last executing test programs: 13.027032152s ago: executing program 2 (id=1166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000000700000000000000090001006d6574610000000044000280080001400000000c080003400000000008000240000000190800014000000009080001400000000b0800014000000012070000000000001508000340"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 12.113255371s ago: executing program 3 (id=1180): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = io_uring_setup(0xad5, &(0x7f0000000140)={0x0, 0xc45e, 0x8, 0x2, 0x1000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) close(r3) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 12.038205033s ago: executing program 3 (id=1182): r0 = gettid() setpgid(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x80, 0x4) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x4, 0x5, 0x3}}) ioctl$BLKRRPART(r8, 0x125f, 0x0) 12.022114174s ago: executing program 2 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 11.778955071s ago: executing program 2 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.733808022s ago: executing program 1 (id=1189): syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) 11.214165659s ago: executing program 1 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 11.19466093s ago: executing program 3 (id=1191): set_mempolicy(0x1, &(0x7f00000000c0)=0x80000000, 0x6) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x2, 'bridge0\x00', {0xbd4}, 0x1}) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460508530807000000000000000200060003000000e00100003800000008010000e80b0000018020000100060000000800020000000080000000000000040000000a000000010100006c00000001000080"], 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 942.148441ms ago: executing program 2 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 912.470142ms ago: executing program 1 (id=1196): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)="1db255b7996bcbb7b5976355cd1988db20556bd2cf72ff610221285392e6f879607183f28278deafab98336f7254cfd37e", 0x31}, {0x0}], 0x2}}], 0x1, 0x4000844) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0xa0200) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 912.159211ms ago: executing program 3 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 901.410802ms ago: executing program 0 (id=1198): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 890.014212ms ago: executing program 2 (id=1199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000000)="944a74", 0x3}, {&(0x7f00000006c0)="ec", 0x1}], 0x2) 889.686363ms ago: executing program 4 (id=1200): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 868.161523ms ago: executing program 1 (id=1201): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 850.274494ms ago: executing program 1 (id=1202): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r3 = dup3(r2, r1, 0x80000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x1, 0x4, 0xff, 0xfffffffffffffffc}, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) 784.734886ms ago: executing program 3 (id=1203): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010000020d00000904010102020d00000905820200020942f9090594d73c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 784.308516ms ago: executing program 0 (id=1213): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 756.323916ms ago: executing program 0 (id=1204): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = io_uring_setup(0xad5, &(0x7f0000000140)={0x0, 0xc45e, 0x8, 0x2, 0x1000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) close(r3) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 743.849757ms ago: executing program 4 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 683.973069ms ago: executing program 0 (id=1206): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001d00e9"], 0x194}}, 0x0) 683.505319ms ago: executing program 0 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 573.506962ms ago: executing program 4 (id=1208): set_mempolicy(0x1, &(0x7f00000000c0)=0x80000000, 0x6) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x2, 'bridge0\x00', {0xbd4}, 0x1}) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460508530807000000000000000200060003000000e00100003800000008010000e80b0000018020000100060000000800020000000080000000000000040000000a000000010100006c00000001000080"], 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 459.101446ms ago: executing program 0 (id=1209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000000700000000000000090001006d6574610000000044000280080001400000000c080003400000000008000240000000190800014000000009080001400000000b0800014000000012070000000000001508000340"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 458.795056ms ago: executing program 4 (id=1210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 425.854627ms ago: executing program 4 (id=1211): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)="1db255b7996bcbb7b5976355cd1988db20556bd2cf72ff610221285392e6f879607183f28278deafab98336f7254cfd37e", 0x31}, {0x0}], 0x2}}], 0x1, 0x4000844) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0xa0200) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 402.754798ms ago: executing program 4 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x5, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 245.992293ms ago: executing program 3 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 23.057019ms ago: executing program 2 (id=1215): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=1216): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. syzkaller login: [ 43.907200][ T4268] cgroup: Unknown subsys name 'net' [ 44.124983][ T4268] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.392054][ T4268] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.089245][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.091323][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.098118][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.103361][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.106690][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.108915][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.110483][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.111786][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.113372][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.114740][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.116261][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.117552][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.118898][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.120153][ T4295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.120349][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 45.121892][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.123556][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.125170][ T4295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.125395][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.127229][ T4295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.128202][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.129064][ T4295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.132712][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 45.134860][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 45.136960][ T4293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 45.139264][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 45.140655][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 45.155490][ T4296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.157298][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.158793][ T4296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.274313][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 45.284267][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 45.295301][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 45.328253][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 45.338463][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 45.344551][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.346077][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.347759][ T4280] device bridge_slave_0 entered promiscuous mode [ 45.349767][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.351011][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.352713][ T4281] device bridge_slave_0 entered promiscuous mode [ 45.354759][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.356127][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.357710][ T4285] device bridge_slave_0 entered promiscuous mode [ 45.360973][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.364134][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.365749][ T4285] device bridge_slave_1 entered promiscuous mode [ 45.372829][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.374110][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.375818][ T4281] device bridge_slave_1 entered promiscuous mode [ 45.377176][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.378487][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.380063][ T4280] device bridge_slave_1 entered promiscuous mode [ 45.389035][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.398643][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.405913][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.411789][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.418618][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.419908][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.421621][ T4292] device bridge_slave_0 entered promiscuous mode [ 45.424129][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.425371][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.427053][ T4292] device bridge_slave_1 entered promiscuous mode [ 45.431278][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.441296][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.447210][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.448543][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.450218][ T4288] device bridge_slave_0 entered promiscuous mode [ 45.453543][ T4280] team0: Port device team_slave_0 added [ 45.460856][ T4285] team0: Port device team_slave_0 added [ 45.464320][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.465646][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.467181][ T4288] device bridge_slave_1 entered promiscuous mode [ 45.469286][ T4280] team0: Port device team_slave_1 added [ 45.471134][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.473958][ T4285] team0: Port device team_slave_1 added [ 45.477679][ T4281] team0: Port device team_slave_0 added [ 45.485960][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.488204][ T4281] team0: Port device team_slave_1 added [ 45.500900][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.504560][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.509141][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.512084][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.513219][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.517675][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.520722][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.523184][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.524382][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.529031][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.534073][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.535298][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.539857][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.542521][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.543736][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.548387][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.550750][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.552116][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.556722][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.559610][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.564726][ T4292] team0: Port device team_slave_0 added [ 45.572339][ T4292] team0: Port device team_slave_1 added [ 45.580177][ T4288] team0: Port device team_slave_0 added [ 45.585699][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.586966][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.591590][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.594645][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.595885][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.600459][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.607286][ T4288] team0: Port device team_slave_1 added [ 45.633089][ T4281] device hsr_slave_0 entered promiscuous mode [ 45.672273][ T4281] device hsr_slave_1 entered promiscuous mode [ 45.773426][ T4280] device hsr_slave_0 entered promiscuous mode [ 45.822216][ T4280] device hsr_slave_1 entered promiscuous mode [ 45.862084][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.863570][ T4280] Cannot create hsr debugfs directory [ 45.866909][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.868210][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.873069][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.934601][ T4285] device hsr_slave_0 entered promiscuous mode [ 45.972222][ T4285] device hsr_slave_1 entered promiscuous mode [ 46.012147][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.013475][ T4285] Cannot create hsr debugfs directory [ 46.022948][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.024229][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.028792][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.094567][ T4292] device hsr_slave_0 entered promiscuous mode [ 46.132190][ T4292] device hsr_slave_1 entered promiscuous mode [ 46.172214][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.173611][ T4292] Cannot create hsr debugfs directory [ 46.253051][ T4288] device hsr_slave_0 entered promiscuous mode [ 46.292112][ T4288] device hsr_slave_1 entered promiscuous mode [ 46.331998][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.333336][ T4288] Cannot create hsr debugfs directory [ 46.406123][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.444946][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.485948][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.524496][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.586557][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.636155][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.673146][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.722786][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.763897][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.803099][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.852190][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.903759][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.963998][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.965824][ T4288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.005910][ T4288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.044888][ T4288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.093853][ T4288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.132388][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 47.139198][ T4292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.173095][ T4292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.212067][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 47.213249][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 47.214369][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 47.215477][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 47.223614][ T4292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.266619][ T4292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.305299][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.307611][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.318954][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.331328][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.333413][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.335197][ T648] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.336466][ T648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.338337][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.344704][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.349425][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.351194][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.353788][ T648] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.355026][ T648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.361123][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.370404][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.377779][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.379871][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.384686][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.387090][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.388464][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.390845][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.393501][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.406656][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.408576][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.411220][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.413125][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.414759][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.416321][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.418318][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.419886][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.429426][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.431054][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.433265][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.434899][ T648] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.436202][ T648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.438066][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.439725][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.441342][ T648] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.442665][ T648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.446885][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.448635][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.450345][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.451913][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.457099][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.460566][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.463538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.465367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.470415][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.474706][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.478989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.480758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.484170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.485784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.487650][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.488934][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.499666][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.508202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.509842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.511662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.516485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.518422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.519978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.521698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.524642][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.525885][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.527476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.529134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.530725][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.532068][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.537098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.538846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.540405][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.541871][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.544434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.546256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.547877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.554927][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.558710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.560798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.563709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.565700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.568985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.570636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.572642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.579482][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.585516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.588284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.589946][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.599838][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.601689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.605036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.607899][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.609807][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.611461][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.617647][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.619951][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.621642][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.624325][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.627644][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.637074][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.638938][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.640542][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.642573][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.645736][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.647606][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.650189][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.653471][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.656281][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.660381][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.663056][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.699366][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.701176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.703808][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.705107][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.706630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.708328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.710200][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.711501][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.714332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.716146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.718024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.719848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.721595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.726335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.728031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.729671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.736007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.737654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.739241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.744909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.753590][ T4281] device veth0_vlan entered promiscuous mode [ 47.755065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.756698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.760372][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.762323][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.771876][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.773674][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.776946][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.782441][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.783856][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.786372][ T4281] device veth1_vlan entered promiscuous mode [ 47.790441][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.803777][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.807609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.809211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.810712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.815019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.818299][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.836402][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.838224][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.848250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.850035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.851741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.855273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.859774][ T4281] device veth0_macvtap entered promiscuous mode [ 47.865063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.866725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.868472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.877341][ T4281] device veth1_macvtap entered promiscuous mode [ 47.881768][ T4288] device veth0_vlan entered promiscuous mode [ 47.884905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.886565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.888200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.889877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.891494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.897794][ T4280] device veth0_vlan entered promiscuous mode [ 47.900069][ T4285] device veth0_vlan entered promiscuous mode [ 47.904529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.906145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.907819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.909270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.910793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.913074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.914474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.916076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.917831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.919375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.922652][ T4280] device veth1_vlan entered promiscuous mode [ 47.929547][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.935763][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.939972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.941635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.944274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.946057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.948667][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.950119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.951747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.955270][ T4288] device veth1_vlan entered promiscuous mode [ 47.959014][ T4285] device veth1_vlan entered promiscuous mode [ 47.976087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.977836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.979355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.980980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.983909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.985579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.988669][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.990340][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.991913][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.003723][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.009465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.011246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.014291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.016437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.019398][ T4280] device veth0_macvtap entered promiscuous mode [ 48.023463][ T4280] device veth1_macvtap entered promiscuous mode [ 48.026183][ T4285] device veth0_macvtap entered promiscuous mode [ 48.028423][ T4288] device veth0_macvtap entered promiscuous mode [ 48.030994][ T4288] device veth1_macvtap entered promiscuous mode [ 48.034977][ T4285] device veth1_macvtap entered promiscuous mode [ 48.054493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.056243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.057852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.059375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.060934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.065712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.067383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.069075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.084670][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.088268][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.090615][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.092396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.094122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.095873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.097555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.099750][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.101582][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.104537][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.106471][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.108783][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.110551][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.113659][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.115407][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.117334][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.119078][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.121034][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.123831][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.125213][ T4292] device veth0_vlan entered promiscuous mode [ 48.128083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.129666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.131124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.133216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.135016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.136752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.138613][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.140487][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.143208][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.146734][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148332][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.149931][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.151496][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.159954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.166848][ T4292] device veth1_vlan entered promiscuous mode [ 48.170236][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.172749][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.174593][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.176463][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.178806][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.181031][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.183438][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.185248][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.187135][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.188959][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.190842][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.193520][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.197638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.199297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.200841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.206003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.207912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.209804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.214888][ T4288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.216505][ T4288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.218149][ T4288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.219751][ T4288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.224511][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.225902][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.229454][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.231060][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.232998][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.234536][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.237360][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.247381][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.249537][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.251867][ T4292] device veth0_macvtap entered promiscuous mode [ 48.273877][ T1920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.275348][ T1920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.279041][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.280962][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.288124][ T4292] device veth1_macvtap entered promiscuous mode [ 48.293771][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.295507][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.297254][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.299027][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.300813][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.303283][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.305229][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.307046][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.309488][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.319921][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.321576][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.324151][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.331400][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.337200][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.338891][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.340737][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.343091][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.345905][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.347691][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.349482][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.351873][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.357750][ T4292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.359382][ T4292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.360938][ T4292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362669][ T4292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.367223][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.368842][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.404388][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.405869][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.407706][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.410386][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.411745][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.423867][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.430154][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.431758][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.462374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.464135][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.466621][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.468610][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.482604][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.484135][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.486047][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.493461][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.494840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.499581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.578032][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.589668][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.598949][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.868356][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.869920][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.871456][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.273789][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 49.302742][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 49.304125][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 49.305347][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 49.306578][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 50.473584][ T4394] loop3: detected capacity change from 0 to 128 [ 50.480236][ T4381] can0: slcan on ttyS3. [ 50.920483][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.934399][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.963920][ T4371] can0 (unregistered): slcan off ttyS3. [ 50.979755][ T4406] Zero length message leads to an empty skb [ 50.981614][ T4406] mmap: syz.1.10 (4406) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.121861][ T4426] loop2: detected capacity change from 0 to 128 [ 51.370509][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 51.372103][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 51.372348][ T4296] Bluetooth: hci1: command 0x040f tx timeout [ 51.373848][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 51.374253][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 51.586423][ T4419] loop4: detected capacity change from 0 to 32768 [ 51.591106][ T4419] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 51.593176][ T4419] dlm: no local IP address has been set [ 51.594489][ T4419] dlm: cannot start dlm midcomms -107 [ 51.595601][ T4419] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 51.674142][ T4273] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.106172][ T4449] loop0: detected capacity change from 0 to 40427 [ 52.247303][ T4459] device syzkaller1 entered promiscuous mode [ 53.156614][ T4471] loop3: detected capacity change from 0 to 512 [ 53.194371][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.623963][ T4480] loop0: detected capacity change from 0 to 2048 [ 53.626759][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 53.627952][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 53.629086][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 53.630228][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 53.631448][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 53.732989][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 53.827853][ T4480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.391926][ C1] sched: RT throttling activated [ 54.744273][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 54.861858][ T4493] loop3: detected capacity change from 0 to 4096 [ 55.147826][ T4493] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 55.170843][ T4493] ntfs3: loop3: Failed to load $Extend. [ 56.176178][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.179423][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.240327][ T4522] binder: 4519:4522 ioctl c0306201 0 returned -14 [ 56.243535][ T4522] binder: 4519:4522 ioctl c0306201 0 returned -14 [ 56.513420][ T4530] loop3: detected capacity change from 0 to 512 [ 56.515457][ T4530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.517763][ T4530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.522485][ T4530] EXT4-fs (loop3): 1 truncate cleaned up [ 56.523608][ T4530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.618078][ T4536] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 56.621800][ T4534] kernel profiling enabled (shift: 9) [ 56.747418][ T4541] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 57.358076][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 57.448144][ T4563] loop3: detected capacity change from 0 to 2048 [ 57.473622][ T4563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.911623][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 58.011207][ T4575] process 'syz.3.58' launched '/dev/fd/6' with NULL argv: empty string added [ 58.086300][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.087988][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.295251][ T4592] loop0: detected capacity change from 0 to 16 [ 58.323575][ T4592] erofs: (device loop0): mounted with root inode @ nid 36. [ 58.638035][ T4598] loop4: detected capacity change from 0 to 4096 [ 58.657685][ T4598] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 58.675582][ T4598] ntfs3: loop4: Failed to load $Extend. [ 58.684768][ T4598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.686552][ T4598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.865938][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 60.599338][ T4646] loop2: detected capacity change from 0 to 32768 [ 60.792865][ T4646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.89 (4646) [ 60.933634][ T4646] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.935746][ T4646] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 60.937257][ T4646] BTRFS info (device loop2): setting nodatasum [ 60.938411][ T4646] BTRFS info (device loop2): force zlib compression, level 3 [ 60.939861][ T4646] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 60.941663][ T4646] BTRFS info (device loop2): use lzo compression, level 0 [ 60.943026][ T4646] BTRFS info (device loop2): turning on flush-on-commit [ 60.944240][ T4646] BTRFS info (device loop2): enabling auto defrag [ 60.945443][ T4646] BTRFS info (device loop2): max_inline at 4096 [ 60.946516][ T4646] BTRFS info (device loop2): force zlib compression, level 3 [ 60.947896][ T4646] BTRFS info (device loop2): using free space tree [ 60.953718][ T4645] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 61.011113][ T4646] BTRFS info (device loop2): enabling ssd optimizations [ 61.046636][ T4285] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.136704][ T4680] loop2: detected capacity change from 0 to 2048 [ 61.151015][ T4680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.187465][ T4682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.191418][ T4682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.366515][ T4694] xt_hashlimit: size too large, truncated to 1048576 [ 61.441382][ T4684] loop4: detected capacity change from 0 to 32768 [ 61.453346][ T4684] ======================================================= [ 61.453346][ T4684] WARNING: The mand mount option has been deprecated and [ 61.453346][ T4684] and is ignored by this kernel. Remove the mand [ 61.453346][ T4684] option from the mount to silence this warning. [ 61.453346][ T4684] ======================================================= [ 63.522900][ T4734] loop4: detected capacity change from 0 to 32768 [ 63.525556][ T4734] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.109 (4734) [ 63.532057][ T4734] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 63.534039][ T4734] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 63.535646][ T4734] BTRFS info (device loop4): enabling disk space caching [ 63.537070][ T4734] BTRFS info (device loop4): force clearing of disk cache [ 63.538461][ T4734] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 63.540113][ T4734] BTRFS info (device loop4): use zstd compression, level 3 [ 63.541481][ T4734] BTRFS info (device loop4): disk space caching is enabled [ 63.625488][ T4734] BTRFS info (device loop4): enabling ssd optimizations [ 63.627386][ T4734] BTRFS info (device loop4): rebuilding free space tree [ 63.636267][ T4734] BTRFS info (device loop4): disabling free space tree [ 63.637638][ T4734] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.639298][ T4734] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.107157][ T4766] loop3: detected capacity change from 0 to 512 [ 64.124341][ T4766] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 64.258480][ T27] audit: type=1326 audit(64.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.264379][ T27] audit: type=1326 audit(64.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.276449][ T27] audit: type=1326 audit(64.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.285955][ T27] audit: type=1326 audit(64.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.392856][ T27] audit: type=1326 audit(64.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.466974][ T27] audit: type=1326 audit(64.250:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.543601][ T27] audit: type=1326 audit(64.250:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffba377aa8 code=0x7ffc0000 [ 64.554576][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.557031][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.591580][ T4292] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 65.555345][ T4796] Error parsing options; rc = [-22] [ 65.566565][ T4796] loop4: detected capacity change from 0 to 64 [ 66.425955][ T4809] loop2: detected capacity change from 0 to 32768 [ 66.429092][ T4809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.128 (4809) [ 66.437629][ T4809] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.439716][ T4809] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 66.441425][ T4809] BTRFS info (device loop2): using free space tree [ 67.211060][ T4809] BTRFS info (device loop2): enabling ssd optimizations [ 67.265176][ T4868] loop4: detected capacity change from 0 to 512 [ 67.314565][ T4868] EXT4-fs (loop4): 1 truncate cleaned up [ 67.315849][ T4868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.325371][ T4285] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.145582][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 69.597866][ T4905] loop0: detected capacity change from 0 to 64 [ 69.599946][ T4905] hfs: session requires an argument [ 69.600943][ T4905] hfs: unable to parse mount options [ 69.612475][ T111] cfg80211: failed to load regulatory.db [ 69.660399][ T4273] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.592744][ T4671] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.036463][ T4671] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.038607][ T4671] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 71.040451][ T4671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.055398][ T4671] usb 1-1: config 0 descriptor?? [ 71.498713][ T4956] Trying to write to read-only block-device nullb0 [ 71.500716][ T4956] Trying to write to read-only block-device nullb0 [ 71.502207][ T4956] Trying to write to read-only block-device nullb0 [ 71.503564][ T4956] Trying to write to read-only block-device nullb0 [ 71.504849][ T4956] Trying to write to read-only block-device nullb0 [ 71.506130][ T4956] Trying to write to read-only block-device nullb0 [ 71.507773][ T4956] Trying to write to read-only block-device nullb0 [ 71.509068][ T4956] Trying to write to read-only block-device nullb0 [ 71.510379][ T4956] Trying to write to read-only block-device nullb0 [ 71.511844][ T4956] Trying to write to read-only block-device nullb0 [ 71.813340][ T4671] usb 1-1: USB disconnect, device number 2 [ 71.841594][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.844144][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.954990][ T4970] loop4: detected capacity change from 0 to 64 [ 71.991448][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 71.994020][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 71.996043][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 71.997234][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 72.000956][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 72.005242][ T4970] hfs: request for non-existent node 131072 in B*Tree [ 72.022679][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 72.052869][ T4977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.054386][ T4977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.055586][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.056229][ T4273] udevd[4273]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.057355][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.494671][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 72.590864][ T5002] loop2: detected capacity change from 0 to 512 [ 72.603199][ T5005] loop3: detected capacity change from 0 to 512 [ 72.604725][ T5005] EXT4-fs: Ignoring removed orlov option [ 72.607559][ T5005] EXT4-fs: Mount option(s) incompatible with ext3 [ 72.638693][ T4270] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.643990][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.976206][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 73.067077][ T5012] loop3: detected capacity change from 0 to 32768 [ 73.068931][ T5012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.192 (5012) [ 73.089173][ T5012] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.091217][ T5012] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 73.092935][ T5012] BTRFS info (device loop3): setting nodatasum [ 73.094067][ T5012] BTRFS info (device loop3): force zlib compression, level 3 [ 73.095362][ T5012] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 73.096971][ T5012] BTRFS info (device loop3): use lzo compression, level 0 [ 73.098325][ T5012] BTRFS info (device loop3): turning on flush-on-commit [ 73.099595][ T5012] BTRFS info (device loop3): enabling auto defrag [ 73.100833][ T5012] BTRFS info (device loop3): max_inline at 4096 [ 73.102004][ T5012] BTRFS info (device loop3): force zlib compression, level 3 [ 73.103372][ T5012] BTRFS info (device loop3): using free space tree [ 73.122805][ T4779] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.140880][ T5012] BTRFS info (device loop3): enabling ssd optimizations [ 73.206657][ T4281] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.307806][ T4779] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 73.309732][ T4779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.311210][ T4779] usb 1-1: Product: syz [ 73.311902][ T4779] usb 1-1: Manufacturer: syz [ 73.317134][ T4779] usb 1-1: SerialNumber: syz [ 73.898043][ T4779] usb 1-1: config 0 descriptor?? [ 73.902186][ T4779] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 75.202044][ T4779] gspca_stk1135: reg_w 0x5 err -110 [ 75.204142][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.205352][ T4779] gspca_stk1135: Sensor write failed [ 75.206262][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.207519][ T4779] gspca_stk1135: Sensor write failed [ 75.208440][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.209987][ T4779] gspca_stk1135: Sensor read failed [ 75.211182][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.216019][ T4779] gspca_stk1135: Sensor read failed [ 75.217227][ T4779] gspca_stk1135: Detected sensor type unknown (0x0) [ 75.218773][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.220126][ T4779] gspca_stk1135: Sensor read failed [ 75.221405][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.223143][ T4779] gspca_stk1135: Sensor read failed [ 75.224539][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.225968][ T4779] gspca_stk1135: Sensor write failed [ 75.227275][ T4779] gspca_stk1135: serial bus timeout: status=0x00 [ 75.228644][ T4779] gspca_stk1135: Sensor write failed [ 75.230257][ T4779] stk1135: probe of 1-1:0.0 failed with error -110 [ 76.469102][ T4779] usb 1-1: USB disconnect, device number 3 [ 76.469262][ T5129] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 77.781190][ T5174] loop2: detected capacity change from 0 to 128 [ 78.254827][ T5181] Error parsing options; rc = [-22] [ 78.793341][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 78.795991][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 80.120127][ T5238] random: crng reseeded on system resumption [ 81.011019][ T27] audit: type=1326 audit(80.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77aa8 code=0x7ffc0000 [ 81.018040][ T27] audit: type=1326 audit(80.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77aa8 code=0x7ffc0000 [ 81.025979][ T27] audit: type=1326 audit(81.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffffaaf77aa8 code=0x7ffc0000 [ 81.040685][ T27] audit: type=1326 audit(81.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77aa8 code=0x7ffc0000 [ 81.045866][ T27] audit: type=1326 audit(81.000:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77aa8 code=0x7ffc0000 [ 81.076728][ T5260] loop2: detected capacity change from 0 to 1024 [ 81.085988][ T5260] EXT4-fs: inline encryption not supported [ 81.112071][ T5260] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.271: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.116913][ T5260] EXT4-fs (loop2): Remounting filesystem read-only [ 81.118239][ T5260] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 81.121159][ T5260] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.271: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.125734][ T5260] EXT4-fs (loop2): Remounting filesystem read-only [ 81.126937][ T5260] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 81.129052][ T5260] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.271: Failed to acquire dquot type 0 [ 81.133108][ T5260] EXT4-fs (loop2): Remounting filesystem read-only [ 81.134420][ T5260] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 81.140294][ T5260] EXT4-fs (loop2): Remounting filesystem read-only [ 81.141408][ T5260] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.271: mark_inode_dirty error [ 81.145618][ T5260] EXT4-fs (loop2): Remounting filesystem read-only [ 81.146767][ T5260] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 81.149979][ T5260] EXT4-fs (loop2): 1 orphan inode deleted [ 81.151301][ T5260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.153517][ T4379] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.164418][ T4379] EXT4-fs (loop2): Remounting filesystem read-only [ 81.166689][ T4379] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 81.171073][ T5260] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 81.184006][ T4379] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 81.191240][ T4379] EXT4-fs (loop2): Remounting filesystem read-only [ 81.201054][ T5274] loop3: detected capacity change from 0 to 4096 [ 81.203495][ T5274] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.206713][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 81.208100][ T4285] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 81.211826][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 81.217469][ T4285] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 81.220353][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 81.225535][ T4285] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 81.230617][ T4285] EXT4-fs (loop2): Remounting filesystem read-only [ 81.241062][ T5274] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 81.249693][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.256073][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.960951][ T5282] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 81.962586][ T5282] netlink: 2 bytes leftover after parsing attributes in process `syz.4.280'. [ 81.964204][ T5282] device bond0 entered promiscuous mode [ 81.965222][ T5282] device bond_slave_0 entered promiscuous mode [ 81.970046][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.970987][ T5282] device bond_slave_1 entered promiscuous mode [ 81.974357][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.976990][ T5282] bridge0: port 3(bond0) entered blocking state [ 81.978568][ T5282] bridge0: port 3(bond0) entered disabled state [ 81.981622][ T5282] bridge0: port 3(bond0) entered blocking state [ 81.983033][ T5282] bridge0: port 3(bond0) entered forwarding state [ 81.984095][ T5281] input: syz0 as /devices/virtual/input/input3 [ 81.992278][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.995366][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.184644][ T5282] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 82.353029][ T5282] bridge0: port 3(bond0) entered disabled state [ 82.354507][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.356331][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.369281][ T5282] bridge0: port 3(bond0) entered blocking state [ 82.370487][ T5282] bridge0: port 3(bond0) entered forwarding state [ 82.371850][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.373304][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.374821][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.376134][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.403605][ T5282] bridge0: port 3(bond0) entered disabled state [ 82.404934][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.406250][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.454981][ T5288] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 82.455474][ T5292] netlink: 388 bytes leftover after parsing attributes in process `syz.4.281'. [ 82.459071][ T5290] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 82.522611][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.524564][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.792014][ T4676] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.992913][ T4676] usb 1-1: Using ep0 maxpacket: 16 [ 82.996028][ T4676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.997958][ T4676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.999686][ T4676] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.002353][ T4676] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 83.004009][ T4676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.006561][ T4676] usb 1-1: config 0 descriptor?? [ 83.046611][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.048335][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.266889][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.268681][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.418715][ T4676] hid-generic 0003:0955:7214.0001: item fetching failed at offset 3/5 [ 83.421124][ T4676] hid-generic: probe of 0003:0955:7214.0001 failed with error -22 [ 83.769301][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.807299][ T5328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.129711][ T5328] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.131639][ T5328] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.135959][ T5328] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.137702][ T5328] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.172828][ T4293] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 84.174486][ T4293] Bluetooth: hci2: Injecting HCI hardware error event [ 84.176388][ T4293] Bluetooth: hci2: hardware error 0x00 [ 84.322083][ T5349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.297'. [ 84.401008][ T5352] team0: Port device syz_tun added [ 84.420244][ T5357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.451361][ T5359] binder: 5358:5359 tried to acquire reference to desc 0, got 1 instead [ 84.454484][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.455454][ T5359] binder: tried to use weak ref as strong ref [ 84.457395][ T5359] binder: 5358:5359 got transaction to invalid handle, 1 [ 84.457731][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.466625][ T5359] binder: 5359:5358 cannot find target node [ 84.467766][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.468778][ T5359] binder: 5358:5359 transaction call to 0:0 failed 5/29201/-22, size 0-0 line 3045 [ 84.470293][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.477007][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.479516][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.483061][ T4326] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.575079][ T5367] device syzkaller0 entered promiscuous mode [ 84.580456][ T5367] tipc: Started in network mode [ 84.581340][ T5367] tipc: Node identity b275a4c3288, cluster identity 4711 [ 84.583139][ T5367] tipc: Enabled bearer , priority 0 [ 84.589254][ T5367] tipc: Resetting bearer [ 84.597604][ T5366] tipc: Resetting bearer [ 84.653411][ T5363] libceph: resolve '0..' (ret=-3): failed [ 84.682668][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.685304][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.695393][ T5366] tipc: Disabling bearer [ 84.697406][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.701921][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.268598][ T5381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.270488][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.477554][ T5381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.479236][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.533093][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.535764][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.558906][ T4779] usb 1-1: USB disconnect, device number 4 [ 85.607024][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.614170][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 85.620027][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 85.626415][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 85.635807][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 85.640031][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 85.648210][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 85.668802][ T5387] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.963337][ T5398] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 85.970570][ T5398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.046411][ T5398] bond1: (slave veth0_to_bond): making interface the new active one [ 86.048941][ T5398] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 86.050576][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 86.075840][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.087143][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.111289][ T5398] device bond1 entered promiscuous mode [ 86.113886][ T5398] device veth0_to_bond entered promiscuous mode [ 86.196722][ T5409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.198511][ T5409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.412325][ T4293] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 86.699466][ T5428] tipc: Enabling of bearer rejected, failed to enable media [ 87.902069][ T4676] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.909093][ T5483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.342'. [ 88.092097][ T4676] usb 1-1: Using ep0 maxpacket: 32 [ 88.095282][ T4676] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.096918][ T4676] usb 1-1: config 0 has no interface number 0 [ 88.099482][ T4676] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.101259][ T4676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.102889][ T4676] usb 1-1: Product: syz [ 88.103633][ T4676] usb 1-1: Manufacturer: syz [ 88.104544][ T4676] usb 1-1: SerialNumber: syz [ 88.107260][ T4676] usb 1-1: config 0 descriptor?? [ 88.109553][ T4676] smsc95xx v2.0.0 [ 88.366966][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.369006][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.725279][ T5494] IPVS: lc: FWM 3 0x00000003 - no destination available [ 88.778479][ T5497] loop3: detected capacity change from 0 to 512 [ 88.789725][ T5497] EXT4-fs: Ignoring removed i_version option [ 88.794329][ T5497] EXT4-fs: Ignoring removed bh option [ 88.806976][ T5497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.881613][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 88.907577][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.909990][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.933881][ T4676] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 88.937335][ T4676] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.939444][ T4676] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 88.941824][ T4676] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 88.947200][ T4676] usb 1-1: USB disconnect, device number 5 [ 89.501409][ T5528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 89.508180][ T5527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.566375][ T5531] binder: 5530:5531 got transaction to invalid handle, 1 [ 89.567652][ T5531] binder: 5531:5530 cannot find target node [ 89.568633][ T5531] binder: 5530:5531 transaction call to 0:0 failed 8/29201/-22, size 0-0 line 3045 [ 89.570622][ T4779] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.580535][ T5532] libceph: resolve '0..' (ret=-3): failed [ 89.631551][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.642562][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.651159][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.657730][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.661838][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.664077][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.868580][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.870322][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.876912][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.881782][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.367043][ T5551] device syzkaller0 entered promiscuous mode [ 90.378663][ T5551] tipc: Started in network mode [ 90.379846][ T5551] tipc: Node identity 5ef791dc0833, cluster identity 4711 [ 90.387267][ T5551] tipc: Enabled bearer , priority 0 [ 90.399870][ T5551] tipc: Resetting bearer [ 90.406991][ T5550] tipc: Resetting bearer [ 90.582011][ T5550] tipc: Disabling bearer [ 91.043685][ T5580] binder: 5570:5580 ioctl c0306201 0 returned -14 [ 91.325734][ T5582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.330053][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.742813][ T5592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.375'. [ 91.841123][ T5599] binder: 5598:5599 got transaction to invalid handle, 1 [ 91.843836][ T5599] binder: 5599:5598 cannot find target node [ 91.844919][ T5599] binder: 5598:5599 transaction call to 0:0 failed 12/29201/-22, size 0-0 line 3045 [ 91.847143][ T4676] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.108628][ T5620] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.889425][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.892926][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.342657][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.344504][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.466472][ T5667] loop3: detected capacity change from 0 to 512 [ 93.486308][ T5667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.701345][ T5682] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.399: Unimplemented hash flags: 0x0001 [ 93.703792][ T5682] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.399: Corrupt directory, running e2fsck is recommended [ 93.954652][ T5676] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.399: Unimplemented hash flags: 0x0001 [ 93.956759][ T4671] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.956940][ T5676] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.399: Corrupt directory, running e2fsck is recommended [ 94.152208][ T4671] usb 1-1: Using ep0 maxpacket: 8 [ 94.158302][ T4671] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.160685][ T4671] usb 1-1: config 6 has an invalid interface number: 254 but max is 1 [ 94.162774][ T4671] usb 1-1: config 6 has an invalid interface number: 110 but max is 1 [ 94.164418][ T4671] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 94.166866][ T4671] usb 1-1: config 6 has no interface number 0 [ 94.169039][ T4671] usb 1-1: config 6 has no interface number 1 [ 94.171133][ T4671] usb 1-1: config 6 interface 110 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 94.176386][ T4671] usb 1-1: config 6 interface 254 has no altsetting 0 [ 94.179339][ T4671] usb 1-1: config 6 interface 110 has no altsetting 0 [ 94.183851][ T4671] usb 1-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=cd.d5 [ 94.186890][ T4671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.189566][ T4671] usb 1-1: Product: syz [ 94.190350][ T4671] usb 1-1: Manufacturer: syz [ 94.193051][ T4671] usb 1-1: SerialNumber: syz [ 94.208575][ T5691] binder: 5690:5691 got transaction to invalid handle, 1 [ 94.209921][ T5691] binder: 5691:5690 cannot find target node [ 94.210962][ T5691] binder: 5690:5691 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3045 [ 94.215779][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.338545][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 94.411880][ T4671] usb 1-1: USB disconnect, device number 6 [ 94.474692][ T5704] loop4: detected capacity change from 0 to 4096 [ 94.546234][ T5704] EXT4-fs: Ignoring removed orlov option [ 94.548743][ T5704] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.553584][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.587768][ T5704] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 95.594541][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 95.784986][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 96.169255][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'. [ 96.249756][ T5779] binder: 5778:5779 got transaction to invalid handle, 1 [ 96.251293][ T5779] binder: 5779:5778 cannot find target node [ 96.253009][ T5779] binder: 5778:5779 transaction call to 0:0 failed 18/29201/-22, size 0-0 line 3045 [ 96.255133][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.547380][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.550095][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.592093][ T5791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.593819][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.937852][ T5791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.943854][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.258967][ T5814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.442'. [ 97.498625][ T5825] binder: BINDER_SET_CONTEXT_MGR already set [ 97.499908][ T5825] binder: 5823:5825 ioctl 4018620d 20000040 returned -16 [ 97.505046][ T5825] binder: 5823:5825 got transaction to invalid handle, 1 [ 97.507235][ T5825] binder: 5825:5823 cannot find target node [ 97.508662][ T5825] binder: 5823:5825 transaction call to 0:0 failed 21/29201/-22, size 0-0 line 3045 [ 97.516283][ T4779] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.498243][ T5857] IPVS: Unknown mcast interface: vcan0 [ 98.878768][ T5865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.461'. [ 98.975076][ T5871] binder: BINDER_SET_CONTEXT_MGR already set [ 98.977125][ T5871] binder: 5870:5871 ioctl 4018620d 20000040 returned -16 [ 98.981580][ T5871] binder: 5870:5871 got transaction to invalid handle, 1 [ 98.985973][ T5871] binder: 5871:5870 cannot find target node [ 98.987195][ T5871] binder: 5870:5871 transaction call to 0:0 failed 24/29201/-22, size 0-0 line 3045 [ 98.989463][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.044054][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.050820][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 99.063943][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 99.066393][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 99.079262][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 99.081645][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 99.089799][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 99.643328][ T5920] binder: BINDER_SET_CONTEXT_MGR already set [ 99.644492][ T5920] binder: 5919:5920 ioctl 4018620d 20000040 returned -16 [ 99.651550][ T5920] binder: 5919:5920 got transaction to invalid handle, 1 [ 99.656196][ T5920] binder: 5920:5919 cannot find target node [ 99.928447][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.949042][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 99.969816][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 99.981233][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 99.995397][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 100.002529][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 100.010778][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 100.077820][ T5934] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 100.095655][ T5934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.165691][ T5934] bond1: (slave veth0_to_bond): making interface the new active one [ 100.177246][ T5934] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 100.179089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.345313][ T5945] loop3: detected capacity change from 0 to 256 [ 100.439984][ T5945] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.442001][ T5945] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 100.536542][ T5945] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.624649][ T5934] device bond1 entered promiscuous mode [ 100.625949][ T5934] device veth0_to_bond entered promiscuous mode [ 101.129286][ T5961] binder: 5958:5961 got transaction to invalid handle, 1 [ 101.261259][ T5979] device veth0_macvtap left promiscuous mode [ 101.547569][ T5993] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 101.560487][ T5993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.572478][ T5995] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 101.579868][ T5998] device bond1 entered promiscuous mode [ 101.816230][ T6024] binder: 6023:6024 got transaction to invalid handle, 1 [ 101.817634][ T6024] binder_debug: 5 callbacks suppressed [ 101.817647][ T6024] binder: 6024:6023 cannot find target node [ 101.825676][ T6024] binder: 6023:6024 transaction call to 0:0 failed 35/29201/-22, size 0-0 line 3045 [ 101.829925][ T3992] device veth0_macvtap entered promiscuous mode [ 101.831528][ T4326] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.056188][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.060488][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 102.064874][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 102.066313][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 102.067732][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 102.076931][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 102.078367][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 102.157221][ T6055] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 102.173495][ T6055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.186404][ T6055] bond1: (slave veth0_to_bond): Releasing active interface [ 102.235079][ T6055] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.239996][ T6063] device bond2 entered promiscuous mode [ 102.373399][ T6074] binder: 6070:6074 got transaction to invalid handle, 1 [ 102.374900][ T6074] binder: 6074:6070 cannot find target node [ 102.381902][ T6074] binder: 6070:6074 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3045 [ 102.391201][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.453966][ T6086] binder: BINDER_SET_CONTEXT_MGR already set [ 102.455206][ T6086] binder: 6085:6086 ioctl 4018620d 20000040 returned -16 [ 102.514088][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.518828][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 102.522727][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 102.526451][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 102.531541][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 102.536048][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 102.540908][ T6093] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 102.680204][ T6108] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 102.700574][ T6108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.710785][ T6108] bond2: (slave veth0_to_bond): Releasing active interface [ 102.755139][ T6108] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.760826][ T6116] binder: BINDER_SET_CONTEXT_MGR already set [ 102.765408][ T6116] binder: 6115:6116 ioctl 4018620d 20000040 returned -16 [ 102.770978][ T6108] device bond3 entered promiscuous mode [ 103.366409][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.381849][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.650343][ T6117] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.652212][ T6117] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.653816][ T6117] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.655540][ T6117] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.947381][ T6151] device syzkaller0 entered promiscuous mode [ 104.048068][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 104.049155][ T6168] binder: 6164:6168 ioctl 4018620d 20000040 returned -16 [ 104.103018][ T6177] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 104.109316][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.428700][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.431589][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.212501][ T6177] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 115.215914][ T6180] device bond1 entered promiscuous mode [ 115.314746][ T6230] binder: 6229:6230 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 115.320382][ T6230] binder: 6229:6230 got transaction to invalid handle, 1 [ 115.321591][ T6230] binder: 6230:6229 cannot find target node [ 115.327903][ T6230] binder: 6229:6230 transaction call to 0:0 failed 45/29201/-22, size 0-0 line 3045 [ 115.334693][ T4779] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.492810][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.494308][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.918775][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.937411][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.219424][ T6212] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.221187][ T6212] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.223069][ T6212] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.224700][ T6212] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.473437][ T6282] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 116.483774][ T6283] bond3: (slave veth0_to_bond): Releasing active interface [ 116.547070][ T6290] device syzkaller0 entered promiscuous mode [ 116.550740][ T6290] 0: reclassify loop, rule prio 0, protocol 800 [ 116.634141][ T6303] binder: 6302:6303 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 116.636865][ T6303] binder: 6302:6303 got transaction to invalid handle, 1 [ 116.638292][ T6303] binder: 6303:6302 cannot find target node [ 116.639320][ T6303] binder: 6302:6303 transaction call to 0:0 failed 48/29201/-22, size 0-0 line 3045 [ 116.641497][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.742278][ T6315] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 116.755376][ T6315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.760959][ T6315] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 116.763322][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.767420][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 116.768830][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 116.770213][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 116.771698][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 116.777058][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 116.778518][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 116.781462][ T6315] device bond4 entered promiscuous mode [ 117.036073][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.038331][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.844658][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.859790][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.139558][ T6321] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.141294][ T6321] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.143217][ T6321] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.144788][ T6321] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.407754][ T6361] tipc: Enabling of bearer rejected, failed to enable media [ 118.514306][ T6384] binder: 6382:6384 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 118.516752][ T6379] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 118.545622][ T6384] binder: 6382:6384 got transaction to invalid handle, 1 [ 118.547031][ T6384] binder: 6384:6382 cannot find target node [ 118.550429][ T6379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.561363][ T6384] binder: 6382:6384 transaction call to 0:0 failed 51/29201/-22, size 0-0 line 3045 [ 118.575556][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.577097][ T6379] bond1: (slave veth0_to_bond): Releasing active interface [ 118.860050][ T6379] device veth0_to_bond left promiscuous mode [ 118.899356][ T6379] bond2: (slave veth0_to_bond): making interface the new active one [ 118.901581][ T6379] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.913332][ T1920] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 118.928821][ T6393] device bond2 entered promiscuous mode [ 118.929886][ T6393] device veth0_to_bond entered promiscuous mode [ 119.176360][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.178206][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.359051][ T6429] binder: 6428:6429 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 119.365579][ T6429] binder: 6428:6429 got transaction to invalid handle, 1 [ 119.375397][ T6429] binder: 6429:6428 cannot find target node [ 119.909073][ T6445] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 119.937507][ T6445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.006379][ T6445] bond1: (slave veth0_to_bond): Releasing active interface [ 120.074115][ T6445] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 120.104959][ T6449] device bond2 entered promiscuous mode [ 120.291562][ T6469] binder: 6466:6469 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 120.303586][ T6469] binder: 6466:6469 got transaction to invalid handle, 1 [ 120.506377][ T6493] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 120.512336][ T6493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.519968][ T6493] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 120.524109][ T6493] device bond1 entered promiscuous mode [ 120.836108][ T6515] binder: 6514:6515 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 120.838801][ T6515] binder: 6514:6515 got transaction to invalid handle, 1 [ 120.840257][ T6515] binder_debug: 5 callbacks suppressed [ 120.840269][ T6515] binder: 6515:6514 cannot find target node [ 120.843231][ T6515] binder: 6514:6515 transaction call to 0:0 failed 60/29201/-22, size 0-0 line 3045 [ 120.845869][ T4676] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.108441][ T6530] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 121.120957][ T6530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.130696][ T6530] bond4: (slave veth0_to_bond): Releasing active interface [ 121.173672][ T6530] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 121.182067][ T6536] device bond5 entered promiscuous mode [ 121.410175][ T6547] device syzkaller0 entered promiscuous mode [ 121.890311][ T6570] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 121.910991][ T6570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.918676][ T6570] bond5: (slave veth0_to_bond): Releasing active interface [ 121.936093][ T6570] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 121.941676][ T6570] device bond6 entered promiscuous mode [ 122.036805][ T6580] fuse: Bad value for 'fd' [ 122.118096][ T6582] binder: 6581:6582 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 122.120510][ T6582] binder: 6581:6582 got transaction to invalid handle, 1 [ 122.122322][ T6582] binder: 6582:6581 cannot find target node [ 122.123393][ T6582] binder: 6581:6582 transaction call to 0:0 failed 63/29201/-22, size 0-0 line 3045 [ 122.126309][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.146534][ T6584] netlink: 388 bytes leftover after parsing attributes in process `syz.3.678'. [ 122.169646][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.171496][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.548435][ T6612] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 122.556803][ T6612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.563944][ T6612] bond1: (slave veth0_to_bond): Releasing active interface [ 122.615289][ T6612] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 122.619120][ T6614] device bond2 entered promiscuous mode [ 122.765924][ T6627] netlink: 388 bytes leftover after parsing attributes in process `syz.4.692'. [ 123.007090][ T6652] binder: 6649:6652 ioctl 4018620d 0 returned -22 [ 123.017919][ T6652] binder: 6649:6652 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 123.022062][ T6652] binder: 6649:6652 got transaction to invalid handle, 1 [ 123.026802][ T6652] binder: 6652:6649 cannot find target node [ 123.032757][ T6652] binder: 6649:6652 transaction call to 0:0 failed 66/29201/-22, size 0-0 line 3045 [ 123.035278][ T4676] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.099498][ T6655] overlayfs: missing 'lowerdir' [ 123.357734][ T6658] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 123.365541][ T6658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.428788][ T6664] binder: 6663:6664 ioctl 4018620d 0 returned -22 [ 123.431640][ T6664] binder: 6663:6664 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 123.436937][ T6664] binder: 6663:6664 got transaction to invalid handle, 1 [ 123.438340][ T6664] binder: 6664:6663 cannot find target node [ 123.446071][ T6658] bond2: (slave veth0_to_bond): Releasing active interface [ 123.559629][ T6658] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 124.219366][ T6668] device bond3 entered promiscuous mode [ 124.692965][ T6698] fuse: Bad value for 'fd' [ 125.843199][ T6730] binder: BINDER_SET_CONTEXT_MGR already set [ 125.844559][ T6730] binder: 6729:6730 ioctl 4018620d 20000040 returned -16 [ 125.886852][ T6733] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 125.895863][ T6733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.901159][ T6733] device bond3 entered promiscuous mode [ 125.934467][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935648][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.114942][ T6754] device syzkaller0 entered promiscuous mode [ 126.201415][ T6762] netlink: 388 bytes leftover after parsing attributes in process `syz.2.730'. [ 126.206196][ T6760] fuse: Bad value for 'fd' [ 126.688950][ T6779] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 126.699813][ T6779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.706319][ T6779] device bond4 entered promiscuous mode [ 126.717844][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.735804][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 126.739763][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 126.744398][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 126.746426][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 126.748095][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 126.749748][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 126.924934][ T6802] kAFS: unable to lookup cell '(,c¾Ì' [ 126.967334][ T6808] binder: BINDER_SET_CONTEXT_MGR already set [ 126.968446][ T6808] binder: 6806:6808 ioctl 4018620d 20000040 returned -16 [ 127.539804][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 128.027023][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.034454][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 128.036073][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 128.037773][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 128.039401][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 128.041237][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 128.043491][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 128.117220][ T6844] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 128.127918][ T6844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.136915][ T6844] device bond3 entered promiscuous mode [ 128.285653][ T6852] binder: 6851:6852 ioctl c0306201 0 returned -14 [ 128.287589][ T6852] binder: 6851:6852 got transaction to invalid handle, 1 [ 128.288870][ T6852] binder_debug: 2 callbacks suppressed [ 128.288882][ T6852] binder: 6852:6851 cannot find target node [ 128.291298][ T6852] binder: 6851:6852 transaction call to 0:0 failed 75/29201/-22, size 0-0 line 3045 [ 128.293601][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.316047][ T6854] device syzkaller0 entered promiscuous mode [ 128.541672][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.543338][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.980173][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.003797][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.311123][ T6864] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.313039][ T6864] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.314609][ T6864] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.316280][ T6864] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.586073][ T6884] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 129.601177][ T6884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.608134][ T6884] device bond4 entered promiscuous mode [ 129.651342][ T6895] lo speed is unknown, defaulting to 1000 [ 129.652624][ T6895] lo speed is unknown, defaulting to 1000 [ 129.660500][ T6895] lo speed is unknown, defaulting to 1000 [ 129.673789][ T6895] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.680850][ T6895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.711697][ T6895] lo speed is unknown, defaulting to 1000 [ 129.724190][ T6895] lo speed is unknown, defaulting to 1000 [ 129.725709][ T6895] lo speed is unknown, defaulting to 1000 [ 129.727124][ T6895] lo speed is unknown, defaulting to 1000 [ 129.728869][ T6895] lo speed is unknown, defaulting to 1000 [ 130.495102][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.496282][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.496693][ T6950] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 130.505486][ T6950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.507333][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.510717][ T6951] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.514535][ T6950] device bond5 entered promiscuous mode [ 130.520717][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.522185][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.524188][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.525541][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.526894][ T6951] bond0 speed is unknown, defaulting to 1000 [ 130.604752][ T6961] device syzkaller0 entered promiscuous mode [ 130.689875][ T6970] binder: 6969:6970 got transaction to invalid handle, 1 [ 130.691414][ T6970] binder: 6970:6969 cannot find target node [ 130.700280][ T6970] binder: 6969:6970 transaction call to 0:0 failed 79/29201/-22, size 0-0 line 3045 [ 130.709290][ T5046] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.825047][ T6989] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 130.829907][ T6989] netlink: 2 bytes leftover after parsing attributes in process `syz.2.797'. [ 130.831731][ T6989] device bond0 entered promiscuous mode [ 130.833767][ T6989] device bond_slave_0 entered promiscuous mode [ 130.834948][ T6989] device bond_slave_1 entered promiscuous mode [ 130.850455][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.852309][ T6989] bridge0: port 3(bond0) entered blocking state [ 130.867584][ T6989] bridge0: port 3(bond0) entered disabled state [ 130.871156][ T6992] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 130.900669][ T6992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 130.903063][ T6989] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 130.907192][ T6989] bridge0: port 3(bond0) entered blocking state [ 130.908361][ T6989] bridge0: port 3(bond0) entered forwarding state [ 130.943606][ T6989] bridge0: port 3(bond0) entered disabled state [ 130.950306][ T6992] device bond7 entered promiscuous mode [ 130.977956][ T7003] netlink: 388 bytes leftover after parsing attributes in process `syz.3.802'. [ 131.037735][ T7011] binder: 7010:7011 got transaction to invalid handle, 1 [ 131.039230][ T7011] binder: 7011:7010 cannot find target node [ 131.040241][ T7011] binder: 7010:7011 transaction call to 0:0 failed 83/29201/-22, size 0-0 line 3045 [ 131.044045][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.376170][ T7035] bond2: (slave veth0_to_bond): Releasing active interface [ 131.913653][ T7052] netlink: 388 bytes leftover after parsing attributes in process `syz.1.817'. [ 131.977039][ T7054] binder: 7053:7054 got transaction to invalid handle, 1 [ 131.978476][ T7054] binder: 7054:7053 cannot find target node [ 132.045610][ T7062] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 132.048791][ T7062] netlink: 2 bytes leftover after parsing attributes in process `syz.1.822'. [ 132.050478][ T7062] device bond0 entered promiscuous mode [ 132.051489][ T7062] device bond_slave_0 entered promiscuous mode [ 132.053210][ T7062] device bond_slave_1 entered promiscuous mode [ 132.056388][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.059012][ T7062] bridge0: port 3(bond0) entered blocking state [ 132.060219][ T7062] bridge0: port 3(bond0) entered disabled state [ 132.063596][ T4676] bond0 speed is unknown, defaulting to 1000 [ 132.078935][ T7062] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 132.081199][ T7062] bridge0: port 3(bond0) entered blocking state [ 132.082483][ T7062] bridge0: port 3(bond0) entered forwarding state [ 132.122552][ T7062] bridge0: port 3(bond0) entered disabled state [ 132.281101][ T7091] binder: 7090:7091 got transaction to invalid handle, 1 [ 132.338312][ T7097] netlink: 388 bytes leftover after parsing attributes in process `syz.3.834'. [ 132.417521][ T7110] netlink: 'syz.2.840': attribute type 10 has an invalid length. [ 132.419019][ T7110] netlink: 2 bytes leftover after parsing attributes in process `syz.2.840'. [ 132.421673][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.438810][ T7108] bond6: (slave veth0_to_bond): Releasing active interface [ 132.518575][ T7120] binder: 7119:7120 got transaction to invalid handle, 1 [ 132.545566][ T22] bond0 speed is unknown, defaulting to 1000 [ 132.552879][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 132.681417][ T7143] netlink: 388 bytes leftover after parsing attributes in process `syz.0.851'. [ 132.758178][ T7151] bond2: (slave veth0_to_bond): Releasing active interface [ 132.764361][ T7151] device veth0_to_bond left promiscuous mode [ 132.824925][ T7157] netlink: 'syz.4.856': attribute type 10 has an invalid length. [ 132.828854][ T7157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.856'. [ 132.834632][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.865275][ T7159] binder: 7158:7159 got transaction to invalid handle, 1 [ 134.998075][ T7240] fuse: Bad value for 'fd' [ 135.023923][ T7242] netlink: 388 bytes leftover after parsing attributes in process `syz.1.879'. [ 135.190279][ T7264] netlink: 'syz.1.887': attribute type 10 has an invalid length. [ 135.191871][ T7264] netlink: 2 bytes leftover after parsing attributes in process `syz.1.887'. [ 135.195083][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.196743][ T22] bond0 speed is unknown, defaulting to 1000 [ 135.315902][ T7280] input: syz0 as /devices/virtual/input/input4 [ 135.380921][ T7285] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.383926][ T7285] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.394776][ T7288] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 135.398510][ T7289] netlink: 388 bytes leftover after parsing attributes in process `syz.2.893'. [ 135.402758][ T7288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.056198][ T7313] loop3: detected capacity change from 0 to 4096 [ 136.125791][ T7313] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 136.199515][ T4281] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 136.206922][ T7326] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 136.217123][ T7326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 136.238426][ T7326] bond3: (slave veth0_to_bond): Releasing active interface [ 136.243788][ T7331] binder: 7330:7331 ioctl 4018620d 0 returned -22 [ 136.245220][ T7331] binder: 7330:7331 got transaction to invalid handle, 1 [ 136.246428][ T7331] binder_debug: 11 callbacks suppressed [ 136.246441][ T7331] binder: 7331:7330 cannot find target node [ 136.248512][ T7331] binder: 7330:7331 transaction call to 0:0 failed 102/29201/-22, size 0-0 line 3045 [ 136.263073][ T4779] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.317613][ T7344] netlink: 388 bytes leftover after parsing attributes in process `syz.3.909'. [ 136.415354][ T7356] netlink: 'syz.2.916': attribute type 10 has an invalid length. [ 136.417595][ T7356] bridge0: port 3(bond0) entered blocking state [ 136.418832][ T7356] bridge0: port 3(bond0) entered forwarding state [ 136.462555][ T7356] bridge0: port 3(bond0) entered disabled state [ 136.648045][ T7378] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 136.669152][ T7378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 136.731576][ T7385] netlink: 388 bytes leftover after parsing attributes in process `syz.4.925'. [ 136.916320][ T7397] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 136.918372][ T7397] bridge0: port 3(bond0) entered blocking state [ 136.919506][ T7397] bridge0: port 3(bond0) entered forwarding state [ 136.952547][ T7397] bridge0: port 3(bond0) entered disabled state [ 136.995393][ T7403] binder: 7402:7403 ioctl 4018620d 0 returned -22 [ 136.997582][ T7403] binder: 7402:7403 got transaction to invalid handle, 1 [ 136.999041][ T7403] binder: 7403:7402 cannot find target node [ 137.002199][ T7403] binder: 7402:7403 transaction call to 0:0 failed 105/29201/-22, size 0-0 line 3045 [ 137.005862][ T4674] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.071353][ T7412] bond1: (slave veth0_to_bond): Releasing active interface [ 137.072796][ T7412] device veth0_to_bond left promiscuous mode [ 137.169903][ T7416] netlink: 388 bytes leftover after parsing attributes in process `syz.2.939'. [ 137.243595][ T7420] fuse: Bad value for 'fd' [ 137.296489][ T7430] netlink: 'syz.1.944': attribute type 10 has an invalid length. [ 137.298504][ T7430] bridge0: port 3(bond0) entered blocking state [ 137.299691][ T7430] bridge0: port 3(bond0) entered forwarding state [ 137.309162][ T7433] binder: 7431:7433 ioctl c0306201 0 returned -14 [ 137.355273][ T7430] bridge0: port 3(bond0) entered disabled state [ 137.501573][ T7459] netlink: 388 bytes leftover after parsing attributes in process `syz.0.953'. [ 137.653693][ T7478] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 137.656033][ T7478] netlink: 2 bytes leftover after parsing attributes in process `syz.4.962'. [ 138.233752][ T7513] netlink: 388 bytes leftover after parsing attributes in process `syz.2.971'. [ 138.676294][ T7527] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 138.680023][ T7527] netlink: 2 bytes leftover after parsing attributes in process `syz.2.976'. [ 138.725712][ T7534] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 138.745708][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.751568][ T7534] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 138.798605][ T7540] device syzkaller0 entered promiscuous mode [ 138.811992][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 138.999726][ T7568] netlink: 388 bytes leftover after parsing attributes in process `syz.3.990'. [ 139.012152][ T7569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.020000][ T7569] bond2: (slave veth0_to_bond): Releasing active interface [ 139.060465][ T7569] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 139.066738][ T7573] netlink: 2 bytes leftover after parsing attributes in process `syz.1.992'. [ 139.396231][ T7612] device syzkaller0 entered promiscuous mode [ 139.406097][ T7614] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1004'. [ 139.475257][ T7616] bridge0: port 3(bond0) entered blocking state [ 139.476476][ T7616] bridge0: port 3(bond0) entered forwarding state [ 139.524641][ T7616] bridge0: port 3(bond0) entered disabled state [ 139.544947][ T7619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 139.552984][ T7618] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 139.570003][ T7622] input: syz0 as /devices/virtual/input/input5 [ 139.632309][ T7633] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 139.865768][ T7657] device syzkaller0 entered promiscuous mode [ 139.868132][ T7659] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1018'. [ 139.969478][ T7663] 8021q: adding VLAN 0 to HW filter on device bond7 [ 139.971916][ T7665] bridge0: port 3(bond0) entered blocking state [ 139.973130][ T7665] bridge0: port 3(bond0) entered forwarding state [ 140.002172][ T7665] bridge0: port 3(bond0) entered disabled state [ 140.026469][ T7663] bond6: (slave veth0_to_bond): Releasing active interface [ 140.290374][ T7705] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1032'. [ 140.360950][ T7707] loop0: detected capacity change from 0 to 128 [ 140.689833][ T7712] fuse: Bad value for 'fd' [ 140.746942][ T4326] bond0 speed is unknown, defaulting to 1000 [ 140.771185][ T7717] binder: 7715:7717 tried to acquire reference to desc 0, got 1 instead [ 141.147075][ T7720] lo speed is unknown, defaulting to 1000 [ 141.148844][ T7720] bond0 speed is unknown, defaulting to 1000 [ 141.276329][ T7714] loop4: detected capacity change from 0 to 40427 [ 141.344831][ T7726] validate_nla: 6 callbacks suppressed [ 141.344840][ T7726] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 141.377946][ T7726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.379923][ T7723] device syzkaller0 entered promiscuous mode [ 141.524491][ T7734] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 141.526491][ T7734] bridge0: port 3(bond0) entered blocking state [ 141.527644][ T7734] bridge0: port 3(bond0) entered forwarding state [ 141.565922][ T7734] bridge0: port 3(bond0) entered disabled state [ 141.626798][ T7749] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1046'. [ 142.081904][ T7767] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 142.091734][ T7767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 142.454646][ T7779] device syzkaller0 entered promiscuous mode [ 142.471375][ T7782] input: syz0 as /devices/virtual/input/input6 [ 142.597055][ T7787] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 142.709710][ T7796] netlink: 'syz.2.1060': attribute type 10 has an invalid length. [ 142.711840][ T7796] bridge0: port 3(bond0) entered blocking state [ 142.713010][ T7795] binder: 7794:7795 got transaction to invalid handle, 1 [ 142.713172][ T7796] bridge0: port 3(bond0) entered forwarding state [ 142.714632][ T7795] binder: 7795:7794 cannot find target node [ 142.717140][ T7795] binder: 7794:7795 transaction call to 0:0 failed 119/29201/-22, size 0-0 line 3045 [ 142.720373][ T4671] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.752574][ T7796] bridge0: port 3(bond0) entered disabled state [ 142.757299][ T7800] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1062'. [ 142.929149][ T7815] loop0: detected capacity change from 0 to 2048 [ 142.957350][ T7815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.990976][ T4288] EXT4-fs (loop0): unmounting filesystem. [ 143.152896][ T7829] binder: 7828:7829 got transaction to invalid handle, 1 [ 143.154526][ T7829] binder: 7829:7828 cannot find target node [ 143.155871][ T7829] binder: 7828:7829 transaction call to 0:0 failed 123/29201/-22, size 0-0 line 3045 [ 143.158135][ T4326] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.188233][ T7835] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1074'. [ 143.240340][ T7839] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 143.245680][ T7839] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.300567][ T7847] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1088'. [ 143.608566][ T7863] binder: 7862:7863 got transaction to invalid handle, 1 [ 143.610260][ T7863] binder: 7863:7862 cannot find target node [ 143.614338][ T7863] binder: 7862:7863 transaction call to 0:0 failed 127/29201/-22, size 0-0 line 3045 [ 143.618214][ T4326] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.666654][ T7868] device syzkaller0 entered promiscuous mode [ 144.205071][ T7881] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1092'. [ 144.250172][ T7883] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 144.319855][ T7892] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 144.629251][ T7909] bond3: (slave veth0_to_bond): Releasing active interface [ 144.657192][ T7911] device syzkaller0 entered promiscuous mode [ 144.820699][ T7918] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1106'. [ 144.879261][ T7921] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 144.918107][ T7923] team0: Port device syz_tun added [ 145.385715][ T7950] device syzkaller0 entered promiscuous mode [ 145.698976][ T7952] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1118'. [ 145.755514][ T7956] netlink: 'syz.3.1119': attribute type 10 has an invalid length. [ 145.758558][ T7956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.821389][ T7963] input: syz0 as /devices/virtual/input/input7 [ 145.854873][ T7967] team0: Port device syz_tun added [ 146.091645][ T7995] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1131'. [ 146.655016][ T8021] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 146.737421][ T8022] Error parsing options; rc = [-22] [ 146.750502][ T8022] loop3: detected capacity change from 0 to 64 [ 147.113957][ T8040] fuse: Bad value for 'fd' [ 147.164295][ T8044] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1146'. [ 147.664162][ T8072] netlink: 'syz.2.1152': attribute type 10 has an invalid length. [ 147.693918][ T8076] input: syz0 as /devices/virtual/input/input8 [ 147.753189][ T8082] loop3: detected capacity change from 0 to 512 [ 147.770877][ T8082] EXT4-fs (loop3): 1 truncate cleaned up [ 147.772250][ T8082] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.268605][ T8107] device syzkaller0 entered promiscuous mode [ 148.310703][ T8109] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1163'. [ 148.505951][ T8127] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 148.572171][ T8087] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 148.600571][ T8087] EXT4-fs (loop3): Remounting filesystem read-only [ 148.699604][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 149.226729][ T8150] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1177'. [ 149.571221][ T8171] device syzkaller0 entered promiscuous mode [ 149.591738][ T8176] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 149.619667][ T8181] input: syz0 as /devices/virtual/input/input9 [ 150.524686][ T8202] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1193'. [ 160.534035][ T8221] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 160.601810][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.602772][ T8230] netlink: 'syz.0.1213': attribute type 10 has an invalid length. [ 160.606810][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.609642][ T8231] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 160.667695][ T8237] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1206'. [ 160.997070][ T8251] device syzkaller0 entered promiscuous mode [ 166.896153][ T4293] ------------[ cut here ]------------ [ 166.897316][ T4293] WARNING: CPU: 1 PID: 4293 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x1fc/0x418 [ 166.898991][ T4293] Modules linked in: [ 166.899692][ T4293] CPU: 1 PID: 4293 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 166.901056][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.903009][ T4293] Workqueue: hci1 hci_conn_timeout [ 166.904051][ T4293] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 166.905631][ T4293] pc : hci_conn_timeout+0x1fc/0x418 [ 166.906645][ T4293] lr : hci_conn_timeout+0x1fc/0x418 [ 166.907671][ T4293] sp : ffff800020a67b30 [ 166.908527][ T4293] x29: ffff800020a67b30 x28: ffff0000d6b61800 x27: ffff0000d4db4330 [ 166.910161][ T4293] x26: ffff0000c2f0ba18 x25: 1fffe000185e1743 x24: dfff800000000000 [ 166.911772][ T4293] x23: ffff0000c4ed1000 x22: dfff800000000000 x21: 00000000ffffffff [ 166.913404][ T4293] x20: ffff0000d4db4000 x19: ffff0000d4db4330 x18: ffff800011babf60 [ 166.915068][ T4293] x17: ffff800018381000 x16: ffff800011a529a8 x15: ffff800017e62000 [ 166.916734][ T4293] x14: 0000000000000001 x13: 1fffe0001a9b6802 x12: 0000000000ff0100 [ 166.918318][ T4293] x11: ff00800010c2f754 x10: 0000000000000000 x9 : ffff800010c2f754 [ 166.919943][ T4293] x8 : ffff0000d48c0000 x7 : 0000000000000000 x6 : 0000000000000000 [ 166.921578][ T4293] x5 : ffff8000183a1d18 x4 : 0000000000000008 x3 : ffff800010c2f590 [ 166.923158][ T4293] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 166.924789][ T4293] Call trace: [ 166.925445][ T4293] hci_conn_timeout+0x1fc/0x418 [ 166.926367][ T4293] process_one_work+0x7f8/0x13a4 [ 166.927311][ T4293] worker_thread+0x8c4/0xfec [ 166.928212][ T4293] kthread+0x250/0x2d8 [ 166.929005][ T4293] ret_from_fork+0x10/0x20 [ 166.929922][ T4293] irq event stamp: 4412 [ 166.930737][ T4293] hardirqs last enabled at (4411): [] _raw_spin_unlock_irq+0x3c/0x90 [ 166.932716][ T4293] hardirqs last disabled at (4412): [] el1_dbg+0x24/0x80 [ 166.934401][ T4293] softirqs last enabled at (3634): [] handle_softirqs+0xaec/0xc60 [ 166.936300][ T4293] softirqs last disabled at (2831): [] __do_softirq+0x14/0x20 [ 166.938111][ T4293] ---[ end trace 0000000000000000 ]--- [ 168.971977][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 168.972019][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 168.973143][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 171.740742][ T8264] netlink: 'syz.2.1215': attribute type 10 has an invalid length.