18785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1932.568807][T18877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.610177][T18975] hsr_slave_0: entered promiscuous mode [ 1932.621045][T18975] hsr_slave_1: entered promiscuous mode [ 1932.631001][T18975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1932.638677][T18975] Cannot create hsr debugfs directory [ 1932.730631][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.782293][T18877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.817510][T18987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.831084][T18987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.890109][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.978097][T18877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.044816][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.071111][T18987] team0: Port device team_slave_0 added [ 1933.137085][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.169089][T18987] team0: Port device team_slave_1 added [ 1933.291393][T18987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.304984][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.344641][T18987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.361031][T18987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.368825][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.395447][T18987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1933.590768][T18987] hsr_slave_0: entered promiscuous mode [ 1933.600837][T18987] hsr_slave_1: entered promiscuous mode [ 1933.608046][T18987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1933.616705][T18987] Cannot create hsr debugfs directory [ 1933.852736][T18877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1933.905606][T16188] Bluetooth: hci2: command tx timeout [ 1934.043292][T18877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1934.091140][T18877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1934.226597][T18877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1934.253129][ T63] bridge_slave_1: left allmulticast mode [ 1934.263942][ T63] bridge_slave_1: left promiscuous mode [ 1934.281624][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.301370][ T63] bridge_slave_0: left allmulticast mode [ 1934.321946][ T63] bridge_slave_0: left promiscuous mode [ 1934.330574][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.347053][ T63] bridge_slave_1: left allmulticast mode [ 1934.352715][ T63] bridge_slave_1: left promiscuous mode [ 1934.359081][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.369440][ T63] bridge_slave_0: left allmulticast mode [ 1934.375826][ T63] bridge_slave_0: left promiscuous mode [ 1934.381534][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.393731][ T63] bridge_slave_1: left allmulticast mode [ 1934.401105][ T63] bridge_slave_1: left promiscuous mode [ 1934.408750][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.419316][ T63] bridge_slave_0: left allmulticast mode [ 1934.428053][ T63] bridge_slave_0: left promiscuous mode [ 1934.433738][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.898531][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1935.929930][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1935.942823][ T63] bond0 (unregistering): Released all slaves [ 1935.975352][T16188] Bluetooth: hci2: command tx timeout [ 1936.240973][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.253249][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.271661][ T63] bond0 (unregistering): Released all slaves [ 1936.478657][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.494589][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.507436][ T63] bond0 (unregistering): Released all slaves [ 1936.537227][T18787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1936.899245][T18787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.117212][T18785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.151516][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.158737][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.170261][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.177470][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.440665][T18785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.654517][T18975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1937.680269][T18975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1937.702598][T18975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1937.816707][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.823999][T17880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.866081][T18975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1938.067215][T16188] Bluetooth: hci2: command tx timeout [ 1938.081782][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.089016][T17880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.687382][T18877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.836930][ T63] hsr_slave_0: left promiscuous mode [ 1938.843329][ T63] hsr_slave_1: left promiscuous mode [ 1938.856922][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1938.864469][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.896080][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1938.903612][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1938.930409][ T63] hsr_slave_0: left promiscuous mode [ 1938.946153][ T63] hsr_slave_1: left promiscuous mode [ 1938.962432][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1938.970745][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.988915][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.009316][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.031091][ T63] hsr_slave_0: left promiscuous mode [ 1939.046030][ T63] hsr_slave_1: left promiscuous mode [ 1939.052362][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.066132][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.083471][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.091141][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.224356][ T63] veth1_macvtap: left promiscuous mode [ 1939.230290][ T63] veth0_macvtap: left promiscuous mode [ 1939.236838][ T63] veth1_vlan: left promiscuous mode [ 1939.242223][ T63] veth0_vlan: left promiscuous mode [ 1939.250015][ T63] veth1_macvtap: left promiscuous mode [ 1939.255746][ T63] veth0_macvtap: left promiscuous mode [ 1939.261489][ T63] veth1_vlan: left promiscuous mode [ 1939.272084][ T63] veth0_vlan: left promiscuous mode [ 1939.283852][ T63] veth1_macvtap: left promiscuous mode [ 1939.290220][ T63] veth0_macvtap: left promiscuous mode [ 1939.305316][ T63] veth1_vlan: left promiscuous mode [ 1939.310697][ T63] veth0_vlan: left promiscuous mode [ 1940.291896][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1940.351245][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1941.772828][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1941.889617][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1943.085709][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1943.161445][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1943.819734][T18785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1944.045238][T18787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1944.161296][T18877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.347600][T18975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.357023][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.364196][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1944.512703][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.519957][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1944.566450][T18987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1944.577953][T18987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1944.626051][T18975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.653245][T18987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1944.672247][T18987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1944.843232][T18785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1944.879390][T17387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.886618][T17387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1944.982435][T17387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.989685][T17387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.059955][T18787] veth0_vlan: entered promiscuous mode [ 1945.212012][T18785] veth0_vlan: entered promiscuous mode [ 1945.262990][T18787] veth1_vlan: entered promiscuous mode [ 1945.308039][T18785] veth1_vlan: entered promiscuous mode [ 1945.685720][T18787] veth0_macvtap: entered promiscuous mode [ 1945.710665][T18987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1945.753909][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.783377][T18787] veth1_macvtap: entered promiscuous mode [ 1945.887482][T18785] veth0_macvtap: entered promiscuous mode [ 1945.938770][T18787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1945.987807][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1946.029639][T18787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1946.068866][T18785] veth1_macvtap: entered promiscuous mode [ 1946.088467][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.095715][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1946.138617][T18787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.152777][T18787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.162909][T18787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.174216][T18787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.188875][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.196102][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1946.211005][T18785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1946.223779][T18785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.236822][T18785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1946.306546][T18785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1946.326638][T18785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.344596][T18785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1946.363762][T18975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1946.394388][T18785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.405012][T18785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.413704][T18785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.428197][T18785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.560241][ T1912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.570352][ T1912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.689568][T18877] veth0_vlan: entered promiscuous mode [ 1946.716906][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.724742][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.737254][T18975] veth0_vlan: entered promiscuous mode [ 1946.777565][T18877] veth1_vlan: entered promiscuous mode [ 1946.827042][T18975] veth1_vlan: entered promiscuous mode [ 1947.012751][T18975] veth0_macvtap: entered promiscuous mode [ 1947.043138][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.064384][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.100182][T18877] veth0_macvtap: entered promiscuous mode [ 1947.128529][T18975] veth1_macvtap: entered promiscuous mode [ 1947.160235][T18877] veth1_macvtap: entered promiscuous mode [ 1947.201339][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.201648][T18975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1947.209754][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.230518][T18975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.240482][T18975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1947.250936][T18975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.264610][T18975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1947.311304][T18987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1947.329370][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1947.345038][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.355940][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1947.366832][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.376978][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1947.391111][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.403132][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1947.422738][T18975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1947.434648][T18975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.446384][T18975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1947.457067][T18975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.469486][T18975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1947.491583][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1947.508316][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.519189][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1947.530917][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.540771][T18877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1947.551893][T18877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1947.564108][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1947.581268][T18975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.614731][T18975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.624287][T18975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.638114][T18975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.671384][T18877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.681349][T18877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.691485][T18877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.701459][T18877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.067353][T18987] veth0_vlan: entered promiscuous mode [ 1953.624502][ T5239] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1953.857951][T18987] veth1_vlan: entered promiscuous mode [ 1954.745793][T17880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.745815][ T2508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.753784][T17880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.767030][T18987] veth0_macvtap: entered promiscuous mode [ 1954.805500][ T2508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.883563][T18987] veth1_macvtap: entered promiscuous mode [ 1954.982464][T17880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.993902][T17880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.065358][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.086388][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.121006][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.173320][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.193275][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.232179][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.270900][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.285731][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.330531][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1955.366819][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.467833][T18987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1955.601670][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.664247][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.831720][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.843493][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.853480][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.864928][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.934641][T19163] netlink: 'syz.2.1847': attribute type 7 has an invalid length. [ 1955.943295][T19163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1847'. [ 1955.973305][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.984568][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.998730][T18987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1956.010965][T18987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1956.020454][T18987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1956.648707][T18987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1956.686049][T18987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.220085][ T1912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.254015][ T1912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.584247][T17880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.742126][ T1912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.826107][ T1912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.146755][T17880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.274470][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1959.409372][T17880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.734694][T19198] netlink: 'syz.0.1853': attribute type 3 has an invalid length. [ 1959.743667][T19198] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1853'. [ 1960.497373][T17880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.003401][T15652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1961.019160][T15652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1961.029415][T15652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1961.038718][T15652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1961.049285][T15652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1961.058875][T15652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1961.236616][T17880] bridge_slave_1: left allmulticast mode [ 1961.260614][T17880] bridge_slave_1: left promiscuous mode [ 1961.284607][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.339047][T17880] bridge_slave_0: left allmulticast mode [ 1961.363429][T17880] bridge_slave_0: left promiscuous mode [ 1961.373815][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.151027][T15652] Bluetooth: hci0: command tx timeout [ 1963.734375][ T8462] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1965.170613][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1965.262964][T15652] Bluetooth: hci0: command tx timeout [ 1965.273193][T19218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1967.018282][T17880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.052576][T17880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1967.082925][T17880] bond0 (unregistering): Released all slaves [ 1967.337598][T15652] Bluetooth: hci0: command tx timeout [ 1967.854766][T16188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1967.876612][T16188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1967.901021][T16188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1967.913100][T16188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1967.922850][T16188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1967.930842][T16188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1968.388183][T17880] hsr_slave_0: left promiscuous mode [ 1968.416324][T17880] hsr_slave_1: left promiscuous mode [ 1968.464002][T17880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1968.509973][T17880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1968.562899][T17880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1968.591047][T17880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1968.728487][T17880] veth1_macvtap: left promiscuous mode [ 1968.754194][T17880] veth0_macvtap: left promiscuous mode [ 1968.771246][T17880] veth1_vlan: left promiscuous mode [ 1968.796443][T17880] veth0_vlan: left promiscuous mode [ 1969.435081][T15652] Bluetooth: hci0: command tx timeout [ 1969.742794][T19263] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 1969.751747][T19263] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1873'. [ 1970.136977][T15652] Bluetooth: hci3: command tx timeout [ 1970.305090][ T8462] usb 2-1: device descriptor read/all, error -110 [ 1970.465990][ T8462] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1970.641074][ T8462] usb 2-1: device descriptor read/64, error -32 [ 1970.779203][ T8462] usb usb2-port1: attempt power cycle [ 1971.975601][ T8462] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1972.027346][ T8462] usb 2-1: device descriptor read/8, error -32 [ 1972.234985][T15652] Bluetooth: hci3: command tx timeout [ 1972.405118][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 1973.443424][ T8462] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1974.457294][T15652] Bluetooth: hci3: command tx timeout [ 1974.485422][ T8462] usb 2-1: device descriptor read/8, error -32 [ 1974.616317][ T8462] usb usb2-port1: unable to enumerate USB device [ 1974.840551][T17880] team0 (unregistering): Port device team_slave_1 removed [ 1974.926197][T16188] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1974.940946][T16188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1974.964666][T16188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1974.978867][T16188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1975.019948][T16188] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1975.028488][T16188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1975.124757][T17880] team0 (unregistering): Port device team_slave_0 removed [ 1976.065319][T19269] bridge0: port 3(team0) entered blocking state [ 1976.071933][T19269] bridge0: port 3(team0) entered disabled state [ 1976.086397][T19269] team0: entered allmulticast mode [ 1976.091519][T19269] team_slave_0: entered allmulticast mode [ 1976.106881][T19269] team_slave_1: entered allmulticast mode [ 1976.127826][T19269] team0: entered promiscuous mode [ 1976.132865][T19269] team_slave_0: entered promiscuous mode [ 1976.147941][T19269] team_slave_1: entered promiscuous mode [ 1976.156600][T19269] bridge0: port 3(team0) entered blocking state [ 1976.163454][T19269] bridge0: port 3(team0) entered forwarding state [ 1976.541625][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.548016][T16188] Bluetooth: hci3: command tx timeout [ 1977.098000][T16188] Bluetooth: hci6: command tx timeout [ 1977.789784][T19216] raw-gadget.0 gadget.1: failed to queue disconnect event [ 1977.881589][T19204] chnl_net:caif_netlink_parms(): no params data found [ 1978.326340][ T1912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.841315][ T1912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.998755][ T1912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.154344][ T1912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.169210][T19239] chnl_net:caif_netlink_parms(): no params data found [ 1979.185505][T16188] Bluetooth: hci6: command tx timeout [ 1979.195951][T19284] chnl_net:caif_netlink_parms(): no params data found [ 1979.288807][T19343] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1979.377008][T19204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.405463][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.415257][T19204] bridge_slave_0: entered allmulticast mode [ 1979.432119][T19204] bridge_slave_0: entered promiscuous mode [ 1979.606290][T19204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.647130][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.654392][T19204] bridge_slave_1: entered allmulticast mode [ 1979.700451][T19204] bridge_slave_1: entered promiscuous mode [ 1980.040015][T19361] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 1980.048667][T19361] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1882'. [ 1981.056512][T19204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.272411][T16188] Bluetooth: hci6: command tx timeout [ 1983.337946][T16188] Bluetooth: hci6: command tx timeout [ 1984.985611][ T941] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1986.864363][T19204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.975639][T19239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.982823][T19239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.020289][T19239] bridge_slave_0: entered allmulticast mode [ 1987.037606][T19239] bridge_slave_0: entered promiscuous mode [ 1987.054848][T19239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.075150][T19239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.082418][T19239] bridge_slave_1: entered allmulticast mode [ 1987.108085][T19239] bridge_slave_1: entered promiscuous mode [ 1987.160735][T19284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.170954][T19284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.186011][T19284] bridge_slave_0: entered allmulticast mode [ 1987.208362][T19284] bridge_slave_0: entered promiscuous mode [ 1987.260231][ T1912] bridge_slave_1: left allmulticast mode [ 1987.267100][ T1912] bridge_slave_1: left promiscuous mode [ 1987.294066][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.307625][ T1912] bridge_slave_0: left allmulticast mode [ 1987.313379][ T1912] bridge_slave_0: left promiscuous mode [ 1987.321727][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.390234][ T1912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.411499][ T1912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.458151][ T1912] bond0 (unregistering): Released all slaves [ 1988.619673][T19204] team0: Port device team_slave_0 added [ 1988.659346][T19204] team0: Port device team_slave_1 added [ 1988.767192][T19284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.781670][T19284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.803824][T19284] bridge_slave_1: entered allmulticast mode [ 1988.821528][T19284] bridge_slave_1: entered promiscuous mode [ 1989.227792][T19239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.282597][T19204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.300252][T19204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.334316][T19204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.377203][T19239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.447730][T19284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.533923][T19204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.542141][T19204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.573960][T19204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.611044][T19239] team0: Port device team_slave_0 added [ 1989.628147][T19284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.703070][T19239] team0: Port device team_slave_1 added [ 1989.887413][ T1912] hsr_slave_0: left promiscuous mode [ 1989.941723][ T1912] hsr_slave_1: left promiscuous mode [ 1989.971670][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1989.988906][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1990.043358][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1990.056243][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1990.139150][ T1912] veth1_macvtap: left promiscuous mode [ 1990.144804][ T1912] veth0_macvtap: left promiscuous mode [ 1990.151193][ T1912] veth1_vlan: left promiscuous mode [ 1990.156946][ T1912] veth0_vlan: left promiscuous mode [ 1990.477040][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 1994.200524][ T1912] team0 (unregistering): Port device team_slave_1 removed [ 1994.329213][ T1912] team0 (unregistering): Port device team_slave_0 removed [ 1995.485311][T19239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.504925][T19239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.535468][T19239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.813567][T19284] team0: Port device team_slave_0 added [ 1996.225851][T19204] hsr_slave_0: entered promiscuous mode [ 1996.375929][T19204] hsr_slave_1: entered promiscuous mode [ 1996.416059][T19239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.337729][T19239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1997.428651][T19239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.489368][T19284] team0: Port device team_slave_1 added [ 1998.342165][T19410] syzkaller0: entered promiscuous mode [ 1998.350477][T19410] syzkaller0: entered allmulticast mode [ 1998.363502][T19284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1998.365113][ T8323] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1998.404715][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1998.477358][T19284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1998.545720][T19284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1998.569650][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1998.602694][T19284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1998.627233][ T8323] usb 1-1: Using ep0 maxpacket: 16 [ 1998.636201][ T8323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1998.657561][ T8323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1998.673105][ T8323] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1998.701953][ T8323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.756699][ T8323] usb 1-1: config 0 descriptor?? [ 1999.046894][T19239] hsr_slave_0: entered promiscuous mode [ 1999.054530][T19239] hsr_slave_1: entered promiscuous mode [ 1999.062589][T19239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1999.070953][T19239] Cannot create hsr debugfs directory [ 1999.194824][T19284] hsr_slave_0: entered promiscuous mode [ 1999.205391][T19284] hsr_slave_1: entered promiscuous mode [ 1999.212215][T19284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1999.220300][T19284] Cannot create hsr debugfs directory [ 1999.236237][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.255797][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.351728][ T8323] hid (null): bogus close delimiter [ 1999.370309][ T8323] hid (null): invalid report_count 58028 [ 1999.387760][ T8323] hid (null): unknown global tag 0xd [ 1999.409834][ T8323] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 1999.435249][ T8323] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 1999.444696][ T8323] hid-generic 0003:0158:0100.001B: bogus close delimiter [ 1999.451950][ T8323] hid-generic 0003:0158:0100.001B: item 0 0 2 10 parsing failed [ 1999.472980][ T8323] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 1999.565497][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.576910][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.588967][ T8323] usb 1-1: USB disconnect, device number 26 [ 2000.338497][T19431] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 2000.346317][T19431] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1893'. [ 2000.465626][ T29] audit: type=1326 audit(1725840362.528:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19421 comm="syz.4.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f383897cef9 code=0x0 [ 2000.488613][ C1] vkms_vblank_simulate: vblank timer overrun [ 2002.593723][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2006.212989][ T29] audit: type=1400 audit(1725840368.368:1012): avc: denied { map } for pid=19460 comm="syz.0.1898" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2006.273991][ T29] audit: type=1400 audit(1725840368.398:1013): avc: denied { read write } for pid=19460 comm="syz.0.1898" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2006.299377][T19463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2006.807995][T17387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.153788][T17387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.209930][T15652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2007.221623][T15652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2007.232787][T15652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2007.245940][T15652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2007.261110][T15652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2007.290564][T15652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2007.445197][T17387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.461374][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1901'. [ 2007.549170][T17387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.651444][T19239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.814364][T19239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.983145][T19239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.180864][T19239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.215761][T17387] bridge_slave_1: left allmulticast mode [ 2008.223220][T17387] bridge_slave_1: left promiscuous mode [ 2008.234250][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.256258][T17387] bridge_slave_0: left allmulticast mode [ 2008.263070][T17387] bridge_slave_0: left promiscuous mode [ 2008.271780][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.029997][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2009.041625][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2009.053663][T17387] bond0 (unregistering): Released all slaves [ 2009.072699][T19470] chnl_net:caif_netlink_parms(): no params data found [ 2009.359061][T16188] Bluetooth: hci1: command tx timeout [ 2009.566932][T19487] netlink: 'syz.0.1903': attribute type 7 has an invalid length. [ 2009.574839][T19487] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1903'. [ 2009.587689][T19487] netlink: 'syz.0.1903': attribute type 3 has an invalid length. [ 2009.596027][T19487] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1903'. [ 2009.662689][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.867081][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.905492][T19470] bridge_slave_0: entered allmulticast mode [ 2010.005209][T19470] bridge_slave_0: entered promiscuous mode [ 2010.078869][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.094498][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.103341][T19470] bridge_slave_1: entered allmulticast mode [ 2010.121591][T19470] bridge_slave_1: entered promiscuous mode [ 2010.516170][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2010.549595][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2010.619135][T17387] hsr_slave_0: left promiscuous mode [ 2010.636148][T17387] hsr_slave_1: left promiscuous mode [ 2010.642519][T17387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.661906][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.680695][T17387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.692944][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.724685][T17387] veth1_macvtap: left promiscuous mode [ 2010.730464][T17387] veth0_macvtap: left promiscuous mode [ 2010.737650][T17387] veth1_vlan: left promiscuous mode [ 2010.743088][T17387] veth0_vlan: left promiscuous mode [ 2011.417155][T16188] Bluetooth: hci1: command tx timeout [ 2011.622445][T17387] team0 (unregistering): Port device team_slave_1 removed [ 2011.701233][T17387] team0 (unregistering): Port device team_slave_0 removed [ 2012.574524][T19239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2012.668076][T19470] team0: Port device team_slave_0 added [ 2012.717187][T19239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2012.729272][T19239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2012.800649][T19470] team0: Port device team_slave_1 added [ 2012.844058][T19239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2012.863324][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.872077][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.898124][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.929535][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.937949][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.976597][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2013.111689][T19470] hsr_slave_0: entered promiscuous mode [ 2013.122635][T19470] hsr_slave_1: entered promiscuous mode [ 2013.134232][T19470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2013.142234][T19470] Cannot create hsr debugfs directory [ 2013.496610][T16188] Bluetooth: hci1: command tx timeout [ 2013.590640][T19204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2013.603041][T19204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2013.635872][T19204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2013.650421][T19204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2013.759298][T19239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2013.783110][T19284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2013.841513][T19284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2013.856048][T19284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2013.897124][T19284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2013.967513][T19239] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.067634][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.074827][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2014.178545][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.185699][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.630093][T19204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2014.704290][T19284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2014.769658][T19470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2014.813001][T19470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2014.872478][T19204] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.899454][T19470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2014.957388][T19470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2014.983588][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.990828][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2015.012180][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.019433][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2015.131312][T19284] 8021q: adding VLAN 0 to HW filter on device team0 [ 2015.203811][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.211170][T17880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2015.274494][T19204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2015.301325][T19204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2015.332964][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.340234][T17880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2015.380941][T19239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2015.581853][T15652] Bluetooth: hci1: command tx timeout [ 2015.794228][T19239] veth0_vlan: entered promiscuous mode [ 2015.896597][T19470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2015.942836][T19239] veth1_vlan: entered promiscuous mode [ 2016.087643][T19470] 8021q: adding VLAN 0 to HW filter on device team0 [ 2016.132600][T17387] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.139855][T17387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.166373][T17387] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.173670][T17387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.210964][T19204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2016.283102][T19239] veth0_macvtap: entered promiscuous mode [ 2016.299003][T19239] veth1_macvtap: entered promiscuous mode [ 2016.359372][T19284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2016.410901][T19239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2016.434479][T19239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2016.445704][T19239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2016.461556][T19239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2016.474592][T19239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2016.488396][T19239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2016.499453][T19239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2016.511813][T19239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2016.523297][T19239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2016.542159][T19239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2016.562632][T19239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.572408][T19239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.582335][T19239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.592269][T19239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.768383][T19204] veth0_vlan: entered promiscuous mode [ 2016.929278][T19204] veth1_vlan: entered promiscuous mode [ 2016.984579][T19284] veth0_vlan: entered promiscuous mode [ 2017.111481][T17387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2017.135784][T19284] veth1_vlan: entered promiscuous mode [ 2017.141745][T17387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2017.233645][T19204] veth0_macvtap: entered promiscuous mode [ 2017.308150][T19204] veth1_macvtap: entered promiscuous mode [ 2017.337915][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2017.361490][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2017.394805][T19470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2017.511070][T19284] veth0_macvtap: entered promiscuous mode [ 2017.562813][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2017.757332][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2017.784928][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2017.805294][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2017.831313][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.098955][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.163897][T19204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2022.567466][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.648266][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.676217][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.704655][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.725725][T19204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.758383][T19204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.782142][T19204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2022.844971][ T5283] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2022.867559][T19284] veth1_macvtap: entered promiscuous mode [ 2023.106492][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.168389][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.214995][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.234918][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.259454][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.288564][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.324943][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.365053][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.407619][T19284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2023.430313][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.466377][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.504946][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.535261][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.555352][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.562938][T16188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2023.584170][T16188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2023.595765][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.613036][T16188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2023.613373][T19284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.643441][T16188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2023.644952][T19284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.666241][T16188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2023.673936][T16188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2023.704365][T19284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.829257][T19284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.854461][T19284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.865430][T19284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.874249][T19284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.145249][T19470] veth0_vlan: entered promiscuous mode [ 2025.736934][T16188] Bluetooth: hci5: command tx timeout [ 2025.876872][T19470] veth1_vlan: entered promiscuous mode [ 2026.909759][T15568] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2027.815816][T16188] Bluetooth: hci5: command tx timeout [ 2029.465192][T15568] usb 1-1: device descriptor read/64, error -71 [ 2029.746109][T15568] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2029.908588][T16188] Bluetooth: hci5: command tx timeout [ 2029.937503][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.963393][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.970903][T19176] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2030.057972][T19634] syzkaller0: entered promiscuous mode [ 2030.064747][T19634] syzkaller0: entered allmulticast mode [ 2030.155319][T19176] usb 3-1: Using ep0 maxpacket: 16 [ 2030.177441][T19470] veth0_macvtap: entered promiscuous mode [ 2030.196913][T19176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2030.226229][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2030.226572][T19176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2030.234758][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.239719][T19470] veth1_macvtap: entered promiscuous mode [ 2030.345764][T19176] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2030.375913][T19176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.417992][T19176] usb 3-1: config 0 descriptor?? [ 2030.583594][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2030.622949][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2030.658092][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2030.823001][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2031.975575][T16188] Bluetooth: hci5: command tx timeout [ 2032.332537][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2032.347801][T19631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.549761][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2032.560531][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2032.921708][ T5239] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2033.409354][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.645103][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2033.657642][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.669021][T19631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.687298][T19470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2033.745240][T19176] usbhid 3-1:0.0: can't add hid device: -71 [ 2033.751541][T19176] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2033.759741][ T5239] usb 2-1: Using ep0 maxpacket: 16 [ 2033.788558][T19176] usb 3-1: USB disconnect, device number 41 [ 2034.124222][ T2523] bridge_slave_1: left allmulticast mode [ 2034.171032][ T2523] bridge_slave_1: left promiscuous mode [ 2034.187550][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.455682][ T2523] bridge_slave_0: left allmulticast mode [ 2034.479448][ T2523] bridge_slave_0: left promiscuous mode [ 2034.504376][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.650531][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.676161][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2035.690423][ T2523] bond0 (unregistering): Released all slaves [ 2035.871850][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2035.890894][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2035.907104][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2035.953991][ T5239] usb 2-1: device descriptor read/all, error -71 [ 2035.963188][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2035.987326][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2036.002005][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2036.012347][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2036.026979][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2036.037677][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2036.052129][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2036.077317][T19470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2036.484378][T19666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2037.980277][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2040.709863][T15652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2040.722415][T15652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2040.766461][T15652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2040.778730][T15652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2040.788817][T15652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2040.796859][T15652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2042.970233][T15652] Bluetooth: hci0: command 0x0409 tx timeout [ 2045.019173][T16188] Bluetooth: hci0: command 0x0409 tx timeout [ 2045.919553][ T2523] hsr_slave_0: left promiscuous mode [ 2045.932689][ T2523] hsr_slave_1: left promiscuous mode [ 2045.952596][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2045.960624][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2045.969255][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2045.984131][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2046.012901][ T2523] veth1_macvtap: left promiscuous mode [ 2046.018541][ T2523] veth0_macvtap: left promiscuous mode [ 2046.024283][ T2523] veth1_vlan: left promiscuous mode [ 2046.030351][ T2523] veth0_vlan: left promiscuous mode [ 2046.878309][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 2046.968192][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 2047.095538][T16188] Bluetooth: hci0: command 0x0409 tx timeout [ 2047.991111][T19470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.004196][T19470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.027466][T19470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.042679][T19470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.092468][T19605] chnl_net:caif_netlink_parms(): no params data found [ 2048.379309][T19720] ALSA: mixer_oss: invalid OSS volume '' [ 2048.392650][T19720] ALSA: mixer_oss: invalid OSS volume '&+'' [ 2048.431468][ T29] audit: type=1400 audit(1725840410.588:1014): avc: denied { create } for pid=19722 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2049.145394][T19605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.175685][T15652] Bluetooth: hci0: command 0x0409 tx timeout [ 2049.205390][T19605] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.212621][T19605] bridge_slave_0: entered allmulticast mode [ 2049.260962][T19605] bridge_slave_0: entered promiscuous mode [ 2049.321347][T19605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.351283][T19605] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.412667][T19605] bridge_slave_1: entered allmulticast mode [ 2049.429996][T19605] bridge_slave_1: entered promiscuous mode [ 2049.572434][ T2523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.752852][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.768376][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.912809][ T2523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.951471][T19605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.023636][ T2523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.138403][T19605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.212341][ T2523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.295316][T15652] Bluetooth: hci4: command 0x0406 tx timeout [ 2050.311340][T17880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2050.329156][T19605] team0: Port device team_slave_0 added [ 2050.346414][T17880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2050.443212][T19605] team0: Port device team_slave_1 added [ 2050.614130][T19605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.653767][T19605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.795184][T19605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.843188][T19685] chnl_net:caif_netlink_parms(): no params data found [ 2051.255393][T16188] Bluetooth: hci0: command 0x0409 tx timeout [ 2051.506586][T19605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.559355][T19605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2051.618936][T19605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.058560][T16188] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2052.067572][T16188] Bluetooth: hci2: Injecting HCI hardware error event [ 2052.081214][T16188] Bluetooth: hci2: hardware error 0x00 [ 2052.881375][ T2523] bridge_slave_1: left allmulticast mode [ 2052.893963][ T2523] bridge_slave_1: left promiscuous mode [ 2052.906256][T19779] binder: 19775:19779 ioctl c00c620f 20000340 returned -22 [ 2052.923962][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.940410][ T2523] bridge_slave_0: left allmulticast mode [ 2052.990813][ T2523] bridge_slave_0: left promiscuous mode [ 2053.008367][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.138853][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2053.716242][T19793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2054.763314][ C0] vkms_vblank_simulate: vblank timer overrun [ 2056.577395][T16188] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2056.744965][ T29] audit: type=1326 audit(1725840418.898:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19802 comm="syz.4.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269c57cef9 code=0x0 [ 2059.533740][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2059.554559][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.591893][ T2523] bond0 (unregistering): Released all slaves [ 2059.685979][T19605] hsr_slave_0: entered promiscuous mode [ 2059.758638][T19605] hsr_slave_1: entered promiscuous mode [ 2059.871399][T19685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.890146][T19685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.910643][T19685] bridge_slave_0: entered allmulticast mode [ 2059.951257][T19685] bridge_slave_0: entered promiscuous mode [ 2060.092364][T19776] veth0_vlan: entered allmulticast mode [ 2060.172810][T19779] veth0_vlan: left promiscuous mode [ 2060.203306][T19779] veth0_vlan: entered promiscuous mode [ 2060.867057][T17774] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2060.881953][T19685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.901119][T19685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.918261][T19685] bridge_slave_1: entered allmulticast mode [ 2060.939613][T19685] bridge_slave_1: entered promiscuous mode [ 2061.090252][T17774] usb 2-1: Using ep0 maxpacket: 16 [ 2061.117388][T17774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2061.145119][T17774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2061.182736][T17774] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2061.227287][T17774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.299840][T17774] usb 2-1: config 0 descriptor?? [ 2061.529670][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2061.708364][T19836] syzkaller0: entered promiscuous mode [ 2061.770369][T19836] syzkaller0: entered allmulticast mode [ 2061.898957][T19685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.929017][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.046020][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.227723][T17774] hid (null): bogus close delimiter [ 2062.233654][ T29] audit: type=1400 audit(1725840424.388:1016): avc: denied { setopt } for pid=19856 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2062.256098][T17774] hid (null): invalid report_count 58028 [ 2062.261988][T17774] hid (null): unknown global tag 0xd [ 2062.289010][T17774] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 2062.301931][T17774] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 2062.310043][T17774] hid-generic 0003:0158:0100.001C: bogus close delimiter [ 2062.556659][T17774] hid-generic 0003:0158:0100.001C: item 0 0 2 10 parsing failed [ 2062.565865][T17774] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 2062.959185][T19836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.124239][T19836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.225839][T19685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2063.298428][T19176] usb 2-1: USB disconnect, device number 38 [ 2070.264691][ T2523] hsr_slave_0: left promiscuous mode [ 2070.280043][ T2523] hsr_slave_1: left promiscuous mode [ 2070.303933][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2070.321204][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2070.336899][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2070.345609][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.541129][ T2523] veth1_macvtap: left promiscuous mode [ 2070.552193][ T2523] veth0_macvtap: left promiscuous mode [ 2070.558212][ T2523] veth1_vlan: left promiscuous mode [ 2070.563509][ T2523] veth0_vlan: left promiscuous mode [ 2072.864930][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 2073.010426][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 2075.350978][T19685] team0: Port device team_slave_0 added [ 2075.685962][T19685] team0: Port device team_slave_1 added [ 2075.768794][T19913] netlink: 'syz.1.1949': attribute type 3 has an invalid length. [ 2075.776617][T19913] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1949'. [ 2076.442024][T19685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.465027][T19685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.531189][T19685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.833595][T15652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2076.844049][T15652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2076.852722][T15652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2076.867219][T15652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2076.880043][T15652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2076.888692][T15652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2077.053799][T19929] binder: BINDER_SET_CONTEXT_MGR already set [ 2077.059991][T19929] binder: 19924:19929 ioctl 4018620d 20000040 returned -16 [ 2077.798482][T19685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2077.842259][T19685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2077.912342][T19685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.241267][ T8323] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2079.377827][T16188] Bluetooth: hci3: command tx timeout [ 2079.625108][ T8323] usb 2-1: Using ep0 maxpacket: 8 [ 2079.697405][ T8323] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.736144][ T8323] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2079.752519][ T8323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2079.771221][ T8323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.875738][ T8323] usbtmc 2-1:16.0: bulk endpoints not found [ 2079.892007][T19685] hsr_slave_0: entered promiscuous mode [ 2080.159285][T19685] hsr_slave_1: entered promiscuous mode [ 2080.195086][T19685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2080.211653][T19685] Cannot create hsr debugfs directory [ 2081.102100][ T2523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.279348][ T2523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.415163][T16188] Bluetooth: hci3: command tx timeout [ 2081.486430][T19954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.495280][T19954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.504001][T19954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.513015][T19954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2081.639210][ T2523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.918637][ T2523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.495500][T16188] Bluetooth: hci3: command tx timeout [ 2085.446911][T19973] netlink: 'syz.0.1955': attribute type 21 has an invalid length. [ 2085.527473][T12262] usb 2-1: USB disconnect, device number 39 [ 2085.575497][T16188] Bluetooth: hci3: command tx timeout [ 2086.830121][T15652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2086.842290][T15652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2086.851237][T15652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2086.862567][T15652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2086.872105][T15652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2086.880007][T15652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2086.969232][T19922] chnl_net:caif_netlink_parms(): no params data found [ 2087.009278][T20001] netlink: 'syz.1.1957': attribute type 3 has an invalid length. [ 2087.017205][T20001] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1957'. [ 2087.264063][ T2523] bridge_slave_1: left allmulticast mode [ 2087.274152][ T2523] bridge_slave_1: left promiscuous mode [ 2087.381132][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.580151][ T2523] bridge_slave_0: left allmulticast mode [ 2087.604173][ T2523] bridge_slave_0: left promiscuous mode [ 2087.633975][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.935169][T15652] Bluetooth: hci1: command tx timeout [ 2089.218681][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.262226][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2089.300744][ T2523] bond0 (unregistering): Released all slaves [ 2089.778704][T20043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1961'. [ 2089.949561][T20043] netlink: 'syz.0.1961': attribute type 15 has an invalid length. [ 2089.964584][T20043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'. [ 2091.015050][T15652] Bluetooth: hci1: command tx timeout [ 2091.038809][T19922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.057081][T19922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.106777][T19922] bridge_slave_0: entered allmulticast mode [ 2091.114743][T19922] bridge_slave_0: entered promiscuous mode [ 2091.214043][ T2523] hsr_slave_0: left promiscuous mode [ 2091.252486][ T2523] hsr_slave_1: left promiscuous mode [ 2091.304642][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.313549][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.338759][T20064] tmpfs: Bad value for 'nr_inodes' [ 2091.351275][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.369119][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.430867][ T2523] veth1_macvtap: left promiscuous mode [ 2091.441816][ T2523] veth0_macvtap: left promiscuous mode [ 2091.481807][ T2523] veth1_vlan: left promiscuous mode [ 2091.501675][ T2523] veth0_vlan: left promiscuous mode [ 2093.103403][T15652] Bluetooth: hci1: command tx timeout [ 2093.472657][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 2093.614195][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 2095.295075][T15652] Bluetooth: hci1: command tx timeout [ 2099.430726][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.073891][T19685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2100.089409][T19922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.100711][T19922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.108887][T19922] bridge_slave_1: entered allmulticast mode [ 2100.117244][T19922] bridge_slave_1: entered promiscuous mode [ 2100.287879][T19685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2100.498740][T19922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2100.533672][T19922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2100.910794][T19922] team0: Port device team_slave_0 added [ 2101.022446][T19922] team0: Port device team_slave_1 added [ 2101.446118][T16188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2101.458214][T16188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2101.504050][T16188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2101.514801][T16188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2101.526181][T16188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2101.533866][T16188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2101.597033][T19922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2101.604764][T19922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2101.693430][T19922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2101.729252][T19922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2101.754193][T19922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2101.821999][T19922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2102.070476][T19997] chnl_net:caif_netlink_parms(): no params data found [ 2102.167118][T19922] hsr_slave_0: entered promiscuous mode [ 2102.186464][T19922] hsr_slave_1: entered promiscuous mode [ 2102.204799][T19922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2102.232882][T19922] Cannot create hsr debugfs directory [ 2102.378452][T16188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2102.396172][T16188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2102.413588][T16188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2102.445005][T16188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2102.461729][T16188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2102.475015][T16188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2102.879183][T20124] syz.0.1971: attempt to access beyond end of device [ 2102.879183][T20124] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2102.892438][T20124] hfsplus: unable to find HFS+ superblock [ 2103.005222][T19997] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.012427][T19997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.047150][T19997] bridge_slave_0: entered allmulticast mode [ 2103.058736][T19997] bridge_slave_0: entered promiscuous mode [ 2103.126499][T19997] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.134542][T19997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.142850][T19997] bridge_slave_1: entered allmulticast mode [ 2103.152997][T19997] bridge_slave_1: entered promiscuous mode [ 2103.224752][T19997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.317812][T19997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.577028][T16188] Bluetooth: hci0: command tx timeout [ 2103.605878][T19997] team0: Port device team_slave_0 added [ 2103.618806][T19997] team0: Port device team_slave_1 added [ 2103.980628][T19997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.987909][T19997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.020693][T19997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.079052][T19997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.086391][T19997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.112456][T19997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.200356][T15568] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2104.275644][ T2523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2104.287089][ T2523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.395088][T15568] usb 1-1: Using ep0 maxpacket: 16 [ 2104.402650][T15568] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.413209][T15568] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2104.426343][T15568] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2104.435530][T15568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.447374][T15568] usb 1-1: config 0 descriptor?? [ 2104.457050][T15568] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2104.503567][T19997] hsr_slave_0: entered promiscuous mode [ 2104.514361][T19997] hsr_slave_1: entered promiscuous mode [ 2104.522042][T19997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2104.531034][T19997] Cannot create hsr debugfs directory [ 2104.538404][T16188] Bluetooth: hci5: command tx timeout [ 2104.551568][T20101] chnl_net:caif_netlink_parms(): no params data found [ 2104.594611][ T2523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2104.605473][ T2523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.772598][ T2523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2104.786683][ T2523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.850513][T20115] chnl_net:caif_netlink_parms(): no params data found [ 2104.928400][ T2523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2104.938969][ T2523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.000479][T19922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2105.038139][T20138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.068446][T20138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.106973][T20101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.114104][T20101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.123090][T20101] bridge_slave_0: entered allmulticast mode [ 2105.132764][T20101] bridge_slave_0: entered promiscuous mode [ 2105.141533][T19922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2105.156242][T19922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2105.201059][T20101] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.210191][T20101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.217954][T20101] bridge_slave_1: entered allmulticast mode [ 2105.225290][T20101] bridge_slave_1: entered promiscuous mode [ 2105.264469][T19922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2105.314738][T20115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.322241][T20115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.330542][T20115] bridge_slave_0: entered allmulticast mode [ 2105.339762][T20115] bridge_slave_0: entered promiscuous mode [ 2105.351859][T20101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.368685][T20101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.382850][T20115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.398308][T20115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.407662][T20115] bridge_slave_1: entered allmulticast mode [ 2105.414667][T20115] bridge_slave_1: entered promiscuous mode [ 2105.540551][T20101] team0: Port device team_slave_0 added [ 2105.620526][T20101] team0: Port device team_slave_1 added [ 2105.639498][T20115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.662157][T16188] Bluetooth: hci0: command tx timeout [ 2105.744260][T20115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.798297][T20101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.809918][T20101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.816467][ T30] INFO: task syz.2.1858:19169 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2105.844121][ T30] Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 2105.851922][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2105.861128][ T30] task:syz.2.1858 state:D stack:25648 pid:19169 tgid:19169 ppid:18975 flags:0x00004004 [ 2105.871607][ T30] Call Trace: [ 2105.875362][T20101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.887803][ T30] [ 2105.890845][ T30] __schedule+0xe37/0x5490 [ 2105.925370][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2105.930665][ T30] ? __pfx___schedule+0x10/0x10 [ 2105.954737][ T30] ? schedule+0x298/0x350 [ 2105.985553][ T30] ? __pfx_lock_release+0x10/0x10 [ 2105.990653][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 2106.025112][ T30] ? __mutex_trylock_common+0x78/0x250 [ 2106.030677][ T30] schedule+0xe7/0x350 [ 2106.034810][ T30] schedule_preempt_disabled+0x13/0x30 [ 2106.054919][ T30] __mutex_lock+0x5b8/0x9c0 [ 2106.059498][ T30] ? hugetlb_wp+0x1e16/0x2980 [ 2106.064197][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2106.070711][ T30] ? hugetlb_wp+0x1e16/0x2980 [ 2106.075840][ T30] hugetlb_wp+0x1e16/0x2980 [ 2106.080413][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 2106.085905][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2106.091308][ T30] ? __filemap_get_folio+0x2a1/0xae0 [ 2106.097285][ T30] hugetlb_fault+0x1f64/0x27f0 [ 2106.102098][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 2106.110252][ T30] ? find_vma+0xc0/0x140 [ 2106.114537][ T30] ? __pfx_find_vma+0x10/0x10 [ 2106.120952][ T30] handle_mm_fault+0x956/0xa60 [ 2106.126244][ T30] ? __pkru_allows_pkey+0x21/0xb0 [ 2106.131298][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 2106.136965][ T30] exc_page_fault+0x5c/0xc0 [ 2106.141508][ T30] asm_exc_page_fault+0x26/0x30 [ 2106.146977][ T30] RIP: 0033:0x7f9864c44121 [ 2106.151403][ T30] RSP: 002b:00007ffc35ae0090 EFLAGS: 00010246 [ 2106.157625][ T30] RAX: 0000000020000540 RBX: 0000000000000004 RCX: 0000000000000000 [ 2106.165822][ T30] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 000055556de5e3c8 [ 2106.173805][ T30] RBP: 00007ffc35ae01a8 R08: 0000000000000000 R09: 0000000000000000 [ 2106.181835][ T30] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000001de08b [ 2106.190155][ T30] R13: 00007ffc35ae01d0 R14: 0000000000000032 R15: fffffffffffffffe [ 2106.198554][ T30] [ 2106.201609][ T30] INFO: task syz.2.1858:19172 blocked for more than 143 seconds. [ 2106.211514][ T30] Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 2106.219720][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2106.230197][ T30] task:syz.2.1858 state:D stack:27952 pid:19172 tgid:19169 ppid:18975 flags:0x00004006 [ 2106.240798][ T30] Call Trace: [ 2106.244096][ T30] [ 2106.247736][ T30] __schedule+0xe37/0x5490 [ 2106.252192][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2106.258064][ T30] ? __pfx_mark_lock+0x10/0x10 [ 2106.262886][ T30] ? __pfx___schedule+0x10/0x10 [ 2106.268339][ T30] ? schedule+0x298/0x350 [ 2106.272706][ T30] ? __pfx_lock_release+0x10/0x10 [ 2106.278484][ T30] schedule+0xe7/0x350 [ 2106.282596][ T30] io_schedule+0xbf/0x130 [ 2106.298543][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 2106.303896][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 2106.315062][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2106.320934][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 2106.338355][ T30] ? __pfx___might_resched+0x10/0x10 [ 2106.343689][ T30] ? __vma_reservation_common+0x270/0x740 [ 2106.350366][ T30] __filemap_get_folio+0x6ab/0xae0 [ 2106.355982][ T30] ? huge_pte_alloc+0x22e/0x3a0 [ 2106.360874][ T30] hugetlb_fault+0x1605/0x27f0 [ 2106.366642][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 2106.371811][ T30] ? find_vma+0xc0/0x140 [ 2106.376727][ T30] ? __pfx_find_vma+0x10/0x10 [ 2106.381445][ T30] handle_mm_fault+0x956/0xa60 [ 2106.386960][ T30] ? __pkru_allows_pkey+0x21/0xb0 [ 2106.392025][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 2106.397866][ T30] exc_page_fault+0x5c/0xc0 [ 2106.402416][ T30] asm_exc_page_fault+0x26/0x30 [ 2106.407972][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 2106.413815][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 2106.435364][ T30] RSP: 0018:ffffc90003487c48 EFLAGS: 00050246 [ 2106.441499][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 2106.451968][ T30] RDX: fffff52000690f98 RSI: ffffc90003487cb8 RDI: 000000002001a448 [ 2106.460395][ T30] RBP: 000000002001a448 R08: 0000000000000000 R09: fffff52000690f97 [ 2106.468840][ T30] R10: ffffc90003487cbf R11: 0000000000000000 R12: ffffc90003487cb8 [ 2106.477335][ T30] R13: 000000002001a450 R14: 0000000000000000 R15: 0000000020019680 [ 2106.485842][ T30] _copy_to_user+0xac/0xc0 [ 2106.490297][ T30] msr_read+0x155/0x250 [ 2106.494478][ T30] ? __pfx_msr_read+0x10/0x10 [ 2106.499943][ T30] ? security_file_permission+0x98/0xc0 [ 2106.506157][ T30] ? __pfx_msr_read+0x10/0x10 [ 2106.510869][ T30] vfs_read+0x1d4/0xbd0 [ 2106.515257][ T30] ? __pfx_vfs_read+0x10/0x10 [ 2106.521042][ T30] ? do_futex+0x123/0x350 [ 2106.526793][ T30] ? __fget_files+0x256/0x400 [ 2106.531686][ T30] ? __fget_light+0x173/0x210 [ 2106.536710][ T30] ksys_read+0x12f/0x260 [ 2106.541060][ T30] ? __pfx_ksys_read+0x10/0x10 [ 2106.546376][ T30] do_syscall_64+0xcd/0x250 [ 2106.550929][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.558079][ T30] RIP: 0033:0x7f9864d7cef9 [ 2106.562492][ T30] RSP: 002b:00007f9865b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2106.571073][ T30] RAX: ffffffffffffffda RBX: 00007f9864f35f80 RCX: 00007f9864d7cef9 [ 2106.579394][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000004 [ 2106.587876][ T30] RBP: 00007f9864def046 R08: 0000000000000000 R09: 0000000000000000 [ 2106.595926][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2106.604001][ T30] R13: 0000000000000000 R14: 00007f9864f35f80 R15: 00007ffc35adff68 [ 2106.612157][ T30] [ 2106.615030][T16188] Bluetooth: hci5: command tx timeout [ 2106.623440][ T30] [ 2106.623440][ T30] Showing all locks held in the system: [ 2106.631392][ T30] 3 locks held by kworker/u8:1/12: [ 2106.645570][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2106.664909][ T30] #1: ffffc90000117d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2106.695085][ T30] #2: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2106.704223][ T30] 1 lock held by khungtaskd/30: [ 2106.725044][ T30] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 2106.744956][ T30] 6 locks held by kworker/u8:9/2523: [ 2106.750269][ T30] #0: ffff88801bae3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2106.775051][ T30] #1: ffffc90009a57d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2106.794932][ T30] #2: ffffffff8fa20190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbb0 [ 2106.804319][ T30] #3: ffff88807a3310e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 2106.845039][ T30] #4: ffff88807a337250 (&devlink->lock_key#104){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 2106.872933][ T30] #5: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0 [ 2106.882704][ T30] 2 locks held by dhcpcd/4889: [ 2106.894945][ T30] #0: ffffffff8fa0b6c8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4a8/0x6c0 [ 2106.904343][ T30] #1: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xcf/0xa80 [ 2106.924426][ T30] 2 locks held by getty/4981: [ 2106.932208][ T30] #0: ffff88803066a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2106.964798][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 2106.989704][ T30] 2 locks held by kworker/u8:15/9016: [ 2106.996204][ T30] #0: ffff8880b883edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2107.009481][ T30] #1: ffff8880b8828a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 2107.023979][ T30] 3 locks held by kworker/1:8/15568: [ 2107.030213][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2107.041072][ T30] #1: ffffc900037c7d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2107.050982][ T30] #2: ffffffff8ddc5778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2107.061211][ T30] 3 locks held by kworker/u8:7/17880: [ 2107.067123][ T30] #0: ffff88802fea3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2107.078304][ T30] #1: ffffc900038f7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2107.090621][ T30] #2: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 2107.100875][ T30] 2 locks held by syz.2.1858/19169: [ 2107.107591][ T30] #0: ffff888022e93118 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 2107.117840][ T30] #1: ffff888021286848 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x1e16/0x2980 [ 2107.128544][ T30] 3 locks held by syz.2.1858/19172: [ 2107.134074][ T30] #0: ffff888022e93118 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 2107.144355][ T30] #1: ffff888021286848 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x313/0x27f0 [ 2107.155360][ T30] #2: ffff88807da7a4e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_vma_lock_read+0x105/0x140 [ 2107.165872][ T30] 1 lock held by syz-executor/19922: [ 2107.171249][ T30] #0: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2107.180949][ T30] 5 locks held by syz-executor/19997: [ 2107.186543][ T30] #0: ffff8880357c2420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 2107.195671][ T30] #1: ffff8880246d7c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 2107.205617][ T30] #2: ffff888025990788 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 2107.216618][ T30] #3: ffffffff8efcaca8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 2107.226966][ T30] #4: ffff88807a3310e8 (&dev->mutex){....}-{3:3}, at: device_del+0xa1/0x9f0 [ 2107.237097][ T30] 3 locks held by syz-executor/20101: [ 2107.242484][ T30] #0: ffff8880679f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 2107.252429][ T30] #1: ffff8880679f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 2107.262681][ T30] #2: ffffffff8fc9ca68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 2107.272891][ T30] 2 locks held by syz-executor/20115: [ 2107.278356][ T30] #0: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2107.287902][ T30] #1: ffffffff8ddc5778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2107.298022][ T30] 1 lock held by syz.0.1972/20138: [ 2107.303135][ T30] #0: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 2107.335738][ T30] [ 2107.338660][ T30] ============================================= [ 2107.338660][ T30] [ 2107.358427][ T30] NMI backtrace for cpu 1 [ 2107.362793][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 2107.373317][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2107.383385][ T30] Call Trace: [ 2107.386663][ T30] [ 2107.389588][ T30] dump_stack_lvl+0x116/0x1f0 [ 2107.394270][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2107.399212][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2107.405199][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2107.411184][ T30] watchdog+0xf0c/0x1240 [ 2107.415431][ T30] ? __pfx_watchdog+0x10/0x10 [ 2107.420104][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2107.425309][ T30] ? __kthread_parkme+0x148/0x220 [ 2107.430335][ T30] ? __pfx_watchdog+0x10/0x10 [ 2107.435008][ T30] kthread+0x2c1/0x3a0 [ 2107.439080][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2107.444291][ T30] ? __pfx_kthread+0x10/0x10 [ 2107.448883][ T30] ret_from_fork+0x45/0x80 [ 2107.453304][ T30] ? __pfx_kthread+0x10/0x10 [ 2107.457895][ T30] ret_from_fork_asm+0x1a/0x30 [ 2107.462678][ T30] [ 2107.466355][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2107.471589][ C0] NMI backtrace for cpu 0 [ 2107.471612][ C0] CPU: 0 UID: 0 PID: 9016 Comm: kworker/u8:15 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 2107.471638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2107.471652][ C0] Workqueue: bat_events batadv_nc_worker [ 2107.471683][ C0] RIP: 0010:lock_release+0x204/0x6f0 [ 2107.471715][ C0] Code: 00 00 4d 8d b7 d8 0a 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 7c 04 00 00 <45> 8b af d8 0a 00 00 45 85 ed 0f 84 c8 02 00 00 48 8d 4c 24 50 44 [ 2107.471736][ C0] RSP: 0018:ffffc900041a7ac8 EFLAGS: 00000046 [ 2107.471752][ C0] RAX: 0000000000000000 RBX: 1ffff92000834f5b RCX: 0000000000000001 [ 2107.471767][ C0] RDX: 1ffff1100565451b RSI: ffffffff8b4cda00 RDI: ffffffff8bb0fb80 [ 2107.471782][ C0] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff2028983 [ 2107.471796][ C0] R10: ffffffff90144c1f R11: 0000000000000000 R12: ffffffff8ddb9fe0 [ 2107.471811][ C0] R13: 000000000003db0c R14: ffff88802b2a28d8 R15: ffff88802b2a1e00 [ 2107.471826][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2107.471847][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2107.471863][ C0] CR2: 0000557a13a86078 CR3: 0000000024036000 CR4: 00000000003506f0 [ 2107.471885][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2107.471898][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2107.471912][ C0] Call Trace: [ 2107.471919][ C0] [ 2107.471927][ C0] ? show_regs+0x8c/0xa0 [ 2107.471957][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2107.471986][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2107.472014][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2107.472035][ C0] ? lock_release+0x204/0x6f0 [ 2107.472062][ C0] ? default_do_nmi+0x6a/0x160 [ 2107.472085][ C0] ? exc_nmi+0x170/0x1e0 [ 2107.472106][ C0] ? end_repeat_nmi+0xf/0x53 [ 2107.472135][ C0] ? lock_release+0x204/0x6f0 [ 2107.472163][ C0] ? lock_release+0x204/0x6f0 [ 2107.472191][ C0] ? lock_release+0x204/0x6f0 [ 2107.472218][ C0] [ 2107.472225][ C0] [ 2107.472232][ C0] ? batadv_nc_worker+0x887/0x1060 [ 2107.472260][ C0] ? __pfx_lock_release+0x10/0x10 [ 2107.472289][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2107.472320][ C0] batadv_nc_worker+0x88c/0x1060 [ 2107.472353][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2107.472381][ C0] ? __pfx_lock_release+0x10/0x10 [ 2107.472416][ C0] process_one_work+0x9c5/0x1b40 [ 2107.472452][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2107.472480][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2107.472514][ C0] ? assign_work+0x1a0/0x250 [ 2107.472542][ C0] worker_thread+0x6c8/0xed0 [ 2107.472576][ C0] ? __kthread_parkme+0x148/0x220 [ 2107.472601][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2107.472630][ C0] kthread+0x2c1/0x3a0 [ 2107.472651][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2107.472677][ C0] ? __pfx_kthread+0x10/0x10 [ 2107.472700][ C0] ret_from_fork+0x45/0x80 [ 2107.472728][ C0] ? __pfx_kthread+0x10/0x10 [ 2107.472751][ C0] ret_from_fork_asm+0x1a/0x30 [ 2107.472786][ C0] [ 2107.501064][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2107.501081][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 2107.501110][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2107.501124][ T30] Call Trace: [ 2107.501133][ T30] [ 2107.501143][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2107.501175][ T30] panic+0x6dc/0x7c0 [ 2107.501207][ T30] ? __pfx_panic+0x10/0x10 [ 2107.501236][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2107.501265][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2107.501296][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2107.501322][ T30] ? watchdog+0xd76/0x1240 [ 2107.501344][ T30] ? watchdog+0xd69/0x1240 [ 2107.501371][ T30] watchdog+0xd87/0x1240 [ 2107.501400][ T30] ? __pfx_watchdog+0x10/0x10 [ 2107.501422][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2107.501455][ T30] ? __kthread_parkme+0x148/0x220 [ 2107.501484][ T30] ? __pfx_watchdog+0x10/0x10 [ 2107.501507][ T30] kthread+0x2c1/0x3a0 [ 2107.501532][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2107.501582][ T30] ? __pfx_kthread+0x10/0x10 [ 2107.501610][ T30] ret_from_fork+0x45/0x80 [ 2107.501642][ T30] ? __pfx_kthread+0x10/0x10 [ 2107.501668][ T30] ret_from_fork_asm+0x1a/0x30 [ 2107.501714][ T30] [ 2107.505954][ T30] Kernel Offset: disabled [ 2107.909040][ T30] Rebooting in 86400 seconds..