last executing test programs: 292.31778ms ago: executing program 1 (id=2): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 220.532385ms ago: executing program 3 (id=4): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 133.230508ms ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 132.3727ms ago: executing program 3 (id=6): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, 0x0, 0x0, &(0x7f0000000000)) 131.027363ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 136.805µs ago: executing program 3 (id=7): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = epoll_create(0x10e) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$NFT_MSG_GETGEN(r2, 0x0, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0xa, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x5, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x8, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x6, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x85, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) userfaultfd(0x80000) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) listen(r4, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4) listns(&(0x7f0000000000)={0x20, 0x0, 0x20}, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) 0s ago: executing program 0 (id=1): socket(0x840000000002, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55058' (ED25519) to the list of known hosts. [ 42.309351][ T5664] cgroup: Unknown subsys name 'net' [ 42.471152][ T5664] cgroup: Unknown subsys name 'cpuset' [ 42.475199][ T5664] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.532622][ T5664] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.674008][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.674269][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.677566][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.688574][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.688680][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.693127][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.695133][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.697113][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.697393][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.697843][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.700396][ T5758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.704283][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.714459][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.714572][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.717019][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.719078][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.720730][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.724704][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.732782][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.736241][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.255967][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.261928][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.265065][ T5744] bridge_slave_0: entered allmulticast mode [ 48.268990][ T5744] bridge_slave_0: entered promiscuous mode [ 48.296881][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.300117][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.302680][ T5744] bridge_slave_1: entered allmulticast mode [ 48.305854][ T5744] bridge_slave_1: entered promiscuous mode [ 48.393552][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.421981][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.464025][ T5744] team0: Port device team_slave_0 added [ 48.482044][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.484480][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.486786][ T5745] bridge_slave_0: entered allmulticast mode [ 48.489582][ T5745] bridge_slave_0: entered promiscuous mode [ 48.492528][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.495928][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.499028][ T5754] bridge_slave_0: entered allmulticast mode [ 48.501931][ T5754] bridge_slave_0: entered promiscuous mode [ 48.505903][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.508892][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.511998][ T5754] bridge_slave_1: entered allmulticast mode [ 48.514975][ T5754] bridge_slave_1: entered promiscuous mode [ 48.519795][ T5744] team0: Port device team_slave_1 added [ 48.521691][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.524212][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.526514][ T5746] bridge_slave_0: entered allmulticast mode [ 48.529460][ T5746] bridge_slave_0: entered promiscuous mode [ 48.532541][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.535353][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.537709][ T5745] bridge_slave_1: entered allmulticast mode [ 48.540621][ T5745] bridge_slave_1: entered promiscuous mode [ 48.566542][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.568916][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.571238][ T5746] bridge_slave_1: entered allmulticast mode [ 48.573993][ T5746] bridge_slave_1: entered promiscuous mode [ 48.625888][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.630151][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.633856][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.636855][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.647480][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.667884][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.677789][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.681389][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.683714][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.692622][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.698703][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.742100][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.748133][ T5745] team0: Port device team_slave_0 added [ 48.754164][ T5745] team0: Port device team_slave_1 added [ 48.757844][ T5754] team0: Port device team_slave_0 added [ 48.763083][ T5754] team0: Port device team_slave_1 added [ 48.811338][ T5746] team0: Port device team_slave_0 added [ 48.820425][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.823169][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.831232][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.839947][ T5744] hsr_slave_0: entered promiscuous mode [ 48.842303][ T5744] hsr_slave_1: entered promiscuous mode [ 48.845570][ T5746] team0: Port device team_slave_1 added [ 48.848119][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.850488][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.858412][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.862706][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.865412][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.873439][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.886898][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.889410][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.897266][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.939706][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.941915][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.949771][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.974032][ T5745] hsr_slave_0: entered promiscuous mode [ 48.977255][ T5745] hsr_slave_1: entered promiscuous mode [ 48.979971][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.981919][ T5745] Cannot create hsr debugfs directory [ 48.984041][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.986775][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.994938][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.033695][ T5754] hsr_slave_0: entered promiscuous mode [ 49.036209][ T5754] hsr_slave_1: entered promiscuous mode [ 49.038493][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 49.041127][ T5754] Cannot create hsr debugfs directory [ 49.088157][ T5746] hsr_slave_0: entered promiscuous mode [ 49.090765][ T5746] hsr_slave_1: entered promiscuous mode [ 49.093500][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 49.095315][ T5746] Cannot create hsr debugfs directory [ 49.350398][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.360388][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.363833][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.370205][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.373482][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.382085][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.388720][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.398144][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.476084][ T5754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.484932][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.489232][ T5754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.495907][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.502202][ T5754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.509106][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.513774][ T5754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.520423][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.593450][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.601118][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.604129][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.608921][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.613885][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.618115][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.621425][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.625604][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.711670][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.718884][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.725525][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.734985][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.740118][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.742894][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.747914][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.752156][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.758160][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.786126][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.789813][ T5104] Bluetooth: hci2: command tx timeout [ 49.789841][ T5757] Bluetooth: hci1: command tx timeout [ 49.789958][ T5760] Bluetooth: hci3: command tx timeout [ 49.790548][ T5760] Bluetooth: hci0: command tx timeout [ 49.813450][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.816130][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.824342][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.838960][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.841741][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.895310][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.904371][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.919577][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.925817][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.928458][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.939347][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.942548][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.962065][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.965366][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.970689][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.973932][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.004255][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.039437][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.056147][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.058575][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.073895][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.077020][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.288222][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.330125][ T5744] veth0_vlan: entered promiscuous mode [ 50.335923][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.346199][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.356263][ T5744] veth1_vlan: entered promiscuous mode [ 50.389086][ T5745] veth0_vlan: entered promiscuous mode [ 50.398248][ T5745] veth1_vlan: entered promiscuous mode [ 50.422780][ T5744] veth0_macvtap: entered promiscuous mode [ 50.429544][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.432920][ T5754] veth0_vlan: entered promiscuous mode [ 50.440955][ T5744] veth1_macvtap: entered promiscuous mode [ 50.452865][ T5754] veth1_vlan: entered promiscuous mode [ 50.471431][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.476401][ T5745] veth0_macvtap: entered promiscuous mode [ 50.487875][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.500968][ T5745] veth1_macvtap: entered promiscuous mode [ 50.506503][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.512077][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.517519][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.530342][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.547807][ T5754] veth0_macvtap: entered promiscuous mode [ 50.555085][ T5754] veth1_macvtap: entered promiscuous mode [ 50.559954][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.565044][ T5746] veth0_vlan: entered promiscuous mode [ 50.587187][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.599397][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.609778][ T5746] veth1_vlan: entered promiscuous mode [ 50.612903][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.616194][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.632293][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.637254][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.657217][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.663080][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.666882][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.676036][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.692467][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.696527][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.710289][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.726439][ T5746] veth0_macvtap: entered promiscuous mode [ 50.737360][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.740640][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.756762][ T5746] veth1_macvtap: entered promiscuous mode [ 50.762961][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.766499][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.790681][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.804739][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.806010][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.823334][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826948][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.833150][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.833595][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.841627][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.843129][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.853740][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.854890][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.862383][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.874821][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.902092][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.910950][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.978803][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.985644][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.054204][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.064286][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.131200][ T5902] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 51.135196][ T5902] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 51.136762][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.148234][ T5905] cgroup: fork rejected by pids controller in /syz3 [ 51.152639][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.264359][ T5912] ------------[ cut here ]------------ [ 51.267864][ T5912] refcount_t: addition on 0; use-after-free. [ 51.272332][ T5912] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#2: syz.2.3/5912 [ 51.275957][ T5912] Modules linked in: [ 51.278851][ T5912] CPU: 2 UID: 0 PID: 5912 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 51.282460][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.286343][ T5912] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 51.289099][ T5912] Code: cc e8 63 e7 ed fc 48 8d 3d 6c 02 12 0c 67 48 0f b9 3a e8 52 e7 ed fc 5b 5d e9 cb dd 9f 06 e8 46 e7 ed fc 48 8d 3d 5f 02 12 0c <67> 48 0f b9 3a e8 35 e7 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 86 [ 51.297106][ T5912] RSP: 0018:ffffc90006617c78 EFLAGS: 00010287 [ 51.299762][ T5912] RAX: 0000000000000f8d RBX: ffff88806bd9e11c RCX: ffffc90025c99000 [ 51.302872][ T5912] RDX: 0000000000080000 RSI: ffffffff851bc51a RDI: ffffffff912dc780 [ 51.305892][ T5912] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 51.309020][ T5912] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806bd9e11c [ 51.312677][ T5912] R13: ffff88802acec358 R14: ffffc90006617d28 R15: ffff888050030000 [ 51.315726][ T5912] FS: 0000000000000000(0000) GS:ffff888096de3000(0063) knlGS:00000000f539cb40 [ 51.319876][ T5912] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 51.322746][ T5912] CR2: 00000000f539bff4 CR3: 000000001353b000 CR4: 0000000000352ef0 [ 51.325888][ T5912] Call Trace: [ 51.327207][ T5912] [ 51.328863][ T5912] config_item_get+0x8c/0xb0 [ 51.331080][ T5912] configfs_symlink+0x390/0x11f0 [ 51.333099][ T5912] ? bpf_lsm_inode_permission+0x9/0x10 [ 51.335579][ T5912] ? security_inode_permission+0xbf/0x250 [ 51.337783][ T5912] ? __pfx_configfs_symlink+0x10/0x10 [ 51.339669][ T5912] vfs_symlink+0x178/0x4d0 [ 51.340927][ T5912] filename_symlinkat+0x2a6/0x560 [ 51.342921][ T5912] ? __pfx_filename_symlinkat+0x10/0x10 [ 51.345253][ T5912] ? strncpy_from_user+0x19d/0x2d0 [ 51.347353][ T5912] ? do_getname+0x191/0x390 [ 51.349370][ T5912] __ia32_sys_symlinkat+0x9b/0xe0 [ 51.350917][ T5914] Config c/1 of g1 needs at least one function. [ 51.351604][ T5912] __do_fast_syscall_32+0xe7/0x970 [ 51.354180][ T5914] udc dummy_udc.0: failed to start g1: -22 [ 51.355942][ T5912] do_fast_syscall_32+0x32/0x70 [ 51.355980][ T5912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.361475][ T5914] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 51.362562][ T5912] RIP: 0023:0xf6fcefec [ 51.362587][ T5912] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 51.362597][ T5912] RSP: 002b:00000000f539c50c EFLAGS: 00000292 [ 51.369262][ T5914] UDC core: g1: couldn't find an available UDC or it's busy [ 51.369890][ T5912] ORIG_RAX: 0000000000000130 [ 51.377514][ T5912] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 51.380881][ T5912] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.384072][ T5912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.387194][ T5912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.390393][ T5912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.393484][ T5912] [ 51.394699][ T5912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.397441][ T5912] CPU: 2 UID: 0 PID: 5912 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 51.400902][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.404943][ T5912] Call Trace: [ 51.406351][ T5912] [ 51.407604][ T5912] dump_stack_lvl+0x100/0x190 [ 51.409647][ T5912] vpanic+0x552/0x970 [ 51.411232][ T5912] ? __pfx_vpanic+0x10/0x10 [ 51.413031][ T5912] panic+0xd1/0xe0 [ 51.414529][ T5912] ? __pfx_panic+0x10/0x10 [ 51.416336][ T5912] check_panic_on_warn.cold+0x19/0x34 [ 51.418430][ T5912] ? refcount_warn_saturate+0x111/0x130 [ 51.420596][ T5912] __warn.cold+0x191/0x318 [ 51.422371][ T5912] __report_bug+0x30f/0x440 [ 51.424254][ T5912] ? refcount_warn_saturate+0x111/0x130 [ 51.426584][ T5912] ? __pfx___report_bug+0x10/0x10 [ 51.428748][ T5912] ? refcount_warn_saturate+0x10a/0x130 [ 51.431029][ T5912] report_bug_entry+0xe1/0x290 [ 51.432982][ T5912] ? refcount_warn_saturate+0x111/0x130 [ 51.435121][ T5912] handle_bug+0x1cd/0x2a0 [ 51.436815][ T5912] exc_invalid_op+0x17/0x50 [ 51.438587][ T5912] asm_exc_invalid_op+0x1a/0x20 [ 51.440552][ T5912] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 51.443184][ T5912] Code: cc e8 63 e7 ed fc 48 8d 3d 6c 02 12 0c 67 48 0f b9 3a e8 52 e7 ed fc 5b 5d e9 cb dd 9f 06 e8 46 e7 ed fc 48 8d 3d 5f 02 12 0c <67> 48 0f b9 3a e8 35 e7 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 86 [ 51.451133][ T5912] RSP: 0018:ffffc90006617c78 EFLAGS: 00010287 [ 51.453540][ T5912] RAX: 0000000000000f8d RBX: ffff88806bd9e11c RCX: ffffc90025c99000 [ 51.456429][ T5912] RDX: 0000000000080000 RSI: ffffffff851bc51a RDI: ffffffff912dc780 [ 51.459453][ T5912] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 51.461987][ T5912] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806bd9e11c [ 51.464436][ T5912] R13: ffff88802acec358 R14: ffffc90006617d28 R15: ffff888050030000 [ 51.466886][ T5912] ? refcount_warn_saturate+0x10a/0x130 [ 51.468687][ T5912] ? refcount_warn_saturate+0x10a/0x130 [ 51.470518][ T5912] config_item_get+0x8c/0xb0 [ 51.472181][ T5912] configfs_symlink+0x390/0x11f0 [ 51.473811][ T5912] ? bpf_lsm_inode_permission+0x9/0x10 [ 51.475590][ T5912] ? security_inode_permission+0xbf/0x250 [ 51.477377][ T5912] ? __pfx_configfs_symlink+0x10/0x10 [ 51.478924][ T5912] vfs_symlink+0x178/0x4d0 [ 51.480263][ T5912] filename_symlinkat+0x2a6/0x560 [ 51.481853][ T5912] ? __pfx_filename_symlinkat+0x10/0x10 [ 51.483555][ T5912] ? strncpy_from_user+0x19d/0x2d0 [ 51.485132][ T5912] ? do_getname+0x191/0x390 [ 51.486534][ T5912] __ia32_sys_symlinkat+0x9b/0xe0 [ 51.488174][ T5912] __do_fast_syscall_32+0xe7/0x970 [ 51.489890][ T5912] do_fast_syscall_32+0x32/0x70 [ 51.491602][ T5912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.493778][ T5912] RIP: 0023:0xf6fcefec [ 51.495139][ T5912] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 51.497248][ T5912] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 51.499807][ T5912] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 51.502259][ T5912] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.504695][ T5912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.507148][ T5912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.509585][ T5912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.512114][ T5912] [ 51.513808][ T5912] Kernel Offset: disabled [ 51.515232][ T5912] Rebooting in 86400 seconds..