last executing test programs: 3.22478358s ago: executing program 0 (id=926): io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x40000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f0000000480)=ANY=[@ANYBLOB="66643d93f008a0cac0792263a3c282b30ce0895705a41b1dbded57b51b8ee30845de522e44b0e1af8ef8e1d6fe303995dd8d29ac80e3e5ff4004e5ecf9794f90dcf30c8768e235039d206731d5232528569202a0a6d4a13c0f30c50e529ab6cc38f3bdd764cdaa39e046f61bf0650707fa4864128a26ffb1693ae3fec5a2847a27fbba15a275c7b16fc5023905a5c6dda612a8ea349b8b5ad6cc246278acc1c12ef84ce1373d4c9ea76f57a308", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 2.46387825s ago: executing program 2 (id=938): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0xb45, 0x9, 0x200008, 0x2, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x1, 0x22935, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4008810) 2.328157677s ago: executing program 0 (id=944): syz_open_dev$cec(0x0, 0x0, 0x0) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x24048000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.310545778s ago: executing program 0 (id=945): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x802) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2.270893611s ago: executing program 1 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f608000000011800"], 0x44}}, 0x40010) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2.270351241s ago: executing program 1 (id=947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x1, 0x1a3) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 2.249186342s ago: executing program 1 (id=948): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.172028526s ago: executing program 0 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 2.159401036s ago: executing program 0 (id=950): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.157847827s ago: executing program 1 (id=951): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.802306055s ago: executing program 4 (id=953): socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 1.801766005s ago: executing program 4 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x4011) 1.649845113s ago: executing program 4 (id=958): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f608000000011800"], 0x44}}, 0x40010) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 1.604055236s ago: executing program 2 (id=959): set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a60000000060a030400000000000000000a0000010900010073797a31000000fa330004803000018008000100636d700024000280080001400000000808000240000000011000038009000100501a46e5f10000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.584671396s ago: executing program 4 (id=961): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.568233328s ago: executing program 2 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 1.500733221s ago: executing program 2 (id=963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000007c0)=' ', 0x1}], 0x1}, 0x2c1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 1.455046884s ago: executing program 4 (id=965): socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 1.412637246s ago: executing program 4 (id=968): syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) 1.263948173s ago: executing program 0 (id=970): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b00000000000009"], 0x0) close(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x2f, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0xfd, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x7fff, 0x2, 0x1, {0x22, 0xab6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd5, 0x3, 0x2}}}}}]}}]}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r1, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) 1.263689053s ago: executing program 1 (id=971): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 707.224243ms ago: executing program 3 (id=977): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 641.640187ms ago: executing program 2 (id=978): syz_open_dev$cec(0x0, 0x0, 0x0) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x24048000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 622.642397ms ago: executing program 3 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x47}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 594.764849ms ago: executing program 2 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 568.08031ms ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x66e, 0x80000000, 0x10001, 0x790, 0x9, 0x1, 0xfffffff9, 0x1a7a, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x8, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x7, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x27f, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x4, 0x1, 0x4, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x40003, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffb, 0xfffffff6, 0x93, 0x7fff, 0x100092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x40000000, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x80, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x2000, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x1, 0x1, 0x800, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x1000007, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0xcb9, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x0, 0xd, 0x9, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 160.032472ms ago: executing program 1 (id=982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 88.458745ms ago: executing program 3 (id=983): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 66.611766ms ago: executing program 3 (id=984): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 0s ago: executing program 3 (id=985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) capset(0x0, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 29.101369][ T4307] cgroup: Unknown subsys name 'net' [ 29.310973][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.572060][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.278282][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.280442][ T4321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.282127][ T4321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.283818][ T4321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.285346][ T4321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.286697][ T4321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.297703][ T4321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.299251][ T4321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.301052][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.302439][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.303891][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.305276][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.306573][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.312198][ T4325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.313535][ T4325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.315145][ T4321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.316359][ T4321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.317549][ T4325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.320281][ T4328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.321963][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.323458][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.325427][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.329365][ T4328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.330799][ T4328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.349141][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.350671][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.355465][ T4324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.357243][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.360717][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.362006][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.451231][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.479938][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 30.509220][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 30.535806][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.537011][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.539349][ T4319] device bridge_slave_0 entered promiscuous mode [ 30.541321][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.542520][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.544039][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.545609][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 30.556458][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.557727][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.560466][ T4319] device bridge_slave_1 entered promiscuous mode [ 30.563795][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.565010][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.566567][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.575870][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.577217][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.578762][ T4320] device bridge_slave_0 entered promiscuous mode [ 30.590278][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.591955][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593241][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.594856][ T4320] device bridge_slave_1 entered promiscuous mode [ 30.600538][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.603235][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.611983][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.622462][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.630044][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631241][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.632784][ T4323] device bridge_slave_0 entered promiscuous mode [ 30.635720][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.646635][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.647871][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.649889][ T4323] device bridge_slave_1 entered promiscuous mode [ 30.652109][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.654709][ T4326] team0: Port device team_slave_0 added [ 30.658064][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.661021][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.662649][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.665441][ T4319] team0: Port device team_slave_0 added [ 30.673156][ T4326] team0: Port device team_slave_1 added [ 30.676839][ T4319] team0: Port device team_slave_1 added [ 30.681467][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.682655][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.684079][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.686422][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.699353][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.701996][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.704567][ T4320] team0: Port device team_slave_0 added [ 30.706006][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.707247][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.712029][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.714571][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.715674][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.721581][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.727390][ T4320] team0: Port device team_slave_1 added [ 30.732581][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.734360][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.735497][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.739870][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.742095][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.743219][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.747542][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.754957][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.756164][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.762466][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.771508][ T4323] team0: Port device team_slave_0 added [ 30.772771][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.773863][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.778221][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.785404][ T4331] team0: Port device team_slave_0 added [ 30.787614][ T4331] team0: Port device team_slave_1 added [ 30.791288][ T4323] team0: Port device team_slave_1 added [ 30.810737][ T4319] device hsr_slave_0 entered promiscuous mode [ 30.848476][ T4319] device hsr_slave_1 entered promiscuous mode [ 30.897086][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.898498][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.903013][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.905929][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.907137][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.911801][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.919011][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.920252][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.924341][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.926860][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.928046][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.932339][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.959518][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.008533][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.048476][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.049889][ T4326] Cannot create hsr debugfs directory [ 31.111845][ T4320] device hsr_slave_0 entered promiscuous mode [ 31.148982][ T4320] device hsr_slave_1 entered promiscuous mode [ 31.188362][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.189628][ T4320] Cannot create hsr debugfs directory [ 31.249442][ T4323] device hsr_slave_0 entered promiscuous mode [ 31.298632][ T4323] device hsr_slave_1 entered promiscuous mode [ 31.338358][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.339573][ T4323] Cannot create hsr debugfs directory [ 31.379619][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.418566][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.458382][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.459702][ T4331] Cannot create hsr debugfs directory [ 31.566642][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.631473][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.672088][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.709482][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.766289][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.802526][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.844825][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.880976][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.929722][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.933707][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.969890][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.014034][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.088749][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.131496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.133694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.143741][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.169557][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.211895][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.251772][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.322420][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.327530][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.328718][ T4324] Bluetooth: hci3: command 0x0409 tx timeout [ 32.328771][ T4324] Bluetooth: hci0: command 0x0409 tx timeout [ 32.328810][ T4324] Bluetooth: hci2: command 0x0409 tx timeout [ 32.372842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.374730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.376384][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.377639][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.379841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.382252][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.408523][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 32.408607][ T4324] Bluetooth: hci1: command 0x0409 tx timeout [ 32.423136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.424819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.426299][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.427699][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.431256][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.459671][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.513826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.515659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.522846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.524696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.526671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.541928][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.543717][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.551870][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.553576][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.555565][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.557076][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.561118][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.567821][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.584975][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.596508][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.598098][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.601371][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.615297][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.616803][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.620866][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.622629][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.624286][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.625543][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.626960][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.631603][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.641382][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.643182][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.644653][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.645844][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.651719][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.653484][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.655261][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.656449][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.662013][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.667075][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.669261][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.675708][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.677453][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.679820][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.681048][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.682411][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.683604][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.690092][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.695661][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.700343][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.702117][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.706924][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.712326][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.714232][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.716229][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.717673][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.719740][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.724839][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.732093][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.733645][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.735160][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.737384][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.739334][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.740984][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.743406][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.745075][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.746580][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.754004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.755566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.757086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.759568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.761055][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.762202][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.763845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.765538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.768146][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.777099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.780038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.781710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.783262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.784791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.786269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.787889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.795015][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.796758][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.798224][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.799483][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.801301][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.803277][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.804731][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.805907][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.807293][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.809704][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.811716][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.812866][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.814493][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.816671][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.819029][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.827991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.830052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.831620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.839048][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.840623][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.842310][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.843941][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.854758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.856826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.859669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.861406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.863482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.865035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.873192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.874885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.876422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.886029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.887919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.894980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.896641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.909284][ T4320] device veth0_vlan entered promiscuous mode [ 32.912056][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.913956][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.920524][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.922220][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.923736][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.925244][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.931023][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.935935][ T4320] device veth1_vlan entered promiscuous mode [ 32.945056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.946753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.948184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.950409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.962832][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.967812][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.985649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.987001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.989373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.991119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.007754][ T4319] device veth0_vlan entered promiscuous mode [ 33.011145][ T4320] device veth0_macvtap entered promiscuous mode [ 33.014832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.016364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.017949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.023263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.025333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.027472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.029591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.031393][ T4320] device veth1_macvtap entered promiscuous mode [ 33.038579][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.045144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.046743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.048015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.054811][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.057909][ T4319] device veth1_vlan entered promiscuous mode [ 33.061255][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.062589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.064213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.066162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.067678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.070994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.077215][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.086785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.088819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.090381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.095169][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096691][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.098027][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111350][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.116515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.118142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.120722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.122246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.124901][ T4326] device veth0_vlan entered promiscuous mode [ 33.130862][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.132218][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.142279][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.144304][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.145880][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.150227][ T4326] device veth1_vlan entered promiscuous mode [ 33.152201][ T4319] device veth0_macvtap entered promiscuous mode [ 33.160343][ T4319] device veth1_macvtap entered promiscuous mode [ 33.199998][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.201977][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.204289][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.205721][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.207314][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.210068][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.211678][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.213615][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.215326][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.216907][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.218627][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.231821][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.233524][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.235145][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.236586][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.243722][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.245470][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.247333][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.252508][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.253962][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.255360][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.256973][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.261364][ T4323] device veth0_vlan entered promiscuous mode [ 33.265941][ T4326] device veth0_macvtap entered promiscuous mode [ 33.268222][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.269849][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.274712][ T4323] device veth1_vlan entered promiscuous mode [ 33.276660][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.278023][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.282066][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.283498][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.286676][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.288226][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.291404][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.292883][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.294536][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.301998][ T4326] device veth1_macvtap entered promiscuous mode [ 33.320263][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.322138][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.323900][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.325606][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.329343][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.332112][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.333662][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.335184][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.336843][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.343450][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.344714][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.346392][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.355186][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.356829][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.358866][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.360638][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.362562][ T4331] device veth0_vlan entered promiscuous mode [ 33.367626][ T4323] device veth0_macvtap entered promiscuous mode [ 33.371992][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.373663][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.375260][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.377115][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.380384][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.382584][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.384293][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.385741][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.387291][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.391120][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.402703][ T4323] device veth1_macvtap entered promiscuous mode [ 33.421340][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.423063][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.424584][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.426192][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.429479][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.431233][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.433984][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.436471][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438079][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440471][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.442041][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.444912][ T4331] device veth1_vlan entered promiscuous mode [ 33.448121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.450804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.452465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.454447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.485908][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.487683][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.490513][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.492307][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.493958][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.495551][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.499055][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.512720][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.514444][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.516195][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.547682][ T4331] device veth0_macvtap entered promiscuous mode [ 33.551491][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.553076][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.554978][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.564762][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.566081][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.568206][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.573903][ T4407] ax25_connect(): syz.3.9 uses autobind, please contact jreuter@yaina.de [ 33.576089][ T4407] ax25_connect(): syz.3.9 uses autobind, please contact jreuter@yaina.de [ 33.584461][ T4331] device veth1_macvtap entered promiscuous mode [ 33.590046][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.591557][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593063][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.594504][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.602719][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.603996][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.608892][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.610708][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.612382][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.614221][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.615910][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.617567][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.628921][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.630710][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.636614][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.643524][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.645221][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.647061][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.649842][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.717013][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.719539][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.721210][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.722938][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.724499][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.726154][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.727587][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.731012][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.733448][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.737743][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.738572][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.739631][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.740313][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.742922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.438625][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 34.438650][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 34.438713][ T4324] Bluetooth: hci2: command 0x041b tx timeout [ 34.488473][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 34.489611][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 34.496108][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.497753][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.499164][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.504411][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.505825][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.507174][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.800462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.843601][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.845000][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.849278][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.850521][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.853422][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.855325][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.876122][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.895083][ T4419] Zero length message leads to an empty skb [ 35.007715][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.009430][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.377406][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.390959][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.675235][ T4419] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.676710][ T4419] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.678125][ T4419] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.679735][ T4419] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.934215][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.935613][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.940242][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.993635][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.995406][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.018606][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.020014][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.022924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.062394][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 36.095337][ T4435] loop4: detected capacity change from 0 to 764 [ 36.117965][ T4435] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.167585][ T4443] ax25_connect(): syz.2.18 uses autobind, please contact jreuter@yaina.de [ 36.175030][ T4443] ax25_connect(): syz.2.18 uses autobind, please contact jreuter@yaina.de [ 36.488797][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 36.488840][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.491092][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 36.569022][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 36.570273][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 37.135057][ T4459] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23'. [ 37.265532][ T4460] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 38.143929][ T4476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27'. [ 38.279094][ T4482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.283688][ T4482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.566931][ T4492] ax25_connect(): syz.2.33 uses autobind, please contact jreuter@yaina.de [ 38.570904][ T4492] ax25_connect(): syz.2.33 uses autobind, please contact jreuter@yaina.de [ 38.578587][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 38.579719][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 38.580789][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 38.648631][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 38.649698][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 40.558725][ T4509] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 40.785978][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.787743][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.174081][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.188639][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.495177][ T4478] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.496616][ T4478] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.498118][ T4478] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.499821][ T4478] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.735892][ T4511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.780313][ T4514] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 41.793653][ T4520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 42.463838][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.468849][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.509807][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 43.545481][ T4547] ax25_connect(): syz.1.49 uses autobind, please contact jreuter@yaina.de [ 43.551948][ T4547] ax25_connect(): syz.1.49 uses autobind, please contact jreuter@yaina.de [ 43.561837][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 43.725279][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.726848][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.750670][ T4552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 43.797322][ T4553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.50'. [ 45.404180][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.405648][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.773658][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.787845][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.071139][ T4552] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.072840][ T4552] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.074155][ T4552] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.075523][ T4552] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.340355][ T4557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 46.348105][ T4564] netlink: 52 bytes leftover after parsing attributes in process `syz.0.54'. [ 46.349690][ T4564] device wg2 entered promiscuous mode [ 46.423751][ T4578] ax25_connect(): syz.3.60 uses autobind, please contact jreuter@yaina.de [ 46.425989][ T4578] ax25_connect(): syz.3.60 uses autobind, please contact jreuter@yaina.de [ 46.688402][ T1514] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 47.596537][ T1514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.604851][ T1514] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 47.606276][ T1514] usb 1-1: can't read configurations, error -71 [ 48.598297][ C0] sched: RT throttling activated [ 48.622107][ T4609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.68'. [ 48.802426][ T4612] netlink: 52 bytes leftover after parsing attributes in process `syz.0.69'. [ 48.803936][ T4612] device veth0_to_bond entered promiscuous mode [ 48.806302][ T4613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.70'. [ 50.284271][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.289362][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.347537][ T4636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 50.526117][ T4643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.82'. [ 50.721017][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 50.727691][ T4652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.86'. [ 50.735382][ T4650] device team1 entered promiscuous mode [ 50.736880][ T4650] 8021q: adding VLAN 0 to HW filter on device team1 [ 50.756591][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 50.765420][ T4650] device team2 entered promiscuous mode [ 50.766995][ T4650] 8021q: adding VLAN 0 to HW filter on device team2 [ 50.875435][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.879240][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.489358][ T4671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.491247][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.606319][ T4674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 52.793842][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.795247][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.235489][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.250417][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.515391][ T4674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.517120][ T4674] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.519127][ T4674] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.520656][ T4674] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.754974][ T4677] netlink: 76 bytes leftover after parsing attributes in process `syz.1.95'. [ 53.767019][ T4697] device syzkaller0 entered promiscuous mode [ 53.893908][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 54.130903][ T4420] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 54.165511][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.171382][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.309750][ T4420] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 54.311361][ T4420] usb 1-1: config 0 has no interface number 0 [ 54.312606][ T4420] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 54.316656][ T4420] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 54.318228][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.322948][ T4420] usb 1-1: Product: syz [ 54.323633][ T4420] usb 1-1: Manufacturer: syz [ 54.324457][ T4420] usb 1-1: SerialNumber: syz [ 54.354307][ T4420] usb 1-1: config 0 descriptor?? [ 54.367218][ T4420] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 54.374358][ T4420] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 54.727590][ T4730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.732302][ T4730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.072760][ T3896] usb 1-1: USB disconnect, device number 4 [ 55.080873][ T3896] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 55.085353][ T3896] kobil_sct 1-1:0.148: device disconnected [ 55.293556][ T4737] binder: 4736:4737 tried to acquire reference to desc 0, got 1 instead [ 55.314133][ T4737] binder: 4736:4737 BC_FREE_BUFFER u0000000020ffe000 no match [ 55.320473][ T4737] binder: 4736:4737 got transaction with invalid offset (24, min 24 max 40) or object. [ 55.323817][ T4737] binder: 4736:4737 transaction call to 4736:0 failed 12/29201/-22, size 40-24 line 3346 [ 55.335217][ T3896] binder: release 4736:4737 transaction 5 out, still active [ 55.336628][ T3896] binder: undelivered TRANSACTION_COMPLETE [ 55.337827][ T3896] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.343374][ T3896] binder: send failed reply for transaction 5, target dead [ 55.427154][ T4741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.454478][ T4741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.515805][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'. [ 56.309108][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.312658][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.489507][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490709][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.830053][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 64.834669][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 64.836140][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 64.837871][ T4735] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 64.841340][ T4735] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 64.931601][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.933832][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.849206][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.850683][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.943906][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.947303][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.377515][ T4816] binder: 4815:4816 tried to acquire reference to desc 0, got 1 instead [ 66.382462][ T4816] binder: 4815:4816 BC_FREE_BUFFER u0000000020ffe000 no match [ 66.383882][ T4816] binder: 4815:4816 got transaction to invalid handle, 3 [ 66.385149][ T4816] binder: 4816:4815 cannot find target node [ 66.386058][ T4816] binder: 4815:4816 transaction call to 0:0 failed 17/29201/-22, size 40-24 line 3045 [ 66.394145][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.609407][ T22] cfg80211: failed to load regulatory.db [ 75.871361][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 75.873942][ T4823] bond0: (slave bond_slave_1): Releasing backup interface [ 75.891717][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.893278][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.928940][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 75.956331][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 76.083198][ T4854] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 76.094227][ T4854] fuse: Bad value for 'fd' [ 76.207451][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.209371][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.384242][ T4876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 76.492797][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.494259][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.876344][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.892205][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.156995][ T4876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.158701][ T4876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.160431][ T4876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.162196][ T4876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.484867][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 77.494415][ T4893] device team1 entered promiscuous mode [ 77.495813][ T4893] 8021q: adding VLAN 0 to HW filter on device team1 [ 77.639829][ T4896] device syzkaller0 entered promiscuous mode [ 77.678069][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.680816][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.742337][ T4896] tipc: Started in network mode [ 77.743220][ T4896] tipc: Node identity ee5bd1bd4dc3, cluster identity 4711 [ 77.744549][ T4896] tipc: Enabled bearer , priority 0 [ 77.749422][ T4892] tipc: Resetting bearer [ 77.849595][ T4892] tipc: Disabling bearer [ 77.851900][ T4909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.163'. [ 77.993018][ T4915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.166'. [ 78.062671][ T4917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.167'. [ 78.171701][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 78.176579][ T4922] device team2 entered promiscuous mode [ 78.178066][ T4922] 8021q: adding VLAN 0 to HW filter on device team2 [ 78.321088][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 78.524931][ T4944] device team1 entered promiscuous mode [ 78.527254][ T4944] 8021q: adding VLAN 0 to HW filter on device team1 [ 78.547601][ T4944] device team2 entered promiscuous mode [ 78.552837][ T4944] 8021q: adding VLAN 0 to HW filter on device team2 [ 78.575912][ T4952] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 78.583080][ T4952] fuse: Bad value for 'fd' [ 78.715810][ T4959] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (62027) [ 78.717831][ T4959] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 78.963113][ T4968] tipc: Enabling of bearer rejected, failed to enable media [ 79.140169][ T4980] binder: tried to use weak ref as strong ref [ 79.141390][ T4980] binder: 4979:4980 Acquire 1 refcount change on invalid ref 0 ret -22 [ 79.143230][ T4980] binder: 4979:4980 got transaction to invalid handle, 1 [ 79.144600][ T4980] binder: 4980:4979 cannot find target node [ 79.145703][ T4980] binder: 4979:4980 transaction call to 0:0 failed 20/29201/-22, size 72-24 line 3045 [ 79.157277][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.252172][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.253774][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.430185][ T4994] device syzkaller0 entered promiscuous mode [ 79.587781][ T5009] binder: BINDER_SET_CONTEXT_MGR already set [ 79.590383][ T5009] binder: 5008:5009 ioctl 4018620d 20004a80 returned -16 [ 79.592539][ T5009] binder: 5008:5009 BC_FREE_BUFFER u0000000020ffe000 no match [ 79.593911][ T5009] binder: 5008:5009 got transaction to invalid handle, 3 [ 79.595030][ T5009] binder: 5009:5008 cannot find target node [ 79.595947][ T5009] binder: 5008:5009 transaction call to 0:0 failed 23/29201/-22, size 40-24 line 3045 [ 79.633694][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.887669][ T5044] device syzkaller0 entered promiscuous mode [ 80.628194][ T27] audit: type=1326 audit(80.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.3.235" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f771a8 code=0x0 [ 80.824779][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.826480][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.163047][ T5086] __nla_validate_parse: 4 callbacks suppressed [ 81.163056][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 81.173047][ T5086] device team1 entered promiscuous mode [ 81.174241][ T5086] 8021q: adding VLAN 0 to HW filter on device team1 [ 81.216542][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.218110][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.481772][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 81.487868][ T5095] device team3 entered promiscuous mode [ 81.490424][ T5095] 8021q: adding VLAN 0 to HW filter on device team3 [ 81.788872][ T5100] device syzkaller0 entered promiscuous mode [ 82.285704][ T5107] device syzkaller0 entered promiscuous mode [ 82.442714][ T5118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.444361][ T5118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.452318][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 82.462241][ T5120] device team1 entered promiscuous mode [ 82.463700][ T5120] 8021q: adding VLAN 0 to HW filter on device team1 [ 82.499928][ T5123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.503259][ T5123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.582493][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 82.932101][ T5145] netlink: 108 bytes leftover after parsing attributes in process `syz.1.266'. [ 82.937892][ T5145] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 82.939854][ T5145] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 83.055357][ T5148] device syzkaller0 entered promiscuous mode [ 83.205809][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 83.215107][ T5150] device team3 entered promiscuous mode [ 83.216472][ T5150] 8021q: adding VLAN 0 to HW filter on device team3 [ 83.319277][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 83.472172][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.475980][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.722596][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 83.727751][ T5173] device team3 entered promiscuous mode [ 83.734738][ T5173] 8021q: adding VLAN 0 to HW filter on device team3 [ 83.932231][ T5182] device syzkaller0 entered promiscuous mode [ 84.598086][ T5195] process 'syz.1.288' launched '/dev/fd/4' with NULL argv: empty string added [ 85.436400][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.453136][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.490659][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 85.495286][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 85.589905][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.591457][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.610643][ T5210] device syzkaller0 entered promiscuous mode [ 86.729726][ T5236] __nla_validate_parse: 1 callbacks suppressed [ 86.729735][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 86.732532][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 88.071982][ T5233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.073214][ T5233] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.084487][ T5233] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 88.089070][ T5233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.101760][ T5233] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.105846][ T5233] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 88.110209][ T5233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.115034][ T5233] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.117436][ T5233] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 88.124154][ T5233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.125314][ T5233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.127982][ T5233] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 88.135556][ T5233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.136595][ T5233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 88.141790][ T5233] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 88.373808][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 88.383607][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 88.509157][ T5285] device syzkaller0 entered promiscuous mode [ 88.583988][ T5291] device syzkaller0 entered promiscuous mode [ 88.671854][ T5294] device ip6gre1 entered promiscuous mode [ 88.673790][ T4333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.675251][ T4333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.698713][ T4333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.738862][ T4332] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.932263][ T5308] device syzkaller0 entered promiscuous mode [ 89.793586][ T4369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 89.795774][ T4369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.057694][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 90.063998][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 90.065816][ T5316] netlink: 'syz.0.331': attribute type 22 has an invalid length. [ 90.067139][ T5316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 90.088390][ T4328] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.168449][ T4332] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.169596][ T4332] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.170663][ T4332] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.182253][ T5331] tipc: Started in network mode [ 90.185442][ T5331] tipc: Node identity aa6a19e0d1fa, cluster identity 4711 [ 90.192662][ T5331] tipc: Enabled bearer , priority 0 [ 90.204942][ T5331] tipc: Disabling bearer [ 90.533323][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 90.809048][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 91.997120][ T5380] tipc: Started in network mode [ 91.998116][ T5380] tipc: Node identity ae378a29aa52, cluster identity 4711 [ 92.001149][ T5380] tipc: Enabled bearer , priority 0 [ 92.003926][ T5380] tipc: Disabling bearer [ 92.080488][ T5387] binder: 5385:5387 unknown command 0 [ 92.081722][ T5387] binder: 5385:5387 ioctl c0306201 20000080 returned -22 [ 92.087830][ T5387] binder: 5385:5387 tried to acquire reference to desc 0, got 1 instead [ 92.090793][ T4369] binder: release 5385:5387 transaction 28 out, still active [ 92.092114][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 92.101302][ T4369] binder: send failed reply for transaction 28, target dead [ 92.178367][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 92.203412][ T5393] device syzkaller0 entered promiscuous mode [ 92.258475][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 92.258498][ T4324] Bluetooth: hci4: command 0x0406 tx timeout [ 92.260786][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 92.408390][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.543483][ T5396] device syzkaller0 entered promiscuous mode [ 92.736623][ T5418] binder: 5417:5418 got transaction to invalid handle, 1 [ 92.738191][ T5418] binder: 5418:5417 cannot find target node [ 92.739805][ T5418] binder: 5417:5418 transaction call to 0:0 failed 32/29201/-22, size 72-24 line 3045 [ 92.742698][ T5418] binder: 5417:5418 BC_FREE_BUFFER u0000000020ffe000 no match [ 92.743846][ T5418] binder: 5417:5418 got transaction to invalid handle, 3 [ 92.744947][ T5418] binder: 5418:5417 cannot find target node [ 92.746036][ T5418] binder: 5417:5418 transaction call to 0:0 failed 33/29201/-22, size 40-24 line 3045 [ 92.754668][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.755825][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.115499][ T5420] device syzkaller0 entered promiscuous mode [ 93.364399][ T5432] device syzkaller0 entered promiscuous mode [ 93.601537][ T5451] device syzkaller0 entered promiscuous mode [ 93.628452][ T4332] Bluetooth: hci2: unexpected event for opcode 0x080b [ 93.770773][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.773920][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.897107][ T5475] device syzkaller0 entered promiscuous mode [ 93.905900][ T5477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.907709][ T5477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.911888][ T5477] binder: 5476:5477 tried to acquire reference to desc 0, got 1 instead [ 93.914299][ T5477] binder: 5476:5477 got reply transaction with bad transaction stack, transaction 38 has target 5476:0 [ 93.916235][ T5477] binder: 5476:5477 transaction reply to 0:0 failed 39/29201/-71, size 0-0 line 2961 [ 94.618854][ T5501] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 94.622600][ T5501] fuse: Bad value for 'fd' [ 94.687456][ T5507] device ip6gre1 entered promiscuous mode [ 94.689782][ T1514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.691103][ T1514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.695904][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 94.718473][ T1514] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.756202][ T5515] device syzkaller0 entered promiscuous mode [ 94.762000][ T5517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.413'. [ 94.778435][ T3896] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.012612][ T5537] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 95.016364][ T5537] fuse: Bad value for 'fd' [ 95.038500][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.113982][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.116217][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.228391][ T1514] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.408376][ T1514] usb 1-1: Using ep0 maxpacket: 16 [ 95.410845][ T1514] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.412423][ T1514] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.414752][ T1514] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 95.416222][ T1514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.418562][ T1514] usb 1-1: config 0 descriptor?? [ 95.422697][ T1514] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 95.505411][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 95.581480][ T5545] device ip6gre1 entered promiscuous mode [ 95.664951][ T5551] device syzkaller0 entered promiscuous mode [ 95.955379][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 96.464410][ T5574] device syzkaller0 entered promiscuous mode [ 96.642553][ T5576] device ip6gre1 entered promiscuous mode [ 96.644419][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.645841][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.678489][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.683015][ T5577] binder: 5532:5577 tried to acquire reference to desc 0, got 1 instead [ 96.684718][ T5577] binder: 5532:5577 got reply transaction with bad transaction stack, transaction 44 has target 5532:0 [ 97.295756][ T5600] binder: 5599:5600 unknown command 0 [ 97.296747][ T5600] binder: 5599:5600 ioctl c0306201 20000080 returned -22 [ 97.300765][ T5600] binder: 5599:5600 got transaction to invalid handle, 1 [ 97.302330][ T5600] binder_debug: 3 callbacks suppressed [ 97.302343][ T5600] binder: 5600:5599 cannot find target node [ 97.304547][ T5600] binder: 5599:5600 transaction call to 0:0 failed 49/29201/-22, size 120-24 line 3045 [ 97.306505][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 97.309066][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.397036][ T5608] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 97.401562][ T5608] fuse: Bad value for 'fd' [ 97.416795][ T5610] binder: BINDER_SET_CONTEXT_MGR already set [ 97.418100][ T5610] binder: 5609:5610 ioctl 4018620d 20004a80 returned -16 [ 97.421521][ T5610] binder: 5609:5610 BC_FREE_BUFFER u0000000020ffe000 no match [ 97.422936][ T5610] binder: 5609:5610 got transaction to invalid handle, 3 [ 97.427269][ T5610] binder: 5610:5609 cannot find target node [ 97.430827][ T5610] binder: 5609:5610 transaction call to 0:0 failed 51/29201/-22, size 40-24 line 3045 [ 97.455672][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.555976][ T5628] device syzkaller0 entered promiscuous mode [ 97.590540][ T5632] device syzkaller0 entered promiscuous mode [ 97.710789][ T5638] tipc: Enabling of bearer rejected, failed to enable media [ 97.735731][ T5643] binder: BINDER_SET_CONTEXT_MGR already set [ 97.736881][ T5643] binder: 5642:5643 ioctl 4018620d 20004a80 returned -16 [ 97.739425][ T5643] binder: 5642:5643 BC_FREE_BUFFER u0000000020ffe000 no match [ 97.740717][ T5643] binder: 5642:5643 got transaction to invalid handle, 3 [ 97.742052][ T5643] binder: 5643:5642 cannot find target node [ 97.743112][ T5643] binder: 5642:5643 transaction call to 0:0 failed 53/29201/-22, size 40-24 line 3045 [ 97.755596][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.760254][ T5640] tipc: Started in network mode [ 97.761080][ T5640] tipc: Node identity 0acc912f5eb4, cluster identity 4711 [ 97.762232][ T5640] tipc: Enabled bearer , priority 0 [ 97.809755][ T5639] tipc: Disabling bearer [ 97.823379][ T5649] device syzkaller0 entered promiscuous mode [ 97.911781][ T5654] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 97.916263][ T5654] fuse: Bad value for 'fd' [ 98.200590][ T5678] binder: 5676:5678 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 98.204145][ T5677] tipc: Enabling of bearer rejected, failed to enable media [ 98.207140][ T22] binder: send failed reply for transaction 44 to 5532:5577 [ 98.209306][ T1514] usb 1-1: USB disconnect, device number 5 [ 98.215647][ T5678] binder: 5676:5678 got transaction to invalid handle, 1 [ 98.220774][ T5678] binder: 5676:5678 BC_FREE_BUFFER u0000000020ffe000 no match [ 98.223171][ T5678] binder: 5676:5678 got transaction to invalid handle, 3 [ 98.332921][ T5679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.335347][ T5690] device syzkaller0 entered promiscuous mode [ 98.342773][ T5690] tipc: Enabled bearer , priority 0 [ 98.347393][ T5689] tipc: Resetting bearer [ 98.349043][ T5679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.459262][ T5689] tipc: Disabling bearer [ 98.547512][ T5703] bond0: (slave bond_slave_1): Releasing backup interface [ 98.707692][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.716586][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.748278][ T5716] binder: 5715:5716 tried to acquire reference to desc 0, got 1 instead [ 98.808419][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.886564][ T5725] tipc: Enabling of bearer rejected, failed to enable media [ 99.688417][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.771961][ T5748] device syzkaller0 entered promiscuous mode [ 99.887286][ T5761] tipc: Started in network mode [ 99.888245][ T5761] tipc: Node identity 16e8e4b120ce, cluster identity 4711 [ 99.891869][ T5761] tipc: Enabled bearer , priority 0 [ 99.895925][ T5758] tipc: Disabling bearer [ 100.058939][ T5772] binder: 5771:5772 unknown command 0 [ 100.062013][ T5772] binder: 5771:5772 ioctl c0306201 20000080 returned -22 [ 100.143561][ T5781] device syzkaller0 entered promiscuous mode [ 100.231974][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 100.301165][ T5787] device syzkaller0 entered promiscuous mode [ 100.379929][ T5791] device syzkaller0 entered promiscuous mode [ 100.389278][ T4369] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.819004][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 100.829244][ T4369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.830918][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.833039][ T4369] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 100.834412][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.845565][ T4369] usb 1-1: config 0 descriptor?? [ 100.848217][ T4369] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 100.963008][ T5812] device syzkaller0 entered promiscuous mode [ 101.936302][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 102.011297][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.013973][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.082113][ T5826] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.539'. [ 102.152891][ T5828] device syzkaller0 entered promiscuous mode [ 102.170919][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.172517][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.315844][ T5839] tipc: Enabled bearer , priority 0 [ 102.317699][ T5839] device syzkaller0 entered promiscuous mode [ 102.385409][ T5839] tipc: Resetting bearer [ 102.387410][ T5842] device syzkaller0 entered promiscuous mode [ 102.392930][ T5842] tipc: Enabled bearer , priority 0 [ 102.394546][ T5841] tipc: Resetting bearer [ 102.439343][ T5841] tipc: Disabling bearer [ 102.441894][ T5838] tipc: Resetting bearer [ 102.524842][ T5838] tipc: Disabling bearer [ 102.583520][ T5848] device syzkaller0 entered promiscuous mode [ 102.934827][ T5851] binder_user_error: 12 callbacks suppressed [ 102.934836][ T5851] binder: 5778:5851 tried to acquire reference to desc 0, got 1 instead [ 102.937986][ T5851] binder: 5778:5851 got reply transaction with bad transaction stack, transaction 79 has target 5778:0 [ 102.940308][ T5851] binder_debug: 25 callbacks suppressed [ 102.940322][ T5851] binder: 5778:5851 transaction reply to 0:0 failed 80/29201/-71, size 0-0 line 2961 [ 103.027038][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 104.253854][ T5866] mmap: syz.4.552 (5866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.262573][ T3896] binder: send failed reply for transaction 79 to 5778:5851 [ 104.264033][ T3896] binder: undelivered TRANSACTION_ERROR: 29189 [ 104.265429][ T3896] usb 1-1: USB disconnect, device number 6 [ 104.319861][ T5872] device syzkaller0 entered promiscuous mode [ 104.439820][ T5877] device syzkaller0 entered promiscuous mode [ 104.446548][ T5877] tipc: Enabled bearer , priority 0 [ 104.453988][ T5875] tipc: Resetting bearer [ 104.499514][ T5875] tipc: Disabling bearer [ 105.995858][ T5920] device syzkaller0 entered promiscuous mode [ 106.223315][ T5928] device syzkaller0 entered promiscuous mode [ 106.234518][ T5928] tipc: Enabled bearer , priority 0 [ 106.239518][ T5926] tipc: Resetting bearer [ 106.331901][ T5926] tipc: Disabling bearer [ 106.338610][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.341179][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.356185][ T5931] binder: 5930:5931 tried to acquire reference to desc 0, got 1 instead [ 106.367670][ T3896] binder: release 5930:5931 transaction 85 out, still active [ 106.369305][ T3896] binder: undelivered TRANSACTION_COMPLETE [ 106.928422][ T3896] binder: send failed reply for transaction 85, target dead [ 106.956778][ T5949] binder: 5948:5949 ioctl 4018620d 0 returned -22 [ 106.964589][ T5949] binder: 5948:5949 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 106.970116][ T5949] binder: 5948:5949 got transaction to invalid handle, 1 [ 106.971392][ T5949] binder: 5949:5948 cannot find target node [ 106.973247][ T5949] binder: 5948:5949 transaction call to 0:0 failed 94/29201/-22, size 72-24 line 3045 [ 106.976344][ T5949] binder: 5948:5949 BC_FREE_BUFFER u0000000020ffe000 no match [ 106.977646][ T5949] binder: 5948:5949 got transaction to invalid handle, 3 [ 106.988094][ T5949] binder: 5949:5948 cannot find target node [ 106.991338][ T5949] binder: 5948:5949 transaction call to 0:0 failed 95/29201/-22, size 40-24 line 3045 [ 107.009026][ T5957] device syzkaller0 entered promiscuous mode [ 107.017373][ T5956] device syzkaller0 entered promiscuous mode [ 107.019247][ T5957] tipc: Enabled bearer , priority 0 [ 107.021450][ T5955] tipc: Resetting bearer [ 107.066020][ T5955] tipc: Disabling bearer [ 107.112992][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 107.124017][ T5963] tipc: Enabled bearer , priority 0 [ 107.127027][ T5962] tipc: Disabling bearer [ 107.137389][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.139324][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.368381][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.498457][ T4369] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.537434][ T5987] binder: BINDER_SET_CONTEXT_MGR already set [ 107.538457][ T5987] binder: 5986:5987 ioctl 4018620d 20004a80 returned -16 [ 107.540624][ T5987] binder: 5986:5987 BC_FREE_BUFFER u0000000020ffe000 no match [ 107.541816][ T5987] binder: 5986:5987 got transaction to invalid handle, 3 [ 107.674177][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 107.678675][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 107.680963][ T4369] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.682390][ T4369] usb 1-1: config 179 has no interface number 0 [ 107.683535][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.685367][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.687145][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.691682][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.693794][ T4369] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.696118][ T4369] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.697613][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.703898][ T5971] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 107.805957][ T5999] device syzkaller0 entered promiscuous mode [ 107.809676][ T5997] tipc: Enabled bearer , priority 0 [ 107.814850][ T5998] device syzkaller0 entered promiscuous mode [ 107.821598][ T5995] tipc: Disabling bearer [ 107.826448][ T5999] tipc: Enabled bearer , priority 0 [ 107.851001][ T5996] tipc: Resetting bearer [ 107.899933][ T5996] tipc: Disabling bearer [ 107.915403][ T4369] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input2 [ 108.065411][ T6013] binder: BINDER_SET_CONTEXT_MGR already set [ 108.070822][ T6013] binder: 6012:6013 ioctl 4018620d 20004a80 returned -16 [ 108.073004][ T6013] binder: 6012:6013 BC_FREE_BUFFER u0000000020ffe000 no match [ 108.074278][ T6013] binder: 6012:6013 got transaction to invalid handle, 3 [ 108.079902][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 108.082784][ T6013] binder_debug: 5 callbacks suppressed [ 108.082797][ T6013] binder: 6013:6012 cannot find target node [ 108.084664][ T6013] binder: 6012:6013 transaction call to 0:0 failed 99/29201/-22, size 40-24 line 3045 [ 108.103844][ T3896] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.114818][ T3896] usb 1-1: USB disconnect, device number 7 [ 108.114931][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.117412][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 108.117670][ T3896] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 108.932878][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.618'. [ 108.991990][ T6031] device syzkaller0 entered promiscuous mode [ 109.076605][ T6037] tipc: Enabled bearer , priority 0 [ 109.095022][ T6036] tipc: Disabling bearer [ 109.120543][ T6041] tipc: Enabled bearer , priority 0 [ 109.123011][ T6040] tipc: Disabling bearer [ 109.161337][ T6043] binder: BINDER_SET_CONTEXT_MGR already set [ 109.162421][ T6043] binder: 6042:6043 ioctl 4018620d 20004a80 returned -16 [ 109.164572][ T6043] binder: 6042:6043 BC_FREE_BUFFER u0000000020ffe000 no match [ 109.165991][ T6043] binder: 6042:6043 got transaction to invalid handle, 3 [ 109.167326][ T6043] binder: 6043:6042 cannot find target node [ 109.171218][ T6043] binder: 6042:6043 transaction call to 0:0 failed 101/29201/-22, size 40-24 line 3045 [ 109.183751][ T3896] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.210429][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.212963][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.243945][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.245589][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.772575][ T6051] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 109.913393][ T6068] tipc: Enabled bearer , priority 0 [ 109.916135][ T6067] tipc: Disabling bearer [ 110.006354][ T6072] binder: 6071:6072 unknown command 0 [ 110.007216][ T6072] binder: 6071:6072 ioctl c0306201 20000080 returned -22 [ 110.009683][ T6072] binder: 6071:6072 tried to acquire reference to desc 0, got 1 instead [ 110.011334][ T6072] binder_alloc: 6071: binder_alloc_buf, no vma [ 110.012542][ T6072] binder: cannot allocate buffer: vma cleared, target dead or dying [ 110.012587][ T6072] binder: 6071:6072 transaction call to 6071:0 failed 106/29189/-3, size 120-24 line 3230 [ 110.016064][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 110.039080][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'. [ 110.041204][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'. [ 110.115563][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.120929][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.205745][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.211261][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.216439][ T6092] binder: 6091:6092 ioctl c0306201 0 returned -14 [ 110.219366][ T6094] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 110.222913][ T6094] fuse: Bad value for 'fd' [ 110.225150][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.226591][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.335894][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.338237][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.354866][ T6102] binder: 6101:6102 ioctl c0306201 0 returned -14 [ 110.358065][ T6102] binder: 6101:6102 got transaction to invalid handle, 1 [ 110.366354][ T6102] binder: 6102:6101 cannot find target node [ 110.368245][ T6102] binder: 6101:6102 BC_FREE_BUFFER u0000000020ffe000 no match [ 110.369940][ T6102] binder: 6101:6102 got transaction to invalid handle, 3 [ 110.415146][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 110.495472][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 110.567116][ T6122] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 110.571113][ T6122] fuse: Bad value for 'fd' [ 110.674675][ T6133] binder: 6132:6133 ioctl c0306201 0 returned -14 [ 110.682701][ T6133] binder: 6132:6133 got transaction to invalid handle, 1 [ 110.691465][ T6133] binder: 6132:6133 BC_FREE_BUFFER u0000000020ffe000 no match [ 110.718705][ T4369] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 110.861243][ T6158] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 110.868164][ T6158] fuse: Bad value for 'fd' [ 110.874089][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.881586][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.957298][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.978649][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.062573][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.064952][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.809202][ T6202] tipc: Enabled bearer , priority 0 [ 111.889136][ T6201] tipc: Disabling bearer [ 111.892343][ T6204] bond0: (slave bond_slave_1): Releasing backup interface [ 112.011762][ T6209] binder: 6208:6209 unknown command 0 [ 112.013019][ T6209] binder: 6208:6209 ioctl c0306201 20000080 returned -22 [ 112.015783][ T6209] binder_alloc: 6208: binder_alloc_buf, no vma [ 112.468182][ T6224] __nla_validate_parse: 8 callbacks suppressed [ 112.468193][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 112.471434][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 112.475570][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 112.478117][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 112.812693][ T6238] binder: 6237:6238 unknown command 0 [ 112.813688][ T6238] binder: 6237:6238 ioctl c0306201 20000080 returned -22 [ 113.026617][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 113.028608][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 113.030606][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 113.032176][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 113.070845][ T6252] syz.1.719 uses obsolete (PF_INET,SOCK_PACKET) [ 113.451043][ T4369] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.453469][ T4369] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 113.454949][ T4369] usb 1-1: can't read configurations, error -71 [ 113.712423][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 113.760210][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 113.768389][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.795021][ T6277] binder_user_error: 17 callbacks suppressed [ 113.795035][ T6277] binder: 6276:6277 got transaction to invalid handle, 1 [ 113.797446][ T6277] binder_debug: 41 callbacks suppressed [ 113.797460][ T6277] binder: 6277:6276 cannot find target node [ 113.799913][ T6277] binder: 6276:6277 transaction call to 0:0 failed 148/29201/-22, size 72-24 line 3045 [ 113.802992][ T6277] binder: 6276:6277 BC_FREE_BUFFER u0000000020ffe000 no match [ 113.804480][ T6277] binder: 6276:6277 got transaction to invalid handle, 3 [ 113.805716][ T6277] binder: 6277:6276 cannot find target node [ 113.806725][ T6277] binder: 6276:6277 transaction call to 0:0 failed 149/29201/-22, size 40-24 line 3045 [ 113.818503][ T4369] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.827655][ T4333] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.829012][ T4333] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.998443][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 114.003396][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 114.005392][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.007461][ T4369] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 114.010704][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.014682][ T4369] usb 1-1: config 0 descriptor?? [ 114.578276][ T6309] binder: 6308:6309 got transaction to invalid handle, 1 [ 114.582227][ T6309] binder: 6309:6308 cannot find target node [ 114.583389][ T6309] binder: 6308:6309 transaction call to 0:0 failed 153/29201/-22, size 72-24 line 3045 [ 114.586382][ T6309] binder: 6308:6309 BC_FREE_BUFFER u0000000020ffe000 no match [ 114.587908][ T6309] binder: 6308:6309 got transaction to invalid handle, 3 [ 114.589698][ T6309] binder: 6309:6308 cannot find target node [ 114.590815][ T6309] binder: 6308:6309 transaction call to 0:0 failed 154/29201/-22, size 40-24 line 3045 [ 114.915310][ T6336] binder: tried to use weak ref as strong ref [ 114.916502][ T6336] binder: 6335:6336 Acquire 1 refcount change on invalid ref 0 ret -22 [ 114.918749][ T6336] binder: 6335:6336 got transaction to invalid handle, 1 [ 115.860007][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.862238][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.052639][ T6367] binder: tried to use weak ref as strong ref [ 116.285658][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.287364][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.663659][ T4369] usbhid 1-1:0.0: can't add hid device: -71 [ 116.664797][ T4369] usbhid: probe of 1-1:0.0 failed with error -71 [ 116.667324][ T4369] usb 1-1: USB disconnect, device number 9 [ 116.924071][ T6401] syz.4.785 (6401): drop_caches: 1 [ 116.967016][ T6401] syz.4.785 (6401): drop_caches: 1 [ 117.478008][ T6421] binder: 6420:6421 unknown command 0 [ 117.480670][ T6421] binder: 6420:6421 ioctl c0306201 20000080 returned -22 [ 117.483495][ T6421] binder: BINDER_SET_CONTEXT_MGR already set [ 117.484671][ T6421] binder: 6420:6421 ioctl 4018620d 20000040 returned -16 [ 117.505925][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.507652][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.584206][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.585723][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.361168][ T6444] __nla_validate_parse: 28 callbacks suppressed [ 118.361179][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 118.363946][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 118.365799][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 118.367558][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 118.444240][ T6450] binder: 6448:6450 unknown command 0 [ 118.445320][ T6450] binder: 6448:6450 ioctl c0306201 20000080 returned -22 [ 118.447807][ T6450] binder: BINDER_SET_CONTEXT_MGR already set [ 118.449581][ T6450] binder: 6448:6450 ioctl 4018620d 20000040 returned -16 [ 118.564405][ T6464] binder: 6461:6464 ioctl 4018620d 0 returned -22 [ 118.633865][ T6468] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 118.645778][ T6468] fuse: Bad value for 'fd' [ 119.040780][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 119.044594][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 119.178129][ T6480] binder: 6479:6480 unknown command 0 [ 119.179411][ T6480] binder: 6479:6480 ioctl c0306201 20000080 returned -22 [ 119.181905][ T6480] binder: BINDER_SET_CONTEXT_MGR already set [ 119.188812][ T6480] binder: 6479:6480 ioctl 4018620d 20000040 returned -16 [ 119.368096][ T6494] device syzkaller0 entered promiscuous mode [ 119.517686][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 119.519757][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 119.984494][ T6511] binder_user_error: 12 callbacks suppressed [ 119.984504][ T6511] binder: 6510:6511 got transaction to invalid handle, 1 [ 119.986869][ T6511] binder_debug: 23 callbacks suppressed [ 119.986882][ T6511] binder: 6511:6510 cannot find target node [ 119.989816][ T6511] binder: 6510:6511 transaction call to 0:0 failed 199/29201/-22, size 120-24 line 3045 [ 119.992021][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.036453][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.041307][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.083075][ T6523] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 120.087024][ T6523] fuse: Bad value for 'fd' [ 120.382303][ T6533] device syzkaller0 entered promiscuous mode [ 120.612311][ T6541] binder: 6540:6541 got transaction to invalid handle, 1 [ 120.613729][ T6541] binder: 6541:6540 cannot find target node [ 120.614762][ T6541] binder: 6540:6541 transaction call to 0:0 failed 203/29201/-22, size 120-24 line 3045 [ 120.616931][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.239376][ T6560] device syzkaller0 entered promiscuous mode [ 121.355472][ T6570] binder: 6569:6570 got transaction to invalid handle, 1 [ 121.356922][ T6570] binder: 6570:6569 cannot find target node [ 121.357989][ T6570] binder: 6569:6570 transaction call to 0:0 failed 207/29201/-22, size 120-24 line 3045 [ 121.360872][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.443135][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 121.464751][ T6578] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 121.474115][ T6578] fuse: Bad value for 'fd' [ 121.730059][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 122.203170][ T6616] device syzkaller0 entered promiscuous mode [ 122.252583][ T6620] tipc: Enabling of bearer rejected, failed to enable media [ 122.323942][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.325637][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.332494][ T6624] binder: 6623:6624 tried to acquire reference to desc 0, got 1 instead [ 122.334339][ T6624] binder: 6623:6624 got reply transaction with bad transaction stack, transaction 212 has target 6623:0 [ 122.336322][ T6624] binder: 6623:6624 transaction reply to 0:0 failed 213/29201/-71, size 0-0 line 2961 [ 122.567425][ T6642] device syzkaller0 entered promiscuous mode [ 122.810965][ T6653] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 122.814737][ T6653] fuse: Bad value for 'fd' [ 122.865763][ T6660] device syzkaller0 entered promiscuous mode [ 123.017973][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.020307][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.495471][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.497506][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.552980][ T6681] device syzkaller0 entered promiscuous mode [ 123.630420][ T6683] __nla_validate_parse: 7 callbacks suppressed [ 123.630430][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 123.656952][ T6685] device syzkaller0 entered promiscuous mode [ 123.782039][ T6699] device syzkaller0 entered promiscuous mode [ 123.881479][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 123.925376][ T6715] device syzkaller0 entered promiscuous mode [ 123.981764][ T6718] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 123.985277][ T6718] fuse: Bad value for 'fd' [ 124.312665][ T6737] device syzkaller0 entered promiscuous mode [ 124.471166][ T6741] tipc: Enabled bearer , priority 0 [ 124.472937][ T6741] device syzkaller0 entered promiscuous mode [ 124.514947][ T6741] tipc: Resetting bearer [ 124.517355][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 124.521774][ T6740] tipc: Resetting bearer [ 124.549259][ T6740] tipc: Disabling bearer [ 124.616527][ T6747] device syzkaller0 entered promiscuous mode [ 124.648370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.705565][ T6751] device syzkaller0 entered promiscuous mode [ 124.797735][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.799739][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.803788][ T6758] binder: 6757:6758 tried to acquire reference to desc 0, got 1 instead [ 124.882713][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 124.884371][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 125.083609][ T6782] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.396731][ T6790] device syzkaller0 entered promiscuous mode [ 125.479748][ T6794] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 125.481323][ T6794] netlink: 'syz.3.957': attribute type 17 has an invalid length. [ 125.496079][ T6794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.497950][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.503739][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.559179][ T6794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.565723][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 125.567447][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 125.842585][ T6827] device syzkaller0 entered promiscuous mode [ 125.943185][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944308][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.165521][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.169189][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.308375][ T1514] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.498432][ T1514] usb 1-1: Using ep0 maxpacket: 8 [ 126.500743][ T1514] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.502425][ T1514] usb 1-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.506805][ T1514] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 126.508969][ T1514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.510284][ T1514] usb 1-1: Product: syz [ 126.510961][ T1514] usb 1-1: Manufacturer: syz [ 126.525244][ T1514] usb 1-1: SerialNumber: syz [ 126.530710][ T1514] hso 1-1:6.0: Can't find BULK IN endpoint [ 126.565026][ T6853] binder: 6852:6853 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 126.566580][ T6853] binder: 6852:6853 unknown command 0 [ 126.567475][ T6853] binder: 6852:6853 ioctl c0306201 20000080 returned -22 [ 126.581947][ T6853] binder: 6852:6853 got transaction to invalid handle, 1 [ 126.583357][ T6853] binder_debug: 2 callbacks suppressed [ 126.583370][ T6853] binder: 6853:6852 cannot find target node [ 126.585316][ T6853] binder: 6852:6853 transaction call to 0:0 failed 220/29201/-22, size 120-24 line 3045 [ 126.587389][ T4333] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.621747][ T6857] device syzkaller0 entered promiscuous mode [ 127.001421][ T1514] usb 1-1: USB disconnect, device number 10 [ 127.043782][ T6861] device syzkaller0 entered promiscuous mode [ 127.253543][ T6866] [ 127.254059][ T6866] ====================================================== [ 127.255306][ T6866] WARNING: possible circular locking dependency detected [ 127.256557][ T6866] syzkaller #0 Not tainted [ 127.257350][ T6866] ------------------------------------------------------ [ 127.258585][ T6866] syz.3.985/6866 is trying to acquire lock: [ 127.259610][ T6866] ffff0000d5d01458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 127.261620][ T6866] [ 127.261620][ T6866] but task is already holding lock: [ 127.262958][ T6866] ffff0000d5d00130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 127.264554][ T6866] [ 127.264554][ T6866] which lock already depends on the new lock. [ 127.264554][ T6866] [ 127.266361][ T6866] [ 127.266361][ T6866] the existing dependency chain (in reverse order) is: [ 127.267813][ T6866] [ 127.267813][ T6866] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 127.269149][ T6866] lock_sock_nested+0x70/0x130 [ 127.270088][ T6866] smc_listen_out+0x114/0x3a4 [ 127.270952][ T6866] smc_listen_work+0x490/0xde0 [ 127.271884][ T6866] process_one_work+0x7f8/0x13a4 [ 127.272815][ T6866] worker_thread+0x8c4/0xfec [ 127.273665][ T6866] kthread+0x250/0x2d8 [ 127.274425][ T6866] ret_from_fork+0x10/0x20 [ 127.275277][ T6866] [ 127.275277][ T6866] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 127.277034][ T6866] __lock_acquire+0x2880/0x6800 [ 127.277966][ T6866] lock_acquire+0x20c/0x63c [ 127.278837][ T6866] __flush_work+0x10c/0x1ec [ 127.279715][ T6866] __cancel_work_timer+0x300/0x458 [ 127.280686][ T6866] cancel_work_sync+0x24/0x38 [ 127.281619][ T6866] smc_clcsock_release+0x64/0xe8 [ 127.282601][ T6866] __smc_release+0x568/0x6bc [ 127.283428][ T6866] smc_close_non_accepted+0xd8/0x254 [ 127.284355][ T6866] smc_close_active+0x9c4/0xd24 [ 127.285333][ T6866] __smc_release+0x48c/0x6bc [ 127.286285][ T6866] smc_release+0x258/0x50c [ 127.287105][ T6866] sock_close+0xb4/0x1f8 [ 127.287897][ T6866] __fput+0x1bc/0x7b8 [ 127.288666][ T6866] ____fput+0x20/0x30 [ 127.289432][ T6866] task_work_run+0x1ec/0x278 [ 127.290333][ T6866] do_notify_resume+0x1fa0/0x2aa4 [ 127.291208][ T6866] el0_svc+0x98/0x128 [ 127.292018][ T6866] el0t_64_sync_handler+0x84/0xf0 [ 127.292976][ T6866] el0t_64_sync+0x18c/0x190 [ 127.293790][ T6866] [ 127.293790][ T6866] other info that might help us debug this: [ 127.293790][ T6866] [ 127.295602][ T6866] Possible unsafe locking scenario: [ 127.295602][ T6866] [ 127.296944][ T6866] CPU0 CPU1 [ 127.297903][ T6866] ---- ---- [ 127.298799][ T6866] lock(sk_lock-AF_SMC/1); [ 127.299503][ T6866] lock((work_completion)(&new_smc->smc_listen_work)); [ 127.301146][ T6866] lock(sk_lock-AF_SMC/1); [ 127.302347][ T6866] lock((work_completion)(&new_smc->smc_listen_work)); [ 127.303450][ T6866] [ 127.303450][ T6866] *** DEADLOCK *** [ 127.303450][ T6866] [ 127.304826][ T6866] 2 locks held by syz.3.985/6866: [ 127.305712][ T6866] #0: ffff0000e27a7a10 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 127.307460][ T6866] #1: ffff0000d5d00130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 127.309051][ T6866] [ 127.309051][ T6866] stack backtrace: [ 127.310080][ T6866] CPU: 1 PID: 6866 Comm: syz.3.985 Not tainted syzkaller #0 [ 127.311347][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.313133][ T6866] Call trace: [ 127.313659][ T6866] dump_backtrace+0x1c0/0x1ec [ 127.314433][ T6866] show_stack+0x2c/0x3c [ 127.315140][ T6866] __dump_stack+0x30/0x40 [ 127.315891][ T6866] dump_stack_lvl+0xf4/0x15c [ 127.316623][ T6866] dump_stack+0x1c/0x5c [ 127.317343][ T6866] print_circular_bug+0x148/0x1b0 [ 127.318174][ T6866] check_noncircular+0x264/0x2f8 [ 127.318993][ T6866] __lock_acquire+0x2880/0x6800 [ 127.319840][ T6866] lock_acquire+0x20c/0x63c [ 127.320604][ T6866] __flush_work+0x10c/0x1ec [ 127.321368][ T6866] __cancel_work_timer+0x300/0x458 [ 127.322267][ T6866] cancel_work_sync+0x24/0x38 [ 127.323083][ T6866] smc_clcsock_release+0x64/0xe8 [ 127.323986][ T6866] __smc_release+0x568/0x6bc [ 127.324753][ T6866] smc_close_non_accepted+0xd8/0x254 [ 127.325615][ T6866] smc_close_active+0x9c4/0xd24 [ 127.326453][ T6866] __smc_release+0x48c/0x6bc [ 127.327233][ T6866] smc_release+0x258/0x50c [ 127.327943][ T6866] sock_close+0xb4/0x1f8 [ 127.328698][ T6866] __fput+0x1bc/0x7b8 [ 127.329388][ T6866] ____fput+0x20/0x30 [ 127.330063][ T6866] task_work_run+0x1ec/0x278 [ 127.330842][ T6866] do_notify_resume+0x1fa0/0x2aa4 [ 127.331672][ T6866] el0_svc+0x98/0x128 [ 127.332389][ T6866] el0t_64_sync_handler+0x84/0xf0 [ 127.333234][ T6866] el0t_64_sync+0x18c/0x190 [ 127.398384][ T1514] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.588327][ T1514] usb 1-1: Using ep0 maxpacket: 8 [ 127.590259][ T1514] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.591910][ T1514] usb 1-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.595379][ T1514] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 127.596942][ T1514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.598339][ T1514] usb 1-1: Product: syz [ 127.600406][ T1514] usb 1-1: Manufacturer: syz [ 127.601128][ T1514] usb 1-1: SerialNumber: syz [ 127.603395][ T1514] hso 1-1:6.0: Can't find BULK IN endpoint [ 127.821932][ T4333] usb 1-1: USB disconnect, device number 11