last executing test programs: 1m28.352863087s ago: executing program 3 (id=35): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) shutdown(r1, 0x0) 1m26.728270836s ago: executing program 3 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m26.158862739s ago: executing program 3 (id=40): syz_emit_ethernet(0x36, &(0x7f00000007c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "d6d355", 0x0, 0x73, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) 1m25.83728076s ago: executing program 3 (id=43): openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) listen(r0, 0xfff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m25.457919528s ago: executing program 3 (id=45): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001021, r5, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m22.971482337s ago: executing program 3 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 1m7.57371437s ago: executing program 32 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 5.989594123s ago: executing program 2 (id=263): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101082, 0x0) readv(r0, &(0x7f00000004c0), 0x0) fsmount(r0, 0x0, 0x79) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f000100000005003000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 5.521768692s ago: executing program 1 (id=266): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf000007, 0x2e}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r2, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4a23, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 5.313515599s ago: executing program 1 (id=267): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r2, 0x0, 0x69) 5.170795206s ago: executing program 2 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c00024000000000800000010800044000000001"], 0xf0}}, 0x0) 4.997108648s ago: executing program 1 (id=269): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 4.920964818s ago: executing program 2 (id=270): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 4.60838113s ago: executing program 1 (id=273): socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 4.36682084s ago: executing program 5 (id=274): syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfc}, @hci_rp_read_local_name={{0x7}, {0x3, "c8e02583b339773d08c31c8dc3baf8cd71b99273adc85506676bc88e1d4bd7c6a7c1c52337c53ea6003add9c5971882cf87f5b245b5f6431ea6f7ae44963187416ca6518ab8b290b7f7df55162bb7a233cd3867c96527d9efb182753a4df1ca4d096e0eb1db2a35bc6a341c7173f215c98a88b3b057e5ba890b1a18208f1ed863f037fb71b26682369323a35c82dcc7baf73fb3978d02d1c07d53f7db04e5c91f0b68204177b9533a1564bd76344a3cd7fd20f3ad58d2fde07ba525fbd5113dc00cda8cad3e3d850df398afff2a5b591be26a026a7afb7dfd5aa67e544d38e043d9b42cb896394bac88fe10948b122c2a23709816098282b"}}}}, 0xff) sched_setscheduler(0x0, 0x1, 0x0) 4.309569247s ago: executing program 2 (id=275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 4.206678642s ago: executing program 5 (id=277): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf000007, 0x2e}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4a23, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 3.111762773s ago: executing program 2 (id=280): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xc}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}]}, 0x54}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.091345116s ago: executing program 5 (id=281): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 2.994831329s ago: executing program 4 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.741682872s ago: executing program 2 (id=283): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 2.592654981s ago: executing program 4 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$isdn(0x22, 0x2, 0x10) socket$isdn(0x22, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x218d, &(0x7f0000000140)={0x0, 0xfffffffc, 0x10, 0x3, 0x3d3}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 2.350830772s ago: executing program 0 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) r3 = eventfd(0xd82) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x7000, 0x1, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 2.045257661s ago: executing program 4 (id=286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, r0, 0x98c6e000) 2.011420455s ago: executing program 0 (id=287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r0, 0x0, 0x5}, 0x18) uname(&(0x7f0000000000)=""/225) 1.802657842s ago: executing program 0 (id=288): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$alg(0x26, 0x5, 0x0) 1.802344972s ago: executing program 4 (id=289): syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x65, 0x0, 0x81, 0x1, 0x0, @private=0xa010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x0, 0x3, 0x65, 0x75, 0x11, 0x88, 0xe, @broadcast, @multicast1}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) 1.750657249s ago: executing program 5 (id=290): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf000007, 0x2e}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4a23, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 1.66150822s ago: executing program 0 (id=291): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf000007, 0x2e}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4a23, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 1.498626701s ago: executing program 4 (id=292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.135309275s ago: executing program 1 (id=293): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 439.895754ms ago: executing program 5 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000c00)=""/4096, 0x34000}], 0x1}}], 0x1, 0x40004041, 0x0) 364.924534ms ago: executing program 0 (id=295): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101082, 0x0) readv(r0, &(0x7f00000004c0), 0x0) fsmount(r0, 0x0, 0x79) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 257.081527ms ago: executing program 4 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free_batched\x00', r0, 0x0, 0x3ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 142.845892ms ago: executing program 1 (id=297): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r1, &(0x7f0000004280)=[{&(0x7f0000003840)="689017", 0x3}], 0x1) 135.660403ms ago: executing program 5 (id=298): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c64d2, &(0x7f0000000180)={r7, 0x80000}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000040)="d8690ba37bd8809dc9569dd80df2d1f3053c0b30980e717636a3fb4f7b153af4e953d64a706d0750f201626de1b7582dcf79ac01afb8b1140f03a016212a4d9093894d00f4cd840fce5b51531f54a12e9a93", 0x52}, {0x0}, {0x0}], 0x3) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. syzkaller login: [ 75.735438][ T4255] cgroup: Unknown subsys name 'net' [ 75.873875][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.479838][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.164403][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.182002][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.190128][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.198223][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.206668][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.216509][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.224082][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.231921][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.240185][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.248815][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.256925][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.266717][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.274004][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.282729][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.290255][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.298497][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.305676][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.313660][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.319592][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.321366][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.332382][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.337843][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.343589][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.351050][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.360767][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.372831][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.382746][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.407730][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.415045][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.427286][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.950596][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 79.965484][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 80.027147][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 80.144223][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 80.179389][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 80.219396][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.228011][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.236897][ T4277] device bridge_slave_0 entered promiscuous mode [ 80.250918][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.258332][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.266989][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.365543][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.385919][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.396247][ T4268] device bridge_slave_0 entered promiscuous mode [ 80.406803][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.417258][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.425622][ T4279] device bridge_slave_0 entered promiscuous mode [ 80.444964][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.458409][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.480727][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.489403][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.499298][ T4268] device bridge_slave_1 entered promiscuous mode [ 80.509937][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.521049][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.532741][ T4279] device bridge_slave_1 entered promiscuous mode [ 80.606746][ T4277] team0: Port device team_slave_0 added [ 80.624475][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.656861][ T4277] team0: Port device team_slave_1 added [ 80.666882][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.679520][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.689323][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.697105][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.705396][ T4269] device bridge_slave_0 entered promiscuous mode [ 80.713381][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.721523][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.731663][ T4266] device bridge_slave_0 entered promiscuous mode [ 80.761177][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.796075][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.804080][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.813746][ T4269] device bridge_slave_1 entered promiscuous mode [ 80.821312][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.829350][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.838357][ T4266] device bridge_slave_1 entered promiscuous mode [ 80.854924][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.863231][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.890218][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.937838][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.945037][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.974046][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.989284][ T4268] team0: Port device team_slave_0 added [ 80.998248][ T4279] team0: Port device team_slave_0 added [ 81.030156][ T4268] team0: Port device team_slave_1 added [ 81.039529][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.051583][ T4279] team0: Port device team_slave_1 added [ 81.069126][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.101602][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.131565][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.169228][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.176936][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.204006][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.224798][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.232149][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.258926][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.281990][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.289615][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.297641][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.304723][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.332163][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.356376][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.363505][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.396402][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.398317][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 81.418534][ T4266] team0: Port device team_slave_0 added [ 81.438236][ T4269] team0: Port device team_slave_0 added [ 81.446663][ T4266] team0: Port device team_slave_1 added [ 81.473389][ T4269] team0: Port device team_slave_1 added [ 81.477561][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 81.485670][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 81.492625][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 81.497184][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 81.533041][ T4279] device hsr_slave_0 entered promiscuous mode [ 81.540161][ T4279] device hsr_slave_1 entered promiscuous mode [ 81.547216][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.555068][ T4279] Cannot create hsr debugfs directory [ 81.613554][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.621676][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.651319][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.668170][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.675883][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.706453][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.722614][ T4268] device hsr_slave_0 entered promiscuous mode [ 81.731507][ T4268] device hsr_slave_1 entered promiscuous mode [ 81.739148][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.747766][ T4268] Cannot create hsr debugfs directory [ 81.767156][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.774345][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.801243][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.813562][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.820904][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.856303][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.053023][ T4269] device hsr_slave_0 entered promiscuous mode [ 82.060682][ T4269] device hsr_slave_1 entered promiscuous mode [ 82.068033][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.075818][ T4269] Cannot create hsr debugfs directory [ 82.113175][ T4266] device hsr_slave_0 entered promiscuous mode [ 82.131155][ T4266] device hsr_slave_1 entered promiscuous mode [ 82.138942][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.146904][ T4266] Cannot create hsr debugfs directory [ 82.415790][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.429663][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.445528][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.462308][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.524103][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.546679][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.563040][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.583026][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.660642][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.685454][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.701721][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.713094][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.790391][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.809436][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.822096][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.859851][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.875246][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.887786][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.924621][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.934333][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.958713][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.971953][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.984912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.993800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.020965][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.048499][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.059990][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.070594][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.078077][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.089321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.099156][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.108275][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.116151][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.129682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.140329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.165875][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.195045][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.204759][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.214986][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.222303][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.230653][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.241091][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.250309][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.257510][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.265655][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.278468][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.303732][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.314715][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.357697][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.369929][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.380376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.389931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.400226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.409644][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.419821][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.429739][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.439400][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.453061][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.465644][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.477026][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 83.492149][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.503089][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.523788][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.532995][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.542020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.554645][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.566148][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 83.566211][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 83.566237][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 83.566270][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 83.599260][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.608809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.619877][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.653594][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.661409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.681083][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.703194][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.723704][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.745810][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.784690][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.795675][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.807619][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.817319][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.841226][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.859603][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.871263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.880834][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.890878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.900956][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.908490][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.918939][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.946306][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.977333][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.993660][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.002224][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.016706][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.078090][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.097632][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.116941][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.125042][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.170245][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.189979][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.213023][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.220294][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.230689][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.240082][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.249302][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.259011][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.268957][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.314572][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.328439][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.342959][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.365438][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.394247][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.415500][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.428384][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.442820][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.463933][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.475448][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.488190][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.504510][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.513902][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.551587][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.570991][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.590284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.600983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.613397][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.624816][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.636356][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.645306][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.662214][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.681315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.692207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.712062][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.752140][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.771367][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.828639][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.835801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.866923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.911283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.922738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.945678][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.953187][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.963711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.979525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.992641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.042693][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.067066][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.092797][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.102858][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.130664][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.140066][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.149760][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.159127][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.205133][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.217282][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.237920][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.257697][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.281112][ T4279] device veth0_vlan entered promiscuous mode [ 85.336255][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.345251][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.366502][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.389134][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.399431][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.425722][ T4277] device veth0_vlan entered promiscuous mode [ 85.435768][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.450227][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.462875][ T4279] device veth1_vlan entered promiscuous mode [ 85.473942][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.487355][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.496322][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.505257][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.519658][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.533376][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.544108][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.556828][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 85.578466][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.591187][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.611096][ T4277] device veth1_vlan entered promiscuous mode [ 85.637708][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 85.645220][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 85.654158][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 85.657194][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 85.736142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.750910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.762013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.774442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.813903][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.837584][ T4279] device veth0_macvtap entered promiscuous mode [ 85.854010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.863649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.879117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.895226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.907997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.915858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.933919][ T4279] device veth1_macvtap entered promiscuous mode [ 85.948526][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.984781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.025018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.045602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.072885][ T4277] device veth0_macvtap entered promiscuous mode [ 86.085778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.098861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.113570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.176693][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.186336][ T4277] device veth1_macvtap entered promiscuous mode [ 86.200976][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.234046][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.248074][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.267105][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.295711][ T4269] device veth0_vlan entered promiscuous mode [ 86.309815][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.319895][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.329311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.337930][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.347785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.363537][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.372001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.391342][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.402876][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.415377][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.430132][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447596][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.459366][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.469473][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489093][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.504076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.517287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.538495][ T4269] device veth1_vlan entered promiscuous mode [ 86.572851][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.588512][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.603578][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.645668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.656821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.665635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.682416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.695660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.711303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.732408][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.746414][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.755190][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.765656][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.797477][ T4269] device veth0_macvtap entered promiscuous mode [ 86.812802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.832701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.845478][ T14] cfg80211: failed to load regulatory.db [ 86.852396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.893595][ T4269] device veth1_macvtap entered promiscuous mode [ 86.948892][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.973994][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.005404][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.033889][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.044666][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.066195][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.096155][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117716][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.179684][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.197170][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.205421][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.228803][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.241137][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.258437][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.274827][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.298744][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.313242][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.330903][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.343732][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.372732][ T4266] device veth0_vlan entered promiscuous mode [ 87.391418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.411742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.444266][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.456778][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.465575][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.488680][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.522158][ T4266] device veth1_vlan entered promiscuous mode [ 87.533687][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.550125][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.613403][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.622151][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.626393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.637053][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 87.651571][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.718256][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 87.725263][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 87.732723][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 87.732745][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 87.756601][ T4268] device veth0_vlan entered promiscuous mode [ 87.764551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.790593][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.801441][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.811306][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.845770][ T4268] device veth1_vlan entered promiscuous mode [ 87.865579][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.869709][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.884124][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.895056][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.918825][ T4266] device veth0_macvtap entered promiscuous mode [ 87.934655][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.964543][ T4266] device veth1_macvtap entered promiscuous mode [ 87.975828][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.984587][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.994980][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.007672][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.018866][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.033177][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.043547][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.064225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.080893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.111888][ T4268] device veth0_macvtap entered promiscuous mode [ 88.147608][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.157186][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.180565][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.180746][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.205569][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.218199][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.229404][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.240246][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.261629][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.284337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.307228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.315916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.331695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.344582][ T4268] device veth1_macvtap entered promiscuous mode [ 88.384324][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.397651][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.409129][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.420871][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.431661][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.443848][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.458517][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.484326][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.502932][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.529554][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.542972][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.560479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.572467][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.593210][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.604760][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.625041][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.669272][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.685399][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.704633][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.715168][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.732298][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.743437][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.760286][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.775269][ T4393] Set syz1 is full, maxelem 14 reached [ 88.791791][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.801693][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.814691][ T4394] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 88.822568][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.837794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.873690][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.896423][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.920941][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.941444][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.975998][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.011835][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.030820][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.048372][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.063013][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.081965][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.107161][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.141853][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162644][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.201572][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.257489][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.637158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.646362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.654709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.663196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.671704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.680542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.689067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.697402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.705998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 89.716013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 89.822054][ T4404] process 'syz.2.6' launched '/dev/fd/5' with NULL argv: empty string added [ 91.203507][ T4403] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 91.229948][ T4403] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 91.239185][ T4403] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.382539][ T4403] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 91.394325][ T4403] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 91.405287][ T4403] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.679108][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.688749][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.704199][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.713369][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.735016][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.761263][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.824739][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.858592][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.887618][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.501951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.623065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.800946][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.205987][ C0] sched: RT throttling activated [ 102.993021][ T4497] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.983981][ T4540] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 111.046099][ T4540] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 111.126569][ T4540] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.37'. [ 111.140550][ T4543] netlink: 31 bytes leftover after parsing attributes in process `syz.3.38'. [ 111.274441][ T4540] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 111.311802][ T4540] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 111.340467][ T4540] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.37'. [ 111.894696][ T4567] Set syz1 is full, maxelem 14 reached [ 121.327141][ T4312] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 121.674593][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.703512][ T4312] usb 5-1: not running at top speed; connect to a high speed hub [ 121.744130][ T4312] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 121.788985][ T4312] usb 5-1: language id specifier not provided by device, defaulting to English [ 121.838302][ T4312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.863323][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.875457][ T4627] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 121.893477][ T4312] usb 5-1: Product: syz [ 121.903389][ T4627] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 121.911283][ T4312] usb 5-1: SerialNumber: syz [ 121.922958][ T4627] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.075644][ T4627] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 122.083845][ T4627] netlink: 'syz.0.56': attribute type 4 has an invalid length. [ 122.092152][ T4627] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.778944][ T4312] cdc_ncm 5-1:1.0: bind() failure [ 122.913901][ T4312] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 122.964779][ T4312] cdc_ncm 5-1:1.1: bind() failure [ 123.774696][ T4312] usb 5-1: USB disconnect, device number 2 [ 128.523794][ T4678] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.73'. [ 130.277565][ T4312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.746294][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 130.806946][ T4312] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.945178][ T4312] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.001370][ T4312] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.035349][ T4312] usb 3-1: config 1 interface 0 has no altsetting 0 [ 131.087250][ T4312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 131.123868][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.152585][ T4312] usb 3-1: Product: syz [ 131.162576][ T4312] usb 3-1: Manufacturer: syz [ 131.182960][ T4312] usb 3-1: SerialNumber: syz [ 131.450673][ T4312] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 131.467063][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.476801][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.484986][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.498588][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.513944][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.521945][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.647756][ T4312] usb 3-1: USB disconnect, device number 3 [ 133.078791][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090252][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108557][ T4312] usblp0: removed [ 133.480616][ T4706] chnl_net:caif_netlink_parms(): no params data found [ 133.812920][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 135.107303][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.117989][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.163092][ T4706] device bridge_slave_0 entered promiscuous mode [ 135.210304][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.252048][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.288786][ T4743] vivid-007: disconnect [ 135.297692][ T4706] device bridge_slave_1 entered promiscuous mode [ 135.327022][ T4742] vivid-007: reconnect [ 135.876115][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 136.539181][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.547297][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.535394][ T4762] loop2: detected capacity change from 0 to 7 [ 137.581437][ T4583] Dev loop2: unable to read RDB block 7 [ 137.587940][ T4583] loop2: unable to read partition table [ 137.594147][ T4583] loop2: partition table beyond EOD, truncated [ 137.621572][ T4762] Dev loop2: unable to read RDB block 7 [ 137.746165][ T4762] loop2: unable to read partition table [ 137.753313][ T4762] loop2: partition table beyond EOD, truncated [ 137.769397][ T4762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.956295][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 138.259102][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.290601][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.811927][ T4749] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.826539][ T4749] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.856031][ T4749] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.875341][ T4749] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.036262][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 140.349674][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.384841][ T4755] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.98'. [ 140.737255][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.967732][ T4706] team0: Port device team_slave_0 added [ 140.983281][ T4706] team0: Port device team_slave_1 added [ 141.130601][ T4791] loop2: detected capacity change from 0 to 7 [ 141.147687][ T4583] Dev loop2: unable to read RDB block 7 [ 141.153347][ T4583] loop2: AHDI p1 p2 p3 [ 141.167193][ T4583] loop2: partition table partially beyond EOD, truncated [ 141.178910][ T4583] loop2: p1 start 1601398130 is beyond EOD, truncated [ 141.204542][ T4583] loop2: p2 start 1702059890 is beyond EOD, truncated [ 141.215357][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.225609][ T4791] Dev loop2: unable to read RDB block 7 [ 141.245090][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.268253][ T4791] loop2: AHDI p1 p2 p3 [ 141.287908][ T4791] loop2: partition table partially beyond EOD, truncated [ 141.317350][ T4791] loop2: p1 start 1601398130 is beyond EOD, truncated [ 141.337602][ T4791] loop2: p2 start 1702059890 is beyond EOD, truncated [ 141.427438][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.088780][ T4423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.142786][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.154379][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.199704][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.359344][ T4807] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 142.386216][ T4807] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 142.395983][ T4807] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.116'. [ 142.604558][ T4423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.026492][ T4423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.461245][ T4706] device hsr_slave_0 entered promiscuous mode [ 145.530661][ T4706] device hsr_slave_1 entered promiscuous mode [ 145.593327][ T4706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.626217][ T4706] Cannot create hsr debugfs directory [ 145.809953][ T4423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.085340][ T4841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 146.356901][ T27] audit: type=1326 audit(1768570955.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.4.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182118f749 code=0x0 [ 147.027617][ T4849] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 147.056181][ T4849] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 147.079454][ T4849] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.131'. [ 149.129348][ T4706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.233433][ T4706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.919384][ T4871] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure [ 150.942533][ T4706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.153036][ T4706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.229208][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.414126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.427191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.493067][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.646282][ T4906] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 152.655337][ T4906] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 153.198680][ T4913] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 154.212053][ T4906] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.144'. [ 154.706011][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.714895][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.762180][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.769917][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.796747][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.850079][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.896741][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.904468][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.936752][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.331268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.394617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.417086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.438178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.467141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.494492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.514814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.528813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.548460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.566894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.628283][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.683959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.085477][ T4423] device hsr_slave_0 left promiscuous mode [ 158.169031][ T4423] device hsr_slave_1 left promiscuous mode [ 158.234305][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.249673][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.302430][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.314250][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.377797][ T4423] device bridge_slave_1 left promiscuous mode [ 158.416884][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.497855][ T4423] device bridge_slave_0 left promiscuous mode [ 158.520286][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.721185][ T4423] device veth1_macvtap left promiscuous mode [ 158.767075][ T4423] device veth0_macvtap left promiscuous mode [ 158.806642][ T4423] device veth1_vlan left promiscuous mode [ 158.838747][ T4423] device veth0_vlan left promiscuous mode [ 160.416386][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 160.471833][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 160.514849][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.558926][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.809777][ T4423] bond0 (unregistering): Released all slaves [ 161.893198][ T4969] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 161.901230][ T4969] netlink: 'syz.0.158': attribute type 4 has an invalid length. [ 161.909798][ T4969] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.158'. [ 162.210399][ T4998] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 162.250604][ T4998] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 162.524725][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.542422][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.625047][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.753588][ T27] audit: type=1326 audit(1768570971.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba58f749 code=0x7ffc0000 [ 162.848753][ T27] audit: type=1326 audit(1768570971.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba58f749 code=0x7ffc0000 [ 162.871386][ T1169] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.067173][ T1169] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 163.152554][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.204515][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.230660][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.252010][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.301844][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.354193][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.399649][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.447933][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.505729][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.544973][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.562192][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.585716][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.610926][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.642794][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.672697][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.707588][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.734788][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.774887][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.794030][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.822496][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.851198][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 163.888773][ T1169] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 163.927324][ T1169] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.964526][ T1169] usb 5-1: config 64 interface 0 has no altsetting 0 [ 164.011289][ T1169] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 164.040423][ T1169] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 164.069999][ T1169] usb 5-1: Product: syz [ 164.074270][ T1169] usb 5-1: Manufacturer: syz [ 164.102799][ T1169] usb 5-1: SerialNumber: syz [ 164.884924][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.020488][ T1169] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 165.030707][ T1169] usb 5-1: USB disconnect, device number 3 [ 165.037040][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.045451][ T1169] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 165.174443][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.204395][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.224535][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.247661][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.320707][ T4706] device veth0_vlan entered promiscuous mode [ 165.377561][ T5056] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 165.421979][ T5056] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 165.440911][ T5056] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.177'. [ 165.465840][ T4706] device veth1_vlan entered promiscuous mode [ 165.564810][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.589060][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.609843][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.642021][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.703177][ T4706] device veth0_macvtap entered promiscuous mode [ 165.747584][ T4706] device veth1_macvtap entered promiscuous mode [ 166.117207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.254785][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.694068][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.795982][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.820473][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.861352][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.906058][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.945999][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.985541][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.023811][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.130478][ T5073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 167.137471][ T5073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.152722][ T5073] vhci_hcd vhci_hcd.0: Device attached [ 167.199170][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.338235][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.439901][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.450388][ T4334] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 167.554099][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.666929][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.767490][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.779310][ T5077] vhci_hcd: connection reset by peer [ 167.804412][ T9] vhci_hcd: stop threads [ 167.818246][ T9] vhci_hcd: release socket [ 167.883696][ T9] vhci_hcd: disconnect device [ 167.923934][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.096761][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.222196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.288536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.533365][ T4706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.627276][ T4706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.653291][ T4706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.662570][ T4706] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.800981][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.830927][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.896928][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.931709][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.949350][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.986457][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.504157][ T5103] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 169.514959][ T5103] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 169.532286][ T5103] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.188'. [ 171.028620][ T4282] Bluetooth: hci4: Malformed Event: 0x2f [ 172.024804][ T5136] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 172.076070][ T5136] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 172.111510][ T5136] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.199'. [ 172.181971][ T5143] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 172.226365][ T5143] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 172.242487][ T5143] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.199'. [ 172.596142][ T4334] vhci_hcd: vhci_device speed not set [ 173.705935][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c11a400: rx timeout, send abort [ 173.718261][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c11a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.767130][ T5192] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 175.846247][ T5192] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 175.854000][ T5192] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.216'. [ 175.928408][ T5195] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 175.956205][ T5195] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 175.963959][ T5195] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.216'. [ 179.425955][ T5225] hfs: can't find a HFS filesystem on dev nullb0 [ 181.552506][ T5244] netlink: 'syz.5.230': attribute type 1 has an invalid length. [ 181.585700][ T5244] netlink: 'syz.5.230': attribute type 4 has an invalid length. [ 181.632081][ T5244] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.230'. [ 181.663662][ T5247] netlink: 'syz.5.230': attribute type 1 has an invalid length. [ 181.686975][ T5247] netlink: 'syz.5.230': attribute type 4 has an invalid length. [ 181.694835][ T5247] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.230'. [ 182.842992][ T4282] Bluetooth: hci4: Malformed Event: 0x2f [ 187.147487][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 187.230689][ T5298] netlink: 'syz.2.242': attribute type 3 has an invalid length. [ 187.245595][ T5300] netlink: 'syz.5.243': attribute type 1 has an invalid length. [ 187.253987][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 187.263678][ T5300] netlink: 'syz.5.243': attribute type 4 has an invalid length. [ 187.272331][ T5300] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.243'. [ 187.295516][ T5300] netlink: 'syz.5.243': attribute type 1 has an invalid length. [ 187.314647][ T5300] netlink: 'syz.5.243': attribute type 4 has an invalid length. [ 187.336182][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 187.344579][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.355489][ T5300] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.243'. [ 187.380809][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.457640][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.486955][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.551412][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.598457][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.623788][ T7] usb 5-1: SerialNumber: syz [ 187.665774][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 187.678559][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 187.693900][ T7] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 188.818726][ T5318] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 188.827936][ T5318] overlayfs: overlapping lowerdir path [ 190.446396][ T7] usb 5-1: USB disconnect, device number 4 [ 190.805424][ T5347] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 190.835175][ T5347] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 190.906400][ T5347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.257'. [ 191.151117][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 191.195527][ T5359] device bridge_slave_1 left promiscuous mode [ 191.224698][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.252006][ T5359] device bridge_slave_0 left promiscuous mode [ 191.274233][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.306165][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.399180][ T5347] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 191.415530][ T5347] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 191.426133][ T5347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.257'. [ 191.516186][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 191.538869][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.607707][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.633876][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.656249][ T7] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 191.667300][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.680293][ T7] usb 1-1: config 0 descriptor?? [ 192.107663][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 192.115422][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 192.199925][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 192.294849][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 192.315223][ T7] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 192.377794][ T7] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 192.436562][ T7] usb 1-1: USB disconnect, device number 2 [ 192.456009][ T4357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.492133][ T5386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 192.691749][ T4357] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 192.706065][ T4357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 192.735628][ T4357] usb 5-1: Product: syz [ 192.756202][ T4357] usb 5-1: Manufacturer: syz [ 192.760900][ T4357] usb 5-1: SerialNumber: syz [ 192.789018][ T4357] usb 5-1: config 0 descriptor?? [ 192.840912][ T4357] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 192.876512][ T4357] dvb-usb: bulk message failed: -22 (2/0) [ 192.909681][ T5388] fido_id[5388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 192.960400][ T4357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.986956][ T4357] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 192.996673][ T4357] usb 5-1: media controller created [ 193.024218][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.217847][ T4357] dvb-usb: bulk message failed: -22 (1/0) [ 193.398376][ T5412] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 193.437126][ T5412] netlink: 'syz.2.275': attribute type 4 has an invalid length. [ 193.476036][ T5412] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.275'. [ 193.494561][ T4357] DVB: Unable to find symbol mt352_attach() [ 193.514740][ T4357] dvb-usb: bulk message failed: -22 (5/0) [ 193.522307][ T4357] zl10353_read_register: readreg error (reg=127, ret==-121) [ 193.536159][ T4357] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 193.545097][ T5418] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 193.563542][ T5418] netlink: 'syz.2.275': attribute type 4 has an invalid length. [ 193.648974][ T5418] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.275'. [ 194.474835][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481316][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536239][ T4357] rc_core: IR keymap rc-dvico-mce not found [ 194.545559][ T4357] Registered IR keymap rc-empty [ 194.594372][ T4357] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 194.653850][ T4357] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 194.723027][ T5436] tipc: Started in network mode [ 194.731236][ T4357] dvb-usb: schedule remote query interval to 100 msecs. [ 194.744268][ T5436] tipc: Node identity 4, cluster identity 32 [ 194.751649][ T4357] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 194.773121][ T5436] tipc: Node number set to 4 [ 194.846559][ T4357] usb 5-1: USB disconnect, device number 5 [ 195.001846][ T4357] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 195.266230][ T4341] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.314853][ T5441] delete_channel: no stack [ 195.488649][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.506361][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.537795][ T4341] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 195.587706][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.618022][ T4341] usb 3-1: config 0 descriptor?? [ 196.351394][ T4341] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 196.377710][ T4341] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 196.414383][ T5470] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.292'. [ 196.450329][ T5470] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.292'. [ 197.207796][ T4341] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 197.796632][ T4334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.527118][ T5440] ================================================================== [ 198.535238][ T5440] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x60b/0xdd0 [ 198.542670][ T5440] Read of size 42 at addr ffffc9000c84fd41 by task syz.2.283/5440 [ 198.550501][ T5440] [ 198.552905][ T5440] CPU: 1 PID: 5440 Comm: syz.2.283 Not tainted syzkaller #0 [ 198.560221][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.570307][ T5440] Call Trace: [ 198.573605][ T5440] [ 198.576565][ T5440] dump_stack_lvl+0x168/0x22e [ 198.581281][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 198.585910][ T5440] ? show_regs_print_info+0x12/0x12 [ 198.591151][ T5440] ? load_image+0x3b0/0x3b0 [ 198.595698][ T5440] ? __virt_addr_valid+0xbf/0x540 [ 198.600765][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 198.605391][ T5440] print_report+0xa8/0x210 [ 198.609835][ T5440] kasan_report+0x10b/0x140 [ 198.614403][ T5440] ? _find_first_zero_bit+0xcf/0x100 [ 198.619740][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 198.624452][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 198.629161][ T5440] kasan_check_range+0x27b/0x290 [ 198.634137][ T5440] memcpy+0x25/0x60 [ 198.637973][ T5440] cp2112_xfer+0x60b/0xdd0 [ 198.642421][ T5440] ? cp2112_i2c_xfer+0xed0/0xed0 [ 198.647397][ T5440] __i2c_smbus_xfer+0x771/0x1fc0 [ 198.652368][ T5440] ? _raw_spin_unlock+0x40/0x40 [ 198.657254][ T5440] ? cp2112_i2c_xfer+0xed0/0xed0 [ 198.662239][ T5440] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 198.668517][ T5440] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 198.674652][ T5440] ? __might_fault+0xa6/0x120 [ 198.679364][ T5440] ? i2c_smbus_xfer+0x11d/0x3a0 [ 198.684264][ T5440] i2c_smbus_xfer+0x263/0x3a0 [ 198.688986][ T5440] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 198.694310][ T5440] ? __might_fault+0xc2/0x120 [ 198.699018][ T5440] ? __might_fault+0xa6/0x120 [ 198.703725][ T5440] i2cdev_ioctl_smbus+0x3e3/0x650 [ 198.708786][ T5440] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 198.713935][ T5440] ? __might_fault+0xa6/0x120 [ 198.718636][ T5440] ? __might_fault+0xc2/0x120 [ 198.723338][ T5440] ? __might_fault+0xa6/0x120 [ 198.728041][ T5440] i2cdev_ioctl+0x545/0x750 [ 198.732570][ T5440] ? i2cdev_write+0x120/0x120 [ 198.737303][ T5440] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.742277][ T5440] ? security_file_ioctl+0x7c/0xa0 [ 198.747418][ T5440] ? i2cdev_write+0x120/0x120 [ 198.752137][ T5440] __se_sys_ioctl+0xfa/0x170 [ 198.756763][ T5440] do_syscall_64+0x4c/0xa0 [ 198.761216][ T5440] ? clear_bhb_loop+0x60/0xb0 [ 198.765929][ T5440] ? clear_bhb_loop+0x60/0xb0 [ 198.770726][ T5440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.776653][ T5440] RIP: 0033:0x7f5cf5b8f749 [ 198.781111][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.800755][ T5440] RSP: 002b:00007f5cf69b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.809198][ T5440] RAX: ffffffffffffffda RBX: 00007f5cf5de5fa0 RCX: 00007f5cf5b8f749 [ 198.817202][ T5440] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 198.825459][ T5440] RBP: 00007f5cf5c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.833463][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.841464][ T5440] R13: 00007f5cf5de6038 R14: 00007f5cf5de5fa0 R15: 00007fffbdb3c888 [ 198.849470][ T5440] [ 198.852510][ T5440] [ 198.854877][ T5440] The buggy address belongs to stack of task syz.2.283/5440 [ 198.862179][ T5440] and is located at offset 33 in frame: [ 198.867834][ T5440] i2cdev_ioctl_smbus+0x0/0x650 [ 198.872722][ T5440] [ 198.875064][ T5440] This frame has 1 object: [ 198.879503][ T5440] [32, 66) 'temp' [ 198.879526][ T5440] [ 198.885590][ T5440] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000c848000 allocated at copy_process+0x5bd/0x4020 [ 198.898563][ T5440] The buggy address belongs to the physical page: [ 198.905023][ T5440] page:ffffea0001cc8580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73216 [ 198.915200][ T5440] memcg:ffff88801ca56902 [ 198.919458][ T5440] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 198.926636][ T5440] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 198.935338][ T5440] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88801ca56902 [ 198.943945][ T5440] page dumped because: kasan: bad access detected [ 198.950389][ T5440] page_owner tracks the page as allocated [ 198.956127][ T5440] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5439, tgid 5439 (syz.2.283), ts 194947030387, free_ts 194710858317 [ 198.974428][ T5440] post_alloc_hook+0x173/0x1a0 [ 198.979227][ T5440] get_page_from_freelist+0x1a26/0x1ac0 [ 198.984893][ T5440] __alloc_pages+0x1df/0x4e0 [ 198.989530][ T5440] __vmalloc_node_range+0x959/0x1390 [ 198.994873][ T5440] dup_task_struct+0x3d3/0x6b0 [ 198.999676][ T5440] copy_process+0x5bd/0x4020 [ 199.004317][ T5440] kernel_clone+0x225/0x8b0 [ 199.008889][ T5440] __se_sys_clone3+0x2dc/0x360 [ 199.013680][ T5440] do_syscall_64+0x4c/0xa0 [ 199.018129][ T5440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.024065][ T5440] page last free stack trace: [ 199.028860][ T5440] free_unref_page_prepare+0x8b4/0x9a0 [ 199.034404][ T5440] free_unref_page+0x2e/0x3f0 [ 199.039132][ T5440] __vunmap+0x856/0xa00 [ 199.043324][ T5440] free_work+0x56/0x80 [ 199.047428][ T5440] process_one_work+0x898/0x1160 [ 199.052397][ T5440] worker_thread+0xaa2/0x1250 [ 199.057101][ T5440] kthread+0x29d/0x330 [ 199.061210][ T5440] ret_from_fork+0x1f/0x30 [ 199.065666][ T5440] [ 199.068009][ T5440] Memory state around the buggy address: [ 199.073655][ T5440] ffffc9000c84fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 199.081746][ T5440] ffffc9000c84fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 199.089837][ T5440] >ffffc9000c84fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 199.098005][ T5440] ^ [ 199.105244][ T5440] ffffc9000c84fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 199.113436][ T5440] ffffc9000c84fe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 199.121551][ T5440] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.133385][ T5440] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.140654][ T5440] CPU: 1 PID: 5440 Comm: syz.2.283 Not tainted syzkaller #0 [ 199.147980][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.158069][ T5440] Call Trace: [ 199.161359][ T5440] [ 199.164330][ T5440] dump_stack_lvl+0x168/0x22e [ 199.169051][ T5440] ? memcpy+0x3c/0x60 [ 199.173049][ T5440] ? show_regs_print_info+0x12/0x12 [ 199.178268][ T5440] ? load_image+0x3b0/0x3b0 [ 199.183138][ T5440] panic+0x2c9/0x710 [ 199.187592][ T5440] ? bpf_jit_dump+0xd0/0xd0 [ 199.192117][ T5440] ? check_panic_on_warn+0x6c/0xa0 [ 199.197255][ T5440] check_panic_on_warn+0x80/0xa0 [ 199.202215][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 199.206942][ T5440] end_report+0x66/0x110 [ 199.211202][ T5440] kasan_report+0x118/0x140 [ 199.215801][ T5440] ? _find_first_zero_bit+0xcf/0x100 [ 199.221130][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 199.225732][ T5440] ? cp2112_xfer+0x60b/0xdd0 [ 199.230421][ T5440] kasan_check_range+0x27b/0x290 [ 199.235380][ T5440] memcpy+0x25/0x60 [ 199.239196][ T5440] cp2112_xfer+0x60b/0xdd0 [ 199.243628][ T5440] ? cp2112_i2c_xfer+0xed0/0xed0 [ 199.248591][ T5440] __i2c_smbus_xfer+0x771/0x1fc0 [ 199.253540][ T5440] ? _raw_spin_unlock+0x40/0x40 [ 199.258398][ T5440] ? cp2112_i2c_xfer+0xed0/0xed0 [ 199.263353][ T5440] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 199.269616][ T5440] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 199.275713][ T5440] ? __might_fault+0xa6/0x120 [ 199.280779][ T5440] ? i2c_smbus_xfer+0x11d/0x3a0 [ 199.285644][ T5440] i2c_smbus_xfer+0x263/0x3a0 [ 199.290336][ T5440] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 199.295675][ T5440] ? __might_fault+0xc2/0x120 [ 199.300361][ T5440] ? __might_fault+0xa6/0x120 [ 199.305044][ T5440] i2cdev_ioctl_smbus+0x3e3/0x650 [ 199.310087][ T5440] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 199.315321][ T5440] ? __might_fault+0xa6/0x120 [ 199.320008][ T5440] ? __might_fault+0xc2/0x120 [ 199.324693][ T5440] ? __might_fault+0xa6/0x120 [ 199.329386][ T5440] i2cdev_ioctl+0x545/0x750 [ 199.333899][ T5440] ? i2cdev_write+0x120/0x120 [ 199.338588][ T5440] ? bpf_lsm_file_ioctl+0x5/0x10 [ 199.343542][ T5440] ? security_file_ioctl+0x7c/0xa0 [ 199.348672][ T5440] ? i2cdev_write+0x120/0x120 [ 199.353353][ T5440] __se_sys_ioctl+0xfa/0x170 [ 199.357965][ T5440] do_syscall_64+0x4c/0xa0 [ 199.362405][ T5440] ? clear_bhb_loop+0x60/0xb0 [ 199.367095][ T5440] ? clear_bhb_loop+0x60/0xb0 [ 199.371784][ T5440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.377690][ T5440] RIP: 0033:0x7f5cf5b8f749 [ 199.382109][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.401809][ T5440] RSP: 002b:00007f5cf69b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.410229][ T5440] RAX: ffffffffffffffda RBX: 00007f5cf5de5fa0 RCX: 00007f5cf5b8f749 [ 199.418305][ T5440] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 199.426282][ T5440] RBP: 00007f5cf5c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.434315][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.442315][ T5440] R13: 00007f5cf5de6038 R14: 00007f5cf5de5fa0 R15: 00007fffbdb3c888 [ 199.450306][ T5440] [ 199.453976][ T5440] Kernel Offset: disabled [ 199.458330][ T5440] Rebooting in 86400 seconds..