last executing test programs: 34.339307989s ago: executing program 0 (id=225): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 32.175212091s ago: executing program 0 (id=232): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) close_range(r0, 0xffffffffffffffff, 0x0) 23.615110405s ago: executing program 0 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3], 0x20000600}}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 21.788081749s ago: executing program 0 (id=266): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 20.804248908s ago: executing program 0 (id=268): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000020000040000000000000000020000000000000000000000020000000000000001000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000c600f20000000029c03306635ad52eff2b35be5eb610e76d6e241e8dc15f687ccb6478f300002a6c6c18a2ef2d0fcc0eec6e22c6ddfb3dac17a23b5b05ffde6bfeb4ae8e65ae286495927578f90ee50f0c1a57e986bc9981d2f33ff39886fb27a67c5634cbf967daa9150be8dd4d83760ae4de1a38a5f6b6d9fd", @ANYRES32=0x0, @ANYRES32=r2], 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c805}, 0x4048080) syz_emit_vhci(0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 18.066317224s ago: executing program 0 (id=274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}], 0x18, 0x400c0}, 0x4080) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x106) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x3ff, 0xc, 0x4, 0x80, 0x1, {}, {0x4, 0x1, 0xc, 0xd8, 0x3, 0x6, "ffad66d7"}, 0x5, 0x1, {}, 0x5}) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0]) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40022020}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x90, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xd2c21bca7f162fa5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x66}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x0, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x84360}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0xffffffffffffffdb, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0xffd}}}}}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r3) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={0x3c, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40010) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 10.293543404s ago: executing program 4 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x141, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) chdir(0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0xc34373f6749da572, 0x0, &(0x7f0000000300)) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 9.857045783s ago: executing program 1 (id=295): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4048800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0}) 9.78438982s ago: executing program 4 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800"], 0xfdef) 8.976119871s ago: executing program 4 (id=300): sched_setaffinity(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(0x0, 0xd) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) 7.769386639s ago: executing program 3 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.630612354s ago: executing program 3 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x141, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) chdir(0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0xc34373f6749da572, 0x0, &(0x7f0000000300)) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 7.460013792s ago: executing program 3 (id=308): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.880585261s ago: executing program 1 (id=309): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.839370474s ago: executing program 2 (id=310): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) fdatasync(r0) 4.216360355s ago: executing program 2 (id=311): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.184035259s ago: executing program 2 (id=312): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 4.115252027s ago: executing program 3 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x4000000) 3.980408882s ago: executing program 1 (id=314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000"], 0x38}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLI'], 0x86) dup3(0xffffffffffffffff, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480"], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES8=r3], 0xfc}}, 0x0) 3.957011427s ago: executing program 3 (id=315): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="c24863a53204db47f1e62cbe0fd200050601020000000000020000bb38030900020073236f0000f905"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24008095) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 3.435000301s ago: executing program 2 (id=316): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 3.227105913s ago: executing program 1 (id=317): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff08, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r4, 0x1, 0x81}, 0x14) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 3.226022733s ago: executing program 4 (id=318): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.417006894s ago: executing program 32 (id=274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}], 0x18, 0x400c0}, 0x4080) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x106) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x3ff, 0xc, 0x4, 0x80, 0x1, {}, {0x4, 0x1, 0xc, 0xd8, 0x3, 0x6, "ffad66d7"}, 0x5, 0x1, {}, 0x5}) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0]) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40022020}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x90, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xd2c21bca7f162fa5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x66}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x0, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x84360}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0xffffffffffffffdb, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0xffd}}}}}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r3) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={0x3c, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40010) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 2.388089588s ago: executing program 1 (id=320): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.387370498s ago: executing program 2 (id=321): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) open(0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x40000001, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) geteuid() 2.307092294s ago: executing program 4 (id=322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f462d5fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b0200000000000000ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee38192714820d000000000000004db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343eff5aa6a663188bca70f2d69d80a605e4", 0xd4}], 0x2, 0x0, 0x0, 0x40480c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.941551766s ago: executing program 1 (id=323): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 263.260488ms ago: executing program 4 (id=324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000500), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x2c}}, 0x0) 80.600475ms ago: executing program 2 (id=325): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 3 (id=326): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 43.695459][ T4169] cgroup: Unknown subsys name 'net' [ 43.818627][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.075681][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 46.363527][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 46.454222][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 46.464054][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 46.511678][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 46.555454][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 46.586315][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.593581][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.601691][ T4184] device bridge_slave_0 entered promiscuous mode [ 46.616413][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.623532][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.631594][ T4184] device bridge_slave_1 entered promiscuous mode [ 46.688101][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.695437][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.703208][ T4185] device bridge_slave_0 entered promiscuous mode [ 46.724015][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.734123][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.741255][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.749372][ T4191] device bridge_slave_0 entered promiscuous mode [ 46.756643][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.764480][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.772155][ T4185] device bridge_slave_1 entered promiscuous mode [ 46.783212][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.796615][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.803908][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.811965][ T4191] device bridge_slave_1 entered promiscuous mode [ 46.860258][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.875271][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.882345][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.890285][ T4189] device bridge_slave_0 entered promiscuous mode [ 46.911057][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.922357][ T4184] team0: Port device team_slave_0 added [ 46.928865][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.936113][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.944462][ T4189] device bridge_slave_1 entered promiscuous mode [ 46.957321][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.974159][ T4184] team0: Port device team_slave_1 added [ 46.987289][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.994493][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.002567][ T4192] device bridge_slave_0 entered promiscuous mode [ 47.023786][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.045047][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.052181][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.060120][ T4192] device bridge_slave_1 entered promiscuous mode [ 47.069424][ T4185] team0: Port device team_slave_0 added [ 47.087793][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.094851][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.120860][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.134619][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.150267][ T4185] team0: Port device team_slave_1 added [ 47.158256][ T4191] team0: Port device team_slave_0 added [ 47.164712][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.171666][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.197693][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.210438][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.238652][ T4191] team0: Port device team_slave_1 added [ 47.256063][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.280686][ T4189] team0: Port device team_slave_0 added [ 47.296721][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.307669][ T4189] team0: Port device team_slave_1 added [ 47.327147][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.334833][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.361750][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.373898][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.380846][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.406773][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.435849][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.442813][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.469596][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.481295][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.488501][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.514619][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.526076][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.538877][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.565372][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.588207][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.595211][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.621301][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.642642][ T4184] device hsr_slave_0 entered promiscuous mode [ 47.649369][ T4184] device hsr_slave_1 entered promiscuous mode [ 47.658214][ T4192] team0: Port device team_slave_0 added [ 47.671031][ T4192] team0: Port device team_slave_1 added [ 47.716794][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.723795][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.749865][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.769971][ T4191] device hsr_slave_0 entered promiscuous mode [ 47.776985][ T4191] device hsr_slave_1 entered promiscuous mode [ 47.783787][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.791562][ T4191] Cannot create hsr debugfs directory [ 47.807423][ T4185] device hsr_slave_0 entered promiscuous mode [ 47.814231][ T4185] device hsr_slave_1 entered promiscuous mode [ 47.820657][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.828298][ T4185] Cannot create hsr debugfs directory [ 47.843394][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.850677][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.876943][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.902184][ T4189] device hsr_slave_0 entered promiscuous mode [ 47.909034][ T4189] device hsr_slave_1 entered promiscuous mode [ 47.916004][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.924045][ T4189] Cannot create hsr debugfs directory [ 48.024971][ T4192] device hsr_slave_0 entered promiscuous mode [ 48.035109][ T4192] device hsr_slave_1 entered promiscuous mode [ 48.041540][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.049371][ T4192] Cannot create hsr debugfs directory [ 48.103875][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 48.113022][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 48.173016][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 48.183720][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 48.189896][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 48.313327][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.324637][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.334085][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.350331][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.376283][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.390966][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.402525][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.427112][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.459312][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.476888][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.513412][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.533385][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.544518][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.557548][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.580463][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.592130][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.638295][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.679051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.688960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.701124][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.710454][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.728379][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.744088][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.754127][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.765858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.778544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.788590][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.795849][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.807940][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.820655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.860000][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.870200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.880213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.890365][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.897451][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.905938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.914869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.941124][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.954320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.965466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.975293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.985834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.994639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.003227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.011379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.020121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.028864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.036834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.048397][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.066485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.074611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.082906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.091108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.100591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.109415][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.116530][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.125250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.134246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.142583][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.149668][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.157673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.169097][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.212566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.223832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.232371][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.239497][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.247989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.263733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.272353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.281881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.291302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.300524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.309092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.317593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.326139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.336051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.352147][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.361747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.371590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.382350][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389460][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.415554][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.424926][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.467393][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.480921][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.489916][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.500588][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.509570][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.518988][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.527879][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.537406][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.546140][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.580896][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.590954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.600095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.610509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.620063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.628836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.637416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.647158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.655587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.665882][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.678640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.687920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.698639][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.705744][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.715597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.737802][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.762608][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.779205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.788604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.802173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.812400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.821996][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.829128][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.863447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.884948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.896657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.906265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.915665][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.922731][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.931291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.940783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.951339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.960192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.969422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.977984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.986842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.994911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.015992][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.027801][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.042612][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.050544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.059974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.068044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.077682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.086784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.099229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.113636][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.120800][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.141933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.183323][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 50.189386][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 50.195948][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.206899][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.217302][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.226422][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.235666][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.251737][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.253487][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 50.260866][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 50.271282][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 50.278768][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.287414][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.296282][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.305011][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.312458][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.320066][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.335255][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.347463][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.374508][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.385053][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.405625][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.420741][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.457035][ T4189] device veth0_vlan entered promiscuous mode [ 50.476234][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.488506][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.498393][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.507920][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.538883][ T4189] device veth1_vlan entered promiscuous mode [ 50.546304][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.559779][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.569382][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.586278][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.597832][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.612241][ T4184] device veth0_vlan entered promiscuous mode [ 50.638728][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.647556][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.659488][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.669035][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.676950][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.685290][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.693439][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.703975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.712404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.722661][ T4184] device veth1_vlan entered promiscuous mode [ 50.738478][ T4189] device veth0_macvtap entered promiscuous mode [ 50.748933][ T4189] device veth1_macvtap entered promiscuous mode [ 50.757534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.767121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.775547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.783593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.792100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.801098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.812460][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.837495][ T4191] device veth0_vlan entered promiscuous mode [ 50.845627][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.854283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.862473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.892113][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.901634][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.915360][ T4184] device veth0_macvtap entered promiscuous mode [ 50.926020][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.938237][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.951292][ T4191] device veth1_vlan entered promiscuous mode [ 50.962350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.970935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.979862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.988949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.997709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.009095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.017852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.029609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.040449][ T4184] device veth1_macvtap entered promiscuous mode [ 51.065040][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.073989][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.082677][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.092662][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.105002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.113921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.122144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.131279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.149751][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.158460][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.181122][ T4192] device veth0_vlan entered promiscuous mode [ 51.191148][ T4185] device veth0_vlan entered promiscuous mode [ 51.198582][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.206980][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.215846][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.224201][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.232500][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.240929][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.255194][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.266126][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.278270][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.303345][ T4185] device veth1_vlan entered promiscuous mode [ 51.311008][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.319384][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.329280][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.342327][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.353470][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.364730][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.390320][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.404877][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.416318][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.425265][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.437059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.446573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.457980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.466812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.477258][ T4192] device veth1_vlan entered promiscuous mode [ 51.507746][ T4191] device veth0_macvtap entered promiscuous mode [ 51.550370][ T4192] device veth0_macvtap entered promiscuous mode [ 51.572190][ T4191] device veth1_macvtap entered promiscuous mode [ 51.583768][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.591888][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.602305][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.610865][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.634802][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.649615][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.658730][ T4185] device veth0_macvtap entered promiscuous mode [ 51.673716][ T4192] device veth1_macvtap entered promiscuous mode [ 51.689614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.704327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.712046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.722770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.731415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.741002][ T4185] device veth1_macvtap entered promiscuous mode [ 51.767673][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.778945][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.789099][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.800228][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.811698][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.819902][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.831570][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.841920][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.853017][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.862837][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.874769][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.886197][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.902606][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.914420][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.924348][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.936019][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.946101][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.956777][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.966620][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.977241][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.988764][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.002800][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.016009][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.024779][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.033950][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.042444][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.051435][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.060676][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.070896][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.082214][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.092750][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.104455][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.115813][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.129098][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.139984][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.150063][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.163690][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.173987][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.184701][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.195840][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.210601][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.222455][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.232573][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.243138][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.253944][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.254077][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 52.266283][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.275999][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 52.280237][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.296885][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.307804][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.316428][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.326404][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.335339][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 52.336577][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.342571][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 52.355756][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 52.356012][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.372257][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.381157][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.391727][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.400594][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.409651][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.419418][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.434693][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.443235][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.452021][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.461134][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.466506][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.477932][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.499644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.510935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.519088][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.527853][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.539150][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.551396][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.561130][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.570019][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.655265][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.664781][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.714526][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.810643][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.827440][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.855611][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.865695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.879925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.896799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.933767][ T26] audit: type=1800 audit(1773275845.906:2): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 52.940886][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.972379][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.987179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.012535][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.031387][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.050680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.076150][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.078051][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.109711][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.156074][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.189088][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.232338][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.499478][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 53.499776][ T4279] Zero length message leads to an empty skb [ 53.501683][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.501734][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.520731][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.520762][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.767325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 53.776760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 53.785728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 53.794728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 53.803653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 53.812624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 53.821573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 53.830562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.839504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.848492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 53.960385][ T4284] QAT: failed to copy from user cfg_data. [ 53.983103][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 53.993033][ T4284] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 54.458710][ T4197] Bluetooth: hci0: command 0x0419 tx timeout [ 54.483074][ T4260] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.647105][ T4197] Bluetooth: hci4: command 0x0419 tx timeout [ 54.663961][ T4197] Bluetooth: hci2: command 0x0419 tx timeout [ 54.676714][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 54.694170][ T4197] Bluetooth: hci1: command 0x0419 tx timeout [ 54.706544][ T4197] Bluetooth: hci3: command 0x0419 tx timeout [ 54.773173][ T4260] usb 1-1: Using ep0 maxpacket: 16 [ 54.959386][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.970189][ T4260] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.173506][ T4260] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.750745][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.759066][ T4260] usb 1-1: Product: syz [ 55.763482][ T4260] usb 1-1: Manufacturer: syz [ 55.768126][ T4260] usb 1-1: SerialNumber: syz [ 55.973118][ T26] audit: type=1800 audit(1773275848.946:3): pid=4309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 56.173334][ T4260] usb 1-1: 0:2 : does not exist [ 56.202012][ T4260] usb 1-1: USB disconnect, device number 2 [ 56.525802][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.664843][ T4327] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 58.364861][ T4332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20'. [ 58.378195][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.386166][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.909381][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.937645][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.960961][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.986425][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.382344][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 61.402251][ T4362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 63.119915][ T4386] sctp: [Deprecated]: syz.2.25 (pid 4386) Use of int in maxseg socket option. [ 63.119915][ T4386] Use struct sctp_assoc_value instead [ 63.904421][ T4392] loop6: detected capacity change from 0 to 7 [ 63.947278][ T4392] Dev loop6: unable to read RDB block 7 [ 64.003423][ T4392] loop6: unable to read partition table [ 64.016788][ T4398] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 64.016922][ T4392] loop6: partition table beyond EOD, [ 64.028277][ T4394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 64.045041][ T4394] netlink: 68 bytes leftover after parsing attributes in process `syz.2.35'. [ 64.062275][ T4392] truncated [ 64.066860][ T4392] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 64.102699][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.112157][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.130636][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.138497][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.636714][ T4394] ALSA: mixer_oss: invalid OSS volume 'LI' [ 64.748229][ T4415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41'. [ 64.800804][ T4417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 65.377856][ T26] audit: type=1800 audit(1773275858.356:4): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.44" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 65.563143][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 65.571910][ T4418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43'. [ 65.584053][ T4418] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.592980][ T4418] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.601748][ T4418] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.610553][ T4418] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.620546][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 65.762943][ T4426] sctp: [Deprecated]: syz.0.46 (pid 4426) Use of int in maxseg socket option. [ 65.762943][ T4426] Use struct sctp_assoc_value instead [ 65.794379][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43'. [ 66.422010][ T4444] loop0: detected capacity change from 0 to 1024 [ 66.471597][ T4446] QAT: failed to copy from user cfg_data. [ 66.485673][ T4446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 66.495073][ T4446] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 66.552121][ T4444] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 66.608835][ T4444] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.971768][ T4444] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 67.076262][ T4444] System zones: 0-1, 3-36 [ 67.254969][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.393136][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.545141][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.550362][ T4462] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 68.566978][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 68.593790][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.616483][ T1325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.629915][ T4463] netlink: 68 bytes leftover after parsing attributes in process `syz.3.55'. [ 68.659693][ T1325] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.679147][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.706535][ T1325] usb 5-1: config 0 descriptor?? [ 68.774049][ T4460] ALSA: mixer_oss: invalid OSS volume 'LI' [ 68.887812][ T26] audit: type=1800 audit(1773275861.866:5): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 69.133309][ T4475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 69.147171][ T4475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 69.252270][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 69.340986][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.124560][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 70.133904][ T4482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'. [ 70.351251][ T4482] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.360576][ T4482] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.369487][ T4482] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.378222][ T4482] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.390234][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 70.459648][ T4484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'. [ 70.607672][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.615754][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.627714][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.635350][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.642913][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.652442][ T1325] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.785931][ T1325] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 70.957319][ T4496] sctp: [Deprecated]: syz.1.65 (pid 4496) Use of int in maxseg socket option. [ 70.957319][ T4496] Use struct sctp_assoc_value instead [ 71.361045][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412877][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.628074][ T1325] usb 5-1: USB disconnect, device number 2 [ 71.739299][ T4494] device syzkaller0 entered promiscuous mode [ 71.915139][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 71.966908][ T4515] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69'. [ 72.578418][ T4511] ALSA: mixer_oss: invalid OSS volume 'LI' [ 72.966734][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 73.516111][ T4522] fido_id[4522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 74.395688][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.403163][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.198847][ T4531] sctp: failed to load transform for md5: -2 [ 75.248868][ T4552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 75.267623][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 76.307451][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 76.358873][ T4568] netlink: 68 bytes leftover after parsing attributes in process `syz.1.85'. [ 76.405372][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 76.416173][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 77.068687][ T1107] cfg80211: failed to load regulatory.db [ 77.204089][ T4566] loop3: detected capacity change from 0 to 256 [ 77.425427][ T4565] ALSA: mixer_oss: invalid OSS volume 'LI' [ 78.119421][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 78.201476][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 79.440905][ T4592] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 80.190419][ T4615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 81.074277][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.083252][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.094576][ T4633] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.103341][ T4633] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.112324][ T4633] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.121123][ T4633] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.134639][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.145798][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.322938][ T4641] device syzkaller0 entered promiscuous mode [ 81.523872][ T4640] loop0: detected capacity change from 0 to 256 [ 83.157523][ T4655] sctp: [Deprecated]: syz.2.111 (pid 4655) Use of int in maxseg socket option. [ 83.157523][ T4655] Use struct sctp_assoc_value instead [ 83.182769][ T4656] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 83.318035][ T4658] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 83.541189][ T4667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 84.943971][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.081153][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.097355][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.126236][ T4682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.282189][ T1110] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 85.406243][ T4698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.125'. [ 86.106345][ T26] audit: type=1800 audit(1773275879.086:6): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.126" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 86.292990][ T1110] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.934622][ T1110] usb 1-1: config 0 has no interface number 0 [ 86.940755][ T1110] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 86.950827][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.963524][ T1110] usb 1-1: config 0 descriptor?? [ 87.144952][ T1110] usb 1-1: selecting invalid altsetting 1 [ 87.161743][ T1110] dvb_ttusb_budget: ttusb_init_controller: error [ 87.183517][ T1110] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 87.213074][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 88.166821][ T4715] sctp: [Deprecated]: syz.2.131 (pid 4715) Use of int in maxseg socket option. [ 88.166821][ T4715] Use struct sctp_assoc_value instead [ 88.185512][ T1110] DVB: Unable to find symbol cx22700_attach() [ 90.156703][ T1110] DVB: Unable to find symbol tda10046_attach() [ 90.170650][ T1110] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 90.484639][ T1110] usb 1-1: USB disconnect, device number 3 [ 91.080672][ T4750] input: syz0 as /devices/virtual/input/input5 [ 91.464875][ T4759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 92.743526][ T4186] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.914266][ T4798] loop1: detected capacity change from 0 to 1024 [ 92.960890][ T4798] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 92.977188][ T4798] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.002989][ T4186] usb 3-1: Using ep0 maxpacket: 32 [ 93.123150][ T4186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.157167][ T4186] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.181013][ T4798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 93.197388][ T4798] System zones: 0-1, 3-36 [ 93.230583][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 93.267379][ T4186] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.300298][ T4186] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 93.337391][ T4186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.564419][ T4186] usb 3-1: config 0 descriptor?? [ 94.192627][ T4186] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 94.200307][ T4186] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 94.207966][ T4186] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 94.216290][ T4186] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 94.223909][ T4186] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 94.290796][ T4186] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 94.392986][ C1] usb 3-1: input irq status -75 received [ 94.486719][ T4814] loop1: detected capacity change from 0 to 256 [ 94.542611][ T4186] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -38 [ 94.724356][ T4186] usb 3-1: USB disconnect, device number 2 [ 96.783796][ T4828] binder: BINDER_SET_CONTEXT_MGR already set [ 96.790091][ T4828] binder: 4826:4828 ioctl 4018620d 200000004a80 returned -16 [ 97.040389][ T4823] fido_id[4823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.062585][ T26] audit: type=1800 audit(1773275893.036:7): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.174" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 103.006326][ T4902] netlink: 132 bytes leftover after parsing attributes in process `syz.0.183'. [ 104.042344][ T4910] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 104.461548][ T4916] device macvlan2 entered promiscuous mode [ 104.598383][ T4916] device bond1 entered promiscuous mode [ 104.697583][ T4916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.777339][ T4916] device bond1 left promiscuous mode [ 104.822712][ T4923] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.100268][ T26] audit: type=1800 audit(1773275898.076:8): pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.191" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 109.961250][ T26] audit: type=1800 audit(1773275902.936:9): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.206" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 112.092047][ T5011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.515979][ T5024] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 114.988112][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 114.997012][ T5040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.221'. [ 115.009142][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 115.018109][ T5040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.221'. [ 118.195455][ T5074] ======================================================= [ 118.195455][ T5074] WARNING: The mand mount option has been deprecated and [ 118.195455][ T5074] and is ignored by this kernel. Remove the mand [ 118.195455][ T5074] option from the mount to silence this warning. [ 118.195455][ T5074] ======================================================= [ 118.603606][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.650829][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.673561][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.808669][ T5093] QAT: failed to copy from user cfg_data. [ 119.824871][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.237'. [ 119.833867][ T5093] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 119.948487][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.957425][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.968649][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.977594][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 127.516158][ T5158] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 131.228675][ T5211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.270'. [ 131.986319][ T5213] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 132.034627][ T5213] bond1: (slave gretap1): making interface the new active one [ 132.045770][ T5213] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.736454][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742933][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853099][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.105663][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 133.182576][ T5238] ALSA: mixer_oss: invalid OSS volume 'LI' [ 133.799333][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 133.833327][ T4230] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 133.881178][ T4230] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 133.991994][ T5251] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 134.028715][ T4230] usb 1-1: config 171 has no interface number 0 [ 134.122064][ T4230] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 134.278120][ T4230] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 134.392623][ T4230] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 134.628867][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.650835][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.676049][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.683167][ T4230] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 134.687242][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.700382][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.721852][ T4230] usb 1-1: Product: syz [ 134.766508][ T4230] usb 1-1: Manufacturer: syz [ 134.771146][ T4230] usb 1-1: SerialNumber: syz [ 134.843303][ T5222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.975361][ T5258] netlink: 165 bytes leftover after parsing attributes in process `syz.1.283'. [ 136.073032][ T4230] ath6kl: Failed to submit usb control message: -110 [ 136.079787][ T4230] ath6kl: unable to send the bmi data to the device: -110 [ 136.102903][ T4230] ath6kl: Unable to send get target info: -110 [ 136.113786][ T4230] ath6kl: Failed to init ath6kl core: -110 [ 136.145858][ T4230] ath6kl_usb: probe of 1-1:171.109 failed with error -110 [ 140.208852][ T5306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 140.262115][ T5307] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 141.505937][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.021572][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 142.393785][ T4230] usb 2-1: config 0 has an invalid interface number: 255 but max is 2 [ 142.422580][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.505480][ T4230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 142.577637][ T4230] usb 2-1: config 0 has no interface number 0 [ 142.592325][ T4230] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 142.602182][ T5338] ALSA: mixer_oss: invalid OSS volume 'LI' [ 142.617461][ T4230] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 142.641371][ T4230] usb 2-1: config 0 interface 255 has no altsetting 0 [ 142.649933][ T4230] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 142.746109][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.758294][ T4230] usb 2-1: config 0 descriptor?? [ 144.578862][ T4230] usb 2-1: USB disconnect, device number 2 [ 146.972177][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 147.073238][ T5382] ALSA: mixer_oss: invalid OSS volume 'LI' [ 148.343200][ T5400] loop2: detected capacity change from 0 to 1024 [ 148.375272][ T5400] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 148.423089][ T5400] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.471668][ T5400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 148.535381][ T5400] System zones: 0-1, 3-36 [ 148.611106][ T5400] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 149.304503][ T13] usb 1-1: USB disconnect, device number 4 [ 149.874732][ T5400] sched: RT throttling activated [ 150.730818][ T5427] [ 150.733193][ T5427] ====================================================== [ 150.740203][ T5427] WARNING: possible circular locking dependency detected [ 150.747217][ T5427] syzkaller #0 Not tainted [ 150.751620][ T5427] ------------------------------------------------------ [ 150.758626][ T5427] syz.4.324/5427 is trying to acquire lock: [ 150.764513][ T5427] ffff888021dcdd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 150.774100][ T5427] [ 150.774100][ T5427] but task is already holding lock: [ 150.781463][ T5427] ffffffff8c1d77c8 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3b0 [ 150.791477][ T5427] [ 150.791477][ T5427] which lock already depends on the new lock. [ 150.791477][ T5427] [ 150.801865][ T5427] [ 150.801865][ T5427] the existing dependency chain (in reverse order) is: [ 150.810867][ T5427] [ 150.810867][ T5427] -> #6 (system_transition_mutex/1){+.+.}-{3:3}: [ 150.819386][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 150.825111][ T5427] mutex_lock_nested+0x17/0x20 [ 150.830392][ T5427] software_resume+0x7c/0x3b0 [ 150.835586][ T5427] resume_store+0xe4/0x130 [ 150.840527][ T5427] kernfs_fop_write_iter+0x379/0x4c0 [ 150.846326][ T5427] vfs_write+0x745/0xd60 [ 150.851079][ T5427] ksys_write+0x152/0x260 [ 150.855925][ T5427] do_syscall_64+0x4c/0xa0 [ 150.860854][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.867265][ T5427] [ 150.867265][ T5427] -> #5 (&of->mutex){+.+.}-{3:3}: [ 150.874470][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 150.880191][ T5427] mutex_lock_nested+0x17/0x20 [ 150.885461][ T5427] kernfs_seq_start+0x51/0x3c0 [ 150.890724][ T5427] seq_read_iter+0x3c4/0xd50 [ 150.895812][ T5427] vfs_read+0x759/0xd60 [ 150.900473][ T5427] ksys_read+0x152/0x260 [ 150.905223][ T5427] do_syscall_64+0x4c/0xa0 [ 150.910143][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.916571][ T5427] [ 150.916571][ T5427] -> #4 (&p->lock){+.+.}-{3:3}: [ 150.923585][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 150.929284][ T5427] mutex_lock_nested+0x17/0x20 [ 150.934545][ T5427] seq_read_iter+0xad/0xd50 [ 150.939546][ T5427] do_iter_readv_writev+0x47e/0x5f0 [ 150.945241][ T5427] do_iter_read+0x20b/0x7c0 [ 150.950254][ T5427] loop_process_work+0x16dd/0x24a0 [ 150.955868][ T5427] process_one_work+0x85f/0x1010 [ 150.961305][ T5427] worker_thread+0xaa6/0x1290 [ 150.966548][ T5427] kthread+0x436/0x520 [ 150.971111][ T5427] ret_from_fork+0x1f/0x30 [ 150.976027][ T5427] [ 150.976027][ T5427] -> #3 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 150.985123][ T5427] process_one_work+0x7bb/0x1010 [ 150.990564][ T5427] worker_thread+0xaa6/0x1290 [ 150.995741][ T5427] kthread+0x436/0x520 [ 151.000313][ T5427] ret_from_fork+0x1f/0x30 [ 151.005233][ T5427] [ 151.005233][ T5427] -> #2 ((wq_completion)loop2){+.+.}-{0:0}: [ 151.013286][ T5427] flush_workqueue+0x16c/0x13d0 [ 151.018640][ T5427] drain_workqueue+0xcf/0x380 [ 151.023986][ T5427] destroy_workqueue+0x7b/0xb20 [ 151.029345][ T5427] __loop_clr_fd+0x234/0xb90 [ 151.034442][ T5427] blkdev_put+0x53f/0x7d0 [ 151.039271][ T5427] deactivate_locked_super+0x93/0xf0 [ 151.045059][ T5427] cleanup_mnt+0x42d/0x4e0 [ 151.049975][ T5427] task_work_run+0x125/0x1a0 [ 151.055065][ T5427] exit_to_user_mode_loop+0x10f/0x130 [ 151.060935][ T5427] exit_to_user_mode_prepare+0xee/0x180 [ 151.066973][ T5427] syscall_exit_to_user_mode+0x16/0x40 [ 151.072934][ T5427] do_syscall_64+0x58/0xa0 [ 151.077933][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.084324][ T5427] [ 151.084324][ T5427] -> #1 (&lo->lo_mutex){+.+.}-{3:3}: [ 151.091770][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 151.097468][ T5427] mutex_lock_killable_nested+0x17/0x20 [ 151.103511][ T5427] lo_open+0x6a/0x100 [ 151.107991][ T5427] blkdev_get_whole+0x90/0x390 [ 151.113250][ T5427] blkdev_get_by_dev+0x2d0/0xa60 [ 151.118680][ T5427] blkdev_open+0x12d/0x2c0 [ 151.123593][ T5427] do_dentry_open+0x7ff/0xf80 [ 151.128764][ T5427] path_openat+0x26f5/0x2fa0 [ 151.133859][ T5427] do_filp_open+0x1e2/0x410 [ 151.138855][ T5427] do_sys_openat2+0x150/0x4b0 [ 151.144025][ T5427] __x64_sys_openat+0x135/0x160 [ 151.149378][ T5427] do_syscall_64+0x4c/0xa0 [ 151.154309][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.160705][ T5427] [ 151.160705][ T5427] -> #0 (&disk->open_mutex){+.+.}-{3:3}: [ 151.168493][ T5427] __lock_acquire+0x2c42/0x7d10 [ 151.173842][ T5427] lock_acquire+0x19e/0x400 [ 151.178842][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 151.184536][ T5427] mutex_lock_nested+0x17/0x20 [ 151.189805][ T5427] blkdev_get_by_dev+0x157/0xa60 [ 151.195237][ T5427] swsusp_check+0xa1/0x2b0 [ 151.200149][ T5427] software_resume+0xc6/0x3b0 [ 151.205321][ T5427] resume_store+0xe4/0x130 [ 151.210232][ T5427] kernfs_fop_write_iter+0x379/0x4c0 [ 151.216014][ T5427] vfs_write+0x745/0xd60 [ 151.220751][ T5427] ksys_write+0x152/0x260 [ 151.225576][ T5427] do_syscall_64+0x4c/0xa0 [ 151.230494][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.236882][ T5427] [ 151.236882][ T5427] other info that might help us debug this: [ 151.236882][ T5427] [ 151.247080][ T5427] Chain exists of: [ 151.247080][ T5427] &disk->open_mutex --> &of->mutex --> system_transition_mutex/1 [ 151.247080][ T5427] [ 151.260689][ T5427] Possible unsafe locking scenario: [ 151.260689][ T5427] [ 151.268120][ T5427] CPU0 CPU1 [ 151.273460][ T5427] ---- ---- [ 151.278806][ T5427] lock(system_transition_mutex/1); [ 151.284069][ T5427] lock(&of->mutex); [ 151.290544][ T5427] lock(system_transition_mutex/1); [ 151.298327][ T5427] lock(&disk->open_mutex); [ 151.302994][ T5427] [ 151.302994][ T5427] *** DEADLOCK *** [ 151.302994][ T5427] [ 151.311109][ T5427] 5 locks held by syz.4.324/5427: [ 151.316109][ T5427] #0: ffff88802a74dc70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 151.325301][ T5427] #1: ffff88802c3d4460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 151.334151][ T5427] #2: ffff8880614c6c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 151.343861][ T5427] #3: ffff88801bbf1830 (kn->active#491){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x208/0x4c0 [ 151.353922][ T5427] #4: ffffffff8c1d77c8 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3b0 [ 151.364332][ T5427] [ 151.364332][ T5427] stack backtrace: [ 151.370207][ T5427] CPU: 0 PID: 5427 Comm: syz.4.324 Not tainted syzkaller #0 [ 151.377464][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.387503][ T5427] Call Trace: [ 151.390763][ T5427] [ 151.393673][ T5427] dump_stack_lvl+0x188/0x250 [ 151.398416][ T5427] ? load_image+0x400/0x400 [ 151.402900][ T5427] ? show_regs_print_info+0x20/0x20 [ 151.408081][ T5427] ? print_circular_bug+0x12b/0x1a0 [ 151.413262][ T5427] check_noncircular+0x296/0x330 [ 151.418184][ T5427] ? add_chain_block+0x940/0x940 [ 151.423104][ T5427] ? lockdep_lock+0xf1/0x1f0 [ 151.427669][ T5427] ? mark_lock+0x94/0x320 [ 151.431971][ T5427] __lock_acquire+0x2c42/0x7d10 [ 151.436800][ T5427] ? finish_task_switch+0x12f/0x640 [ 151.441973][ T5427] ? __schedule+0x11f7/0x43c0 [ 151.446622][ T5427] ? verify_lock_unused+0x140/0x140 [ 151.451801][ T5427] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 151.457762][ T5427] lock_acquire+0x19e/0x400 [ 151.462247][ T5427] ? blkdev_get_by_dev+0x157/0xa60 [ 151.467338][ T5427] ? __might_sleep+0xf0/0xf0 [ 151.471901][ T5427] ? read_lock_is_recursive+0x10/0x10 [ 151.477247][ T5427] ? preempt_schedule_common+0xa5/0xd0 [ 151.482693][ T5427] ? preempt_schedule+0xbc/0xd0 [ 151.487518][ T5427] ? schedule_preempt_disabled+0x20/0x20 [ 151.493125][ T5427] ? blkdev_get_by_dev+0x157/0xa60 [ 151.498208][ T5427] __mutex_lock_common+0x1e3/0x2400 [ 151.503379][ T5427] ? blkdev_get_by_dev+0x157/0xa60 [ 151.508463][ T5427] ? _raw_spin_unlock+0x36/0x40 [ 151.513285][ T5427] ? mutex_lock_io_nested+0x60/0x60 [ 151.518457][ T5427] ? iput+0x33d/0x8a0 [ 151.522429][ T5427] ? ilookup+0x1dc/0x220 [ 151.526647][ T5427] mutex_lock_nested+0x17/0x20 [ 151.531383][ T5427] blkdev_get_by_dev+0x157/0xa60 [ 151.536293][ T5427] ? lockdep_hardirqs_on+0x94/0x140 [ 151.541467][ T5427] swsusp_check+0xa1/0x2b0 [ 151.545874][ T5427] ? swap_read_page+0x2f0/0x2f0 [ 151.550703][ T5427] software_resume+0xc6/0x3b0 [ 151.555352][ T5427] resume_store+0xe4/0x130 [ 151.559742][ T5427] ? sysfs_kf_read+0x310/0x310 [ 151.564488][ T5427] kernfs_fop_write_iter+0x379/0x4c0 [ 151.569751][ T5427] vfs_write+0x745/0xd60 [ 151.573968][ T5427] ? file_end_write+0x250/0x250 [ 151.578793][ T5427] ? __fget_files+0x40f/0x480 [ 151.583447][ T5427] ? mutex_lock_nested+0x17/0x20 [ 151.588362][ T5427] ? __fdget_pos+0x2bf/0x370 [ 151.592923][ T5427] ? ksys_write+0x71/0x260 [ 151.597317][ T5427] ksys_write+0x152/0x260 [ 151.601623][ T5427] ? __ia32_sys_read+0x80/0x80 [ 151.606367][ T5427] ? lockdep_hardirqs_on+0x94/0x140 [ 151.611542][ T5427] do_syscall_64+0x4c/0xa0 [ 151.615940][ T5427] ? clear_bhb_loop+0x30/0x80 [ 151.620615][ T5427] ? clear_bhb_loop+0x30/0x80 [ 151.625296][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.631183][ T5427] RIP: 0033:0x7f295b6d8799 [ 151.635576][ T5427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.655157][ T5427] RSP: 002b:00007f29598f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.663545][ T5427] RAX: ffffffffffffffda RBX: 00007f295b952180 RCX: 00007f295b6d8799 [ 151.671493][ T5427] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 151.679438][ T5427] RBP: 00007f295b76ec99 R08: 0000000000000000 R09: 0000000000000000 [ 151.687383][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.695328][ T5427] R13: 00007f295b952218 R14: 00007f295b952180 R15: 00007fff3c34f3c8 [ 151.703287][ T5427] [ 151.717386][ T5427] PM: Image not found (code -22) [ 152.061374][ T5432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 152.116506][ T5432] netlink: 'syz.2.325': attribute type 2 has an invalid length. [ 152.333272][ T4231] Bluetooth: hci2: command 0x0409 tx timeout [ 152.501299][ T5415] chnl_net:caif_netlink_parms(): no params data found [ 152.808506][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.835593][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.843409][ T5415] device bridge_slave_0 entered promiscuous mode [ 152.850845][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.858032][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.865768][ T5415] device bridge_slave_1 entered promiscuous mode [ 152.880826][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.892427][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.909200][ T5415] team0: Port device team_slave_0 added [ 152.915902][ T5415] team0: Port device team_slave_1 added [ 152.928427][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.935429][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.961330][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.972634][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.979611][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.006131][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.028612][ T5415] device hsr_slave_0 entered promiscuous mode [ 153.035083][ T5415] device hsr_slave_1 entered promiscuous mode [ 153.041429][ T5415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.049097][ T5415] Cannot create hsr debugfs directory [ 153.101755][ T5415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.109979][ T5415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.118389][ T5415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.126615][ T5415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.141987][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.149047][ T5415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.156376][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.163450][ T5415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.192205][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.204567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.212385][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.220863][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.228934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.239366][ T5415] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.248010][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.256753][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.265160][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.272182][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.283923][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.292423][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.301573][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.308721][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.316349][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.334169][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.342810][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.351506][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.360261][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.369895][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.378602][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.386989][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.395401][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.404388][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.412583][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.422442][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.472470][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.480141][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.490956][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.558366][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.567155][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.582364][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.590539][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.598887][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.607422][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.616850][ T5415] device veth0_vlan entered promiscuous mode [ 153.627281][ T5415] device veth1_vlan entered promiscuous mode [ 153.642138][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.650253][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.658495][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.667238][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.677897][ T5415] device veth0_macvtap entered promiscuous mode [ 153.687207][ T5415] device veth1_macvtap entered promiscuous mode [ 153.699098][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.710750][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.721837][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.729913][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.738127][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.746254][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.754905][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.764921][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.775585][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.786744][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.794661][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.803360][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.814315][ T5415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.823127][ T5415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.831874][ T5415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.840879][ T5415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.864744][ T5415] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 153.880627][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.881776][ T5415] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 153.897427][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.905583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.920028][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.928360][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.936446][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.413390][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 156.493074][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 158.583045][ T4259] Bluetooth: hci2: command 0x0419 tx timeout