last executing test programs: 9m28.846841282s ago: executing program 0 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, 0x0, 0x20020002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9m27.154964729s ago: executing program 0 (id=307): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3d10, 0x1, 0xfffffffd}) io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}) socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a3200000082496e001400048008000240fffffffe08000140000000000900010073797a300000000014000000060a0104000000000000000001000000140000001100010000000000000000000300000a"], 0x9c}, 0x1, 0x0, 0x0, 0x24048041}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 9m26.959809121s ago: executing program 4 (id=308): capget(&(0x7f0000000140)={0x47e42d12b42c71e6}, &(0x7f0000000180)={0x8, 0x3, 0x40, 0x8001, 0x3, 0x8000}) 9m26.088028225s ago: executing program 4 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r3, &(0x7f0000000cc0), 0xfd45) 9m25.877345559s ago: executing program 0 (id=312): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000200), 0x10, 0x0}, 0x0) open$dir(0x0, 0x0, 0x0) 9m25.711945341s ago: executing program 0 (id=314): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,nobarrier,nodecompose,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp861,umask=0000000000006745,\x00'], 0x3, 0x6b0, &(0x7f0000000980)="$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") open(0x0, 0x14927e, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 9m24.45950759s ago: executing program 0 (id=316): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getuid() ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x7, "5b31316b63bca2f54fa8668fbd3a6d95fe539d4691f6d6895189ea1bdd020c95", 0x5, 0x3ff, 0x4c5c, 0x6, 0x6e, 0x870e, 0x9, 0xe3db, [0x4, 0xffffffff, 0x28c4, 0xd]}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$dsp(r0, 0x0, 0x0) 9m23.440483316s ago: executing program 4 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4e22, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9m23.156418291s ago: executing program 0 (id=321): syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49bf, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0x2, 0x122, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500f14e6a5877ceaeb8cdefb828000a20000000030a010300000000000078fb88107c00000000000000080000010000090a000700726f75746500000014000000090a010100000000000000000700000420fdff00030a01080000000000000000032000090c00024000000000000000031424e5386bca8d3ae30000001100010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x26040190) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 9m22.867933815s ago: executing program 32 (id=321): syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49bf, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0x2, 0x122, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500f14e6a5877ceaeb8cdefb828000a20000000030a010300000000000078fb88107c00000000000000080000010000090a000700726f75746500000014000000090a010100000000000000000700000420fdff00030a01080000000000000000032000090c00024000000000000000031424e5386bca8d3ae30000001100010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x26040190) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 9m21.443313037s ago: executing program 4 (id=326): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,nobarrier,nodecompose,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp861,umask=0000000000006745,\x00'], 0x3, 0x6b0, &(0x7f0000000980)="$eJzs3U1sHHfdB/DvbDbrbB4pdds07YOQajVSBY1I7KxKgoTUgBDKIUIRXHq1Eqexskkrx0VphcgGKEicOKEeOBShcOgJIYRUTohyRkLiwsn3SNw45AAYzeysvbbXjp3YXpN+PtJ4/rP/t9/8NC/7kmgCfGZdfDOHeyly8dSlO+X20v1Od+l+5+agnGQiSSNp9lcp2knxaXIh/SX/X75YD1dsNs/rDz4pmh9+3OlvNeulat/Yqt8GI1v2kiMrG4eSTPWL/9r2sBvGq5ZqnCur4z2mYiXuMmEnB4mDcVveoLda2Xhk9+2ft8CBdbd/39xgMjma/t21fB+Q+urw6CvD+G15bertXxwAAACwV0Z+lh/2zMM8zJ0c259wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OlQ9J8ZWNRLY1CeSjF4/n9r6Jn6rTGH+4Q+uFatvv3MuAMBAAAAAAAAgCfy8sM8zJ0cG2wvF9Vv/q9UG8erv/+Xd3M7c1nI6dzJbBazmIXMJJkcGqh1Z3ZxcWFmY8+fp+y5vLx8t+55dmTPs2vj6q0PdNS/NNjQCAAAAAAAAAA+s36Qi6u//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEFQJIf6q2o5PihPptFMciRJq5haad4aa7C74I/jDgAAAAD2XrteHyv+0y8sF9Vn/hPV5/4jeTe3spj5LKabuVytvgvof+pv/LXX6S7d79wsl40Df+0fO4qjGjH97x5GzzxdtXhhpcfFfDPfyalM5XIWMp/vZjaLmctUvlGVZlNksv72YnLpfjuDWDfGe2HN1uX1sb08VC7ja1aRtHMt81Vsp3OlNQi9Ubd7aWi237eSdTPeK7NTvFHbZo6u1utyj35Wrw+GyWrPD69kZLrOfZmNZ4fzvjH3OzxO1s80k8bKd1DHV2cpN9fP9Fg5P1qvy1z/eG9zvsOv0tZmovfTcmtw9J3YOufJF//2p8vXG7duXL92+9TBOYwe0/pjojOUiRe3lYlumYneE2TiyJPEv3tadTb6V9GdXS1fqfoey3y+lbdzNXM5l+nM5Hym85WcTSdnh/L6wtZ5rc61xs7OtZNfqAvlPeknQ/emfTOxWUWZ12eH8jp8pZus6oZfWc3Sc9vIUtHK6Cz9fWQozc/VhXKOHw7dccZvfSZmhjLx/NaZ+OW/l5Pc7t66sXB99p1tzvdqvS5P2w/WXpt/tSs7tHP17pbHy3P1O4XytjF8dJR1zw/q1uWrVf/i0qwHW1PXSnU+9+s2O1PL2vJMLUc6cW/USP26F0fO0qnqXhqqW/MuJ2+nm6sH54ADYDNHXzvaaj9o/6X9UftH7evtS0e+PnF+4vOtHP5z8w+HftP4deOrxWv5KN/PsXFHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT4Pb771/Y7bbnVt4ZGHw/JdtNd6VQhq7POC9kVWDVPRfae39fj3NhYmtjqjfJtmie2scMbeTHIjUpbkPc01kRNWllVfaSWMlniQ3DsgD7oC9cGbx5jtnbr/3/pfmb86+NffW3K2z58+9ca7z5Zm7Z67Nd+em+3/HHSWwF1bfBow7EgAAAAAAAAAAAGC79uO/N4yYtuiNYV8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/00X38zhXorMTJ+eLreX7ne65TIor7ZsJmkkKb6XFJ8mF9JfMjk0XLHZPK8/+OQXr374cWd1rOagfWNdv9/9c3l5h3vRq5dMJTlUrx9tYlvjXRkar7fDwPqKlT0sE3ZykDgYt/8GAAD//2ySA+I=") open(0x0, 0x14927e, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() r4 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 9m19.402912579s ago: executing program 4 (id=328): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) 9m19.32877363s ago: executing program 1 (id=329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r3, &(0x7f0000000cc0), 0xfd45) 9m17.007159356s ago: executing program 1 (id=332): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x270bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m12.364472308s ago: executing program 1 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0xff) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) wait4(r2, 0x0, 0x8, 0x0) 9m11.328028154s ago: executing program 4 (id=335): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x5, 0x1, 0x0, 0x6, 0x6, 0x80}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$kcm(0x11, 0x3, 0x0) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r6, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 9m11.162260137s ago: executing program 33 (id=335): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x5, 0x1, 0x0, 0x6, 0x6, 0x80}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$kcm(0x11, 0x3, 0x0) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r6, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 9m11.140623728s ago: executing program 1 (id=337): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,nobarrier,nodecompose,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=cp861,umask=0000000000006745,\x00'], 0x3, 0x6b0, &(0x7f0000000980)="$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") open(0x0, 0x14927e, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() r4 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 9m9.786532059s ago: executing program 1 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) dup3(r2, r1, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m7.873669538s ago: executing program 1 (id=345): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 9m7.76754755s ago: executing program 34 (id=345): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 8m17.62551826s ago: executing program 5 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000400), &(0x7f0000000380)=@tcp6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 8m13.268072648s ago: executing program 5 (id=470): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) getuid() ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x7, "5b31316b63bca2f54fa8668fbd3a6d95fe539d4691f6d6895189ea1bdd020c95", 0x5, 0x3ff, 0x4c5c, 0x6, 0x6e, 0x870e, 0x9, 0xe3db, [0x4, 0xffffffff, 0x28c4, 0xd]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$dsp(r0, 0x0, 0x0) 8m12.299479953s ago: executing program 5 (id=474): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x6505c0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd, 0x100010, r1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) io_setup(0xa00, &(0x7f0000000300)=0x0) io_destroy(r5) write(0xffffffffffffffff, 0x0, 0x0) 8m11.383825867s ago: executing program 5 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r0, 0x0, 0x8}, 0x18) setuid(0xee00) 8m11.092646832s ago: executing program 5 (id=478): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 9.309675584s ago: executing program 6 (id=1887): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x40000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)}, {0x0}, {0x0}, {&(0x7f0000000500)="9084377cac847f4f1775dce0fd05338643a4c865e7d15fe5d83fd90b71b60f39309e783712b408cdbcbad798fd4541baead4715bc5e56e854a5fd6b6d849d996230af7060a12eb7fdfecc5a2baae513ee9a3ba9084daf97f95c1f482bd", 0x5d}, {&(0x7f00000001c0)}], 0x5, &(0x7f0000001f40)=[{0x80, 0x3a, 0x9c5e, "e50e09c5c0c9b9dea1f54f32ef45dc7442dfaeae9b36683aa5d7808e001d094e312ce39546b0cf8698ebad3a20b5002a9c695235dc6510bce9edf10ef92c1763a6cf675847bea6b77d9c6c00e02e8a1093a3888e47259cf2e60b5f9e0912650a8f98c3a10d282e34e908173ed3430d"}, {0x50, 0x3a, 0x9, "7749ae67645b64e2ebc61d506568b2d3c6dda1b999b7233a08eefec40b57aa59633693e8846d586e44afff868beec6c72730638a69df20351e114c633cca"}, {0x10, 0x114, 0x7}, {0x10, 0x1, 0x7a5b}, {0x88, 0x10d, 0x5a4, "243d7e136d733d7b2b78ec32e3c2e6344367267cde225580de54a41f04be61ab42029e2a1525b15bc3be939ec0cb50b201ace2425070e6d407318fc6fbaf2d76b5fb9b00c26a48477a433a0d4b45190aa33cdc2b45f7f8e9ef7b118da18cff7e4d3d73d16a7a86e19ef764848d8ac0621299a16fb99540"}, {0x58, 0x108, 0xb7d9, "21dc152aaae77fc0cef360166cd81f848132718d36bf079716566e86b84f4dea2691ccb4056654f0b944462cecb2add43e786f2fafa02017d0eec11bc01df1146ba0cab20bd9"}, {0x108, 0x1, 0x8, "f271cd0705c2ed0fd1bcddd6c5b8bbdb9a18b8cb5716ec7e3a74c26551ca561d5de5813b4d494ab0851b95ac1703e62d84288f6dfadae72b043ce55f228a39fb3705008afe5267daccd43a5a87c9cb07d6107703b7417ac23cda214589c432df5c43e4c517f4aed2904435403d658fe7c2bbd5ee0c2f503abaf317212c297c0165d5ba084804d2c90589d8a67e79f174e0ac3161679ec9b67d4dff2504b11ec8ca1bf563bbee9f225b9da046bf19343a75c47f4f19bebb899d2107d5e0ca67f424fa04d8d2ee1117dbc6f9753bb7492e6531a70bed0672810629870ee812351eade48be184f7d501be693d287d0b7de3c0b6"}], 0x2d8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001c80)}}], 0x2, 0x50) 8.523391157s ago: executing program 2 (id=1890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.357663289s ago: executing program 6 (id=1891): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) write$UHID_INPUT(r5, &(0x7f0000002c40)={0x8, {"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", 0xffffffc2}}, 0x1006) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x2, 0x0, &(0x7f0000000540)="c059"}) 8.32973031s ago: executing program 2 (id=1892): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x80880) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010) 8.035287014s ago: executing program 2 (id=1893): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r7) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.916043496s ago: executing program 2 (id=1894): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r5 = dup(r4) ioctl$GIO_UNISCRNMAP(r5, 0x43403d0e, &(0x7f0000000080)=""/96) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd70000000000005000000180001801400020073797a5f74756e00000000000000000014000380100003800c000180080001000000ac"], 0x40}}, 0x4000) 6.112892174s ago: executing program 8 (id=1897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000500)="8401fb1b5b8bba6eac79c80c1d70a3bb0a9796d72821c45875f9608fcc1c930304789aeec1a09c606c31a57c4d2ba2a7b9ae3e9b0ae40d74fec00258db7d4f74bdd8ec612deb4a98664f6ab9a5aecd53113024c585cd50963dcc795f78042aa9ac858a68e1bdd3ef007a6a74adb4cce520aa55afcaff24b45c54194dc824fc7592f52f5680a864c65a0c83cf8885f542f36beb662d3abf15686dbb0b4db4d29199992311e7c236e933a32fafa99a9d8563be38966711b7d2"}) 6.111732464s ago: executing program 7 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.953513597s ago: executing program 8 (id=1899): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x8c4}, 0x0) 5.864914908s ago: executing program 7 (id=1900): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 4.883990274s ago: executing program 8 (id=1901): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x40000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)}, {0x0}, {0x0}, {&(0x7f0000000500)="9084377cac847f4f1775dce0fd05338643a4c865e7d15fe5d83fd90b71b60f39309e783712b408cdbcbad798fd4541baead4715bc5e56e854a5fd6b6d849d996230af7060a12eb7fdfecc5a2baae513ee9a3ba9084daf97f95c1f482bd", 0x5d}, {&(0x7f00000001c0)}], 0x5, &(0x7f0000001f40)=[{0x80, 0x3a, 0x9c5e, "e50e09c5c0c9b9dea1f54f32ef45dc7442dfaeae9b36683aa5d7808e001d094e312ce39546b0cf8698ebad3a20b5002a9c695235dc6510bce9edf10ef92c1763a6cf675847bea6b77d9c6c00e02e8a1093a3888e47259cf2e60b5f9e0912650a8f98c3a10d282e34e908173ed3430d"}, {0x50, 0x3a, 0x9, "7749ae67645b64e2ebc61d506568b2d3c6dda1b999b7233a08eefec40b57aa59633693e8846d586e44afff868beec6c72730638a69df20351e114c633cca"}, {0x10, 0x114, 0x7}, {0x10, 0x1, 0x7a5b}, {0x88, 0x10d, 0x5a4, "243d7e136d733d7b2b78ec32e3c2e6344367267cde225580de54a41f04be61ab42029e2a1525b15bc3be939ec0cb50b201ace2425070e6d407318fc6fbaf2d76b5fb9b00c26a48477a433a0d4b45190aa33cdc2b45f7f8e9ef7b118da18cff7e4d3d73d16a7a86e19ef764848d8ac0621299a16fb99540"}, {0x58, 0x108, 0xb7d9, "21dc152aaae77fc0cef360166cd81f848132718d36bf079716566e86b84f4dea2691ccb4056654f0b944462cecb2add43e786f2fafa02017d0eec11bc01df1146ba0cab20bd9"}, {0x108, 0x1, 0x8, "f271cd0705c2ed0fd1bcddd6c5b8bbdb9a18b8cb5716ec7e3a74c26551ca561d5de5813b4d494ab0851b95ac1703e62d84288f6dfadae72b043ce55f228a39fb3705008afe5267daccd43a5a87c9cb07d6107703b7417ac23cda214589c432df5c43e4c517f4aed2904435403d658fe7c2bbd5ee0c2f503abaf317212c297c0165d5ba084804d2c90589d8a67e79f174e0ac3161679ec9b67d4dff2504b11ec8ca1bf563bbee9f225b9da046bf19343a75c47f4f19bebb899d2107d5e0ca67f424fa04d8d2ee1117dbc6f9753bb7492e6531a70bed0672810629870ee812351eade48be184f7d501be693d287d0b7de3c0b6"}], 0x2d8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001c80)}}], 0x2, 0x50) 4.775511335s ago: executing program 8 (id=1902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.696034167s ago: executing program 7 (id=1903): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x80880) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010) 4.578913078s ago: executing program 8 (id=1904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r7) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.423105081s ago: executing program 7 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffffff7f}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) close(r3) prlimit64(r0, 0x9, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.388046301s ago: executing program 8 (id=1906): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getpid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 4.073265657s ago: executing program 6 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(r7, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) 3.098437711s ago: executing program 7 (id=1908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb40000000000a0000f00000059078ac141400e0000001070404158441726e17db5d76ce1146010039326447d66366cfb6b815418ca4fbb3545c1811c93b44adcd621cb93d78a02d1f94e4b57ef648ab092860b8681210", @ANYRES32=0x41424344, @ANYBLOB="5c000000907809"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_handle={0x77682a85, 0x80}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2000000000003f}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 3.035423892s ago: executing program 6 (id=1909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, 0x0, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.480615627s ago: executing program 2 (id=1910): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x97b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa0031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 1.449822447s ago: executing program 7 (id=1911): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x8c4}, 0x0) 1.449309178s ago: executing program 6 (id=1912): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x40000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)}, {0x0}, {0x0}, {&(0x7f0000000500)="9084377cac847f4f1775dce0fd05338643a4c865e7d15fe5d83fd90b71b60f39309e783712b408cdbcbad798fd4541baead4715bc5e56e854a5fd6b6d849d996230af7060a12eb7fdfecc5a2baae513ee9a3ba9084daf97f95c1f482bd84", 0x5e}, {&(0x7f00000001c0)}], 0x5, &(0x7f0000001f40)=[{0x80, 0x3a, 0x9c5e, "e50e09c5c0c9b9dea1f54f32ef45dc7442dfaeae9b36683aa5d7808e001d094e312ce39546b0cf8698ebad3a20b5002a9c695235dc6510bce9edf10ef92c1763a6cf675847bea6b77d9c6c00e02e8a1093a3888e47259cf2e60b5f9e0912650a8f98c3a10d282e34e908173ed3430d"}, {0x50, 0x3a, 0x9, "7749ae67645b64e2ebc61d506568b2d3c6dda1b999b7233a08eefec40b57aa59633693e8846d586e44afff868beec6c72730638a69df20351e114c633cca"}, {0x10, 0x114, 0x7}, {0x10, 0x1, 0x7a5b}, {0x88, 0x10d, 0x5a4, "243d7e136d733d7b2b78ec32e3c2e6344367267cde225580de54a41f04be61ab42029e2a1525b15bc3be939ec0cb50b201ace2425070e6d407318fc6fbaf2d76b5fb9b00c26a48477a433a0d4b45190aa33cdc2b45f7f8e9ef7b118da18cff7e4d3d73d16a7a86e19ef764848d8ac0621299a16fb99540"}, {0x58, 0x108, 0xb7d9, "21dc152aaae77fc0cef360166cd81f848132718d36bf079716566e86b84f4dea2691ccb4056654f0b944462cecb2add43e786f2fafa02017d0eec11bc01df1146ba0cab20bd9"}, {0x108, 0x1, 0x8, "f271cd0705c2ed0fd1bcddd6c5b8bbdb9a18b8cb5716ec7e3a74c26551ca561d5de5813b4d494ab0851b95ac1703e62d84288f6dfadae72b043ce55f228a39fb3705008afe5267daccd43a5a87c9cb07d6107703b7417ac23cda214589c432df5c43e4c517f4aed2904435403d658fe7c2bbd5ee0c2f503abaf317212c297c0165d5ba084804d2c90589d8a67e79f174e0ac3161679ec9b67d4dff2504b11ec8ca1bf563bbee9f225b9da046bf19343a75c47f4f19bebb899d2107d5e0ca67f424fa04d8d2ee1117dbc6f9753bb7492e6531a70bed0672810629870ee812351eade48be184f7d501be693d287d0b7de3c0b6"}], 0x2d8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001c80)}}], 0x2, 0x50) 25.06489ms ago: executing program 3 (id=181): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 0s ago: executing program 6 (id=1913): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_pidfd_open(0x0, 0x0) kernel console output (not intermixed with test programs): :3f) already exists on: batadv_slave_1 [ 505.720843][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.723405][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.746347][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.748986][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.758308][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.772139][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.785659][T10717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.787999][T10717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.790377][T10717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.813044][T10717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.937664][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.940366][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.806304][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.808681][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.823260][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.928501][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.930857][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.954880][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.094887][T11015] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1314'. [ 507.213661][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1315'. [ 507.577071][T11034] binder: 11031:11034 ioctl 4018620d 0 returned -22 [ 507.580139][T11034] binder: tried to use weak ref as strong ref [ 507.581700][T11034] binder: 11031:11034 Acquire 1 refcount change on invalid ref 0 ret -22 [ 507.600454][T11034] binder: 11031:11034 got transaction to invalid handle, 1 [ 507.602414][T11034] binder: 11034:11031 cannot find target node [ 507.604082][T11034] binder: 11031:11034 transaction call to 0:0 failed 323/29201/-22, size 0-0 line 3054 [ 507.630783][T11034] binder: 11031:11034 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 507.634356][T11034] binder: 11034 RLIMIT_NICE not set [ 507.646998][T11034] binder: 11031:11034 ioctl c0306201 20001440 returned -11 [ 507.655755][T11034] binder: 11031:11034 Release 1 refcount change on invalid ref 1 ret -22 [ 507.661112][T11034] binder: 11031:11034 BC_INCREFS_DONE u0000000000000000 no match [ 507.663224][T11034] binder: 11031:11034 got reply transaction with no transaction stack [ 507.675462][T11034] binder: 11031:11034 transaction reply to 0:0 failed 324/29201/-71, size 112-24 line 2955 [ 507.678729][ T5243] binder: undelivered TRANSACTION_ERROR: 29201 [ 509.602411][T11075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1325'. [ 510.005270][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.009256][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.260057][ T7847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.487920][ T7847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.621271][ T7847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.798523][ T7847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.881629][T11155] binder: 11151:11155 ioctl 4018620d 0 returned -22 [ 512.889679][T11155] binder: tried to use weak ref as strong ref [ 512.891468][T11155] binder: 11151:11155 Acquire 1 refcount change on invalid ref 0 ret -22 [ 512.987531][T11155] binder: 11151:11155 got transaction to invalid handle, 1 [ 512.989845][T11155] binder: 11155:11151 cannot find target node [ 512.992221][T11155] binder: 11151:11155 transaction call to 0:0 failed 327/29201/-22, size 0-0 line 3054 [ 512.998530][T11155] binder: 11151:11155 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 513.004195][T11155] binder: 11155 RLIMIT_NICE not set [ 513.010367][T11155] binder: 11151:11155 ioctl c0306201 20001440 returned -11 [ 513.012883][T11155] binder: 11151:11155 Release 1 refcount change on invalid ref 1 ret -22 [ 513.032870][T11155] binder: 11151:11155 BC_INCREFS_DONE u0000000000000000 no match [ 513.045444][T11155] binder: 11151:11155 got reply transaction with no transaction stack [ 513.050379][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.056084][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.056367][T11155] binder: 11151:11155 transaction reply to 0:0 failed 328/29201/-71, size 112-24 line 2955 [ 513.060122][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.070757][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.073330][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 513.080938][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.083829][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 514.247318][T11161] lo speed is unknown, defaulting to 1000 [ 514.415863][T11179] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1337'. [ 515.177413][ T4305] Bluetooth: hci0: command 0x0409 tx timeout [ 515.908410][T11161] chnl_net:caif_netlink_parms(): no params data found [ 516.267904][T11216] binder: 11215:11216 ioctl c0306201 0 returned -14 [ 516.274186][T11216] binder: 11215:11216 got transaction to invalid handle, 1 [ 516.283895][T11216] binder: 11216:11215 cannot find target node [ 516.285921][T11216] binder: 11215:11216 transaction call to 0:0 failed 332/29201/-22, size 0-0 line 3054 [ 516.289022][T11216] binder: 11215:11216 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 516.305765][T11216] binder: 11215:11216 ioctl c0306201 20001440 returned -11 [ 516.308094][T11216] binder: 11215:11216 transaction reply to 0:0 failed 333/29201/-71, size 112-24 line 2955 [ 516.315934][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 516.977943][ T7847] device hsr_slave_0 left promiscuous mode [ 516.977954][T11222] binder: 11222:11221 cannot find target node [ 516.981126][T11222] binder: 11221:11222 transaction async to 0:0 failed 334/29201/-22, size 88-24 line 3054 [ 517.095996][ T7847] device hsr_slave_1 left promiscuous mode [ 517.165400][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.167459][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.171337][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.184247][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.199673][ T7847] device bridge_slave_1 left promiscuous mode [ 517.204513][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.236277][ T7847] device bridge_slave_0 left promiscuous mode [ 517.238022][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.245605][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 517.405812][ T7847] device veth1_macvtap left promiscuous mode [ 517.407583][ T7847] device veth0_macvtap left promiscuous mode [ 517.409203][ T7847] device veth1_vlan left promiscuous mode [ 517.410787][ T7847] device veth0_vlan left promiscuous mode [ 519.325506][ T4305] Bluetooth: hci0: command 0x040f tx timeout [ 519.523204][ T7847] team0 (unregistering): Port device team_slave_1 removed [ 519.709344][ T7847] team0 (unregistering): Port device team_slave_0 removed [ 519.762688][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.765172][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.886899][ T7847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.097631][ T7847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.415345][ T4305] Bluetooth: hci0: command 0x0419 tx timeout [ 522.754410][ T7847] bond0 (unregistering): Released all slaves [ 523.008509][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.010445][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.014687][T11161] device bridge_slave_0 entered promiscuous mode [ 523.025512][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.027494][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.030128][T11161] device bridge_slave_1 entered promiscuous mode [ 523.116767][T11244] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1348'. [ 523.146341][T11266] binder: 11265:11266 ioctl c0306201 0 returned -14 [ 523.152470][T11266] binder_user_error: 8 callbacks suppressed [ 523.152479][T11266] binder: 11265:11266 got transaction to invalid handle, 1 [ 523.175902][T11266] binder_debug: 4 callbacks suppressed [ 523.175914][T11266] binder: 11266:11265 cannot find target node [ 523.193395][T11266] binder: 11265:11266 transaction call to 0:0 failed 343/29201/-22, size 0-0 line 3054 [ 523.202880][T11266] binder: 11265:11266 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 523.262385][T11161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.265089][T11266] binder: 11266 RLIMIT_NICE not set [ 523.275107][T11266] binder: 11265:11266 ioctl c0306201 20001440 returned -11 [ 523.284245][T11270] binder: 11265:11270 Release 1 refcount change on invalid ref 1 ret -22 [ 523.290934][T11161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.307141][T11270] binder: 11265:11270 BC_INCREFS_DONE node 342 has no pending increfs request [ 523.309516][T11270] binder: 11265:11270 got reply transaction with no transaction stack [ 523.311629][T11270] binder: 11265:11270 transaction reply to 0:0 failed 344/29201/-71, size 112-24 line 2955 [ 523.489789][ T4346] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.554133][T11161] team0: Port device team_slave_0 added [ 523.589000][T11161] team0: Port device team_slave_1 added [ 523.611462][T11264] binder: 11263:11264 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 523.614589][T11264] binder: 11263:11264 got transaction to invalid handle, 1 [ 523.616664][T11264] binder: 11264:11263 cannot find target node [ 523.618276][T11264] binder: 11263:11264 transaction async to 0:0 failed 345/29201/-22, size 88-24 line 3054 [ 523.622083][ T9661] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.724935][T11276] binder: 11275:11276 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 523.746975][T11161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.749100][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.789449][T11161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.799142][T11161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.801007][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.039846][T11161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.067185][T11161] device hsr_slave_0 entered promiscuous mode [ 525.085847][T11161] device hsr_slave_1 entered promiscuous mode [ 525.145436][T11161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.147460][T11161] Cannot create hsr debugfs directory [ 526.503913][T11325] binder: 11324:11325 ioctl c0306201 0 returned -14 [ 526.508645][T11325] binder: 11324:11325 got transaction to invalid handle, 1 [ 526.511255][T11325] binder: 11325:11324 cannot find target node [ 526.517661][T11325] binder: 11324:11325 transaction call to 0:0 failed 350/29201/-22, size 0-0 line 3054 [ 526.522983][T11325] binder: 11324:11325 ioctl c0306201 20001440 returned -11 [ 526.535712][T11325] binder: 11324:11325 transaction reply to 0:0 failed 351/29201/-71, size 112-24 line 2955 [ 526.685372][T11322] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1367'. [ 529.569517][T11366] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 529.571755][T11366] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 529.573806][T11366] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1372'. [ 529.726454][T11161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.797157][T11161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.827038][T11161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.208982][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'. [ 531.330575][T11161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.438563][T11386] binder_user_error: 8 callbacks suppressed [ 531.438575][T11386] binder: 11385:11386 got transaction to invalid handle, 1 [ 531.454484][T11386] binder_debug: 4 callbacks suppressed [ 531.454497][T11386] binder: 11386:11385 cannot find target node [ 531.461024][T11386] binder: 11385:11386 transaction call to 0:0 failed 357/29201/-22, size 0-0 line 3054 [ 531.602815][T11396] binder: 11385:11396 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 531.618235][T11396] binder: 11396 RLIMIT_NICE not set [ 531.733293][T11161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.750900][T11386] binder: 11385:11386 Release 1 refcount change on invalid ref 1 ret -22 [ 531.756920][T11386] binder: 11385:11386 BC_INCREFS_DONE node 356 has no pending increfs request [ 531.759462][T11386] binder: 11385:11386 got reply transaction with no transaction stack [ 531.761868][T11386] binder: 11385:11386 transaction reply to 0:0 failed 358/29201/-71, size 112-24 line 2955 [ 531.765173][ T4480] binder: undelivered TRANSACTION_ERROR: 29201 [ 531.768847][T11161] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.771509][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.778186][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.791170][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.802710][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.811452][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.813431][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.817279][T11399] binder: 11394:11399 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 531.821123][T11399] binder: 11394:11399 got transaction to invalid handle, 1 [ 531.823178][T11399] binder: 11399:11394 cannot find target node [ 531.824834][T11399] binder: 11394:11399 transaction async to 0:0 failed 359/29201/-22, size 88-24 line 3054 [ 531.834193][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.849735][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.855980][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.860149][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.862150][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.879393][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.887537][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.893650][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.904505][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.910763][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.049304][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.052892][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.070194][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.078949][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.088008][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.175484][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.386283][ T5571] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.805602][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.004348][T11418] binder: 11416:11418 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 534.177728][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.180231][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.200601][T11161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.243873][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.247044][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.316669][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.502270][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.850217][T11161] device veth0_vlan entered promiscuous mode [ 535.156102][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.184152][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.199830][T11161] device veth1_vlan entered promiscuous mode [ 535.226572][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 535.380260][T11467] binder: 11466:11467 got transaction to invalid handle, 1 [ 535.382364][T11467] binder: 11467:11466 cannot find target node [ 535.395065][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.397981][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.428825][T11161] device veth0_macvtap entered promiscuous mode [ 535.450496][T11467] binder: 11466:11467 transaction call to 0:0 failed 364/29201/-22, size 0-0 line 3054 [ 535.468846][T11467] binder: 11466:11467 transaction reply to 0:0 failed 365/29201/-71, size 112-24 line 2955 [ 535.472832][T11161] device veth1_macvtap entered promiscuous mode [ 536.365468][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.368370][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.371050][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.373846][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.419294][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.422106][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.424666][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.476102][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.478799][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.481622][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.484188][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.505441][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.508081][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.525333][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.625321][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.635407][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.636734][T11161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.637885][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.638380][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 536.638814][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.639275][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.662602][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.673024][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.689853][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.702233][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.713430][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.729128][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.745566][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.765786][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.769138][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.772167][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.775766][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.778717][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.781558][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.784447][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.795074][T11161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.813999][T11161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.907072][T11161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.983061][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.994019][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.293929][T11161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.296466][T11161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.298802][T11161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.301111][T11161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.631043][T10132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.633409][T10132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.650369][T10132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.655601][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.687011][T10132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.711977][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.834079][T11519] netlink: 'syz.2.1401': attribute type 2 has an invalid length. [ 538.836490][T11519] netlink: 'syz.2.1401': attribute type 1 has an invalid length. [ 538.838663][T11519] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1401'. [ 541.000878][T11550] binder_user_error: 7 callbacks suppressed [ 541.000891][T11550] binder: 11549:11550 got transaction to invalid handle, 1 [ 541.004493][T11550] binder_debug: 4 callbacks suppressed [ 541.004502][T11550] binder: 11550:11549 cannot find target node [ 541.027357][T11550] binder: 11549:11550 transaction call to 0:0 failed 370/29201/-22, size 0-0 line 3054 [ 541.030568][T11550] binder: 11549:11550 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 541.034059][T11550] binder: 11550 RLIMIT_NICE not set [ 541.055313][T11550] binder: 11549:11550 ioctl c0306201 20001440 returned -11 [ 541.057587][T11550] binder: 11549:11550 Release 1 refcount change on invalid ref 1 ret -22 [ 541.059830][T11550] binder: 11549:11550 BC_INCREFS_DONE node 369 has no pending increfs request [ 541.062118][T11550] binder: 11549:11550 got reply transaction with no transaction stack [ 541.064301][T11550] binder: 11549:11550 transaction reply to 0:0 failed 371/29201/-71, size 112-24 line 2955 [ 541.143401][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 543.372669][ T483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.497154][ T483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.607119][ T483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.727420][ T483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.121176][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.123609][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.833174][ T4305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 545.844135][ T4305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 545.860652][ T4305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 545.863536][ T4305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.867239][ T4305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 545.869534][ T4305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.036148][T11641] lo speed is unknown, defaulting to 1000 [ 546.077642][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.080217][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.119444][T11651] binder: 11648:11651 got transaction to invalid handle, 1 [ 546.121382][T11651] binder: 11651:11648 cannot find target node [ 546.122960][T11651] binder: 11648:11651 transaction call to 0:0 failed 375/29201/-22, size 0-0 line 3054 [ 546.141927][T11651] binder: 11648:11651 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 546.151478][T11651] binder: 11651 RLIMIT_NICE not set [ 546.152876][T11651] binder: 11648:11651 ioctl c0306201 20001440 returned -11 [ 546.163980][T11651] binder: 11648:11651 Release 1 refcount change on invalid ref 1 ret -22 [ 546.172957][T11651] binder: 11648:11651 BC_INCREFS_DONE node 374 has no pending increfs request [ 546.175760][T11651] binder: 11648:11651 got reply transaction with no transaction stack [ 546.177939][T11651] binder: 11648:11651 transaction reply to 0:0 failed 376/29201/-71, size 112-24 line 2955 [ 546.202617][ T4609] binder: undelivered TRANSACTION_ERROR: 29201 [ 547.315464][T11641] chnl_net:caif_netlink_parms(): no params data found [ 547.559475][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.561427][T11641] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.564092][T11641] device bridge_slave_0 entered promiscuous mode [ 547.582698][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.592284][T11641] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.602927][T11641] device bridge_slave_1 entered promiscuous mode [ 547.621101][ T483] device hsr_slave_0 left promiscuous mode [ 547.752005][ T483] device hsr_slave_1 left promiscuous mode [ 547.913486][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 548.318203][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.335028][ T483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.352398][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.362794][ T483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.389561][ T483] device bridge_slave_1 left promiscuous mode [ 548.394632][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.446904][ T483] device bridge_slave_0 left promiscuous mode [ 548.448641][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.483568][T11715] binder: 11714:11715 got transaction to invalid handle, 1 [ 548.486358][T11715] binder: 11715:11714 cannot find target node [ 548.488314][T11715] binder: 11714:11715 transaction call to 0:0 failed 380/29201/-22, size 0-0 line 3054 [ 548.491918][T11715] binder: 11714:11715 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 548.496044][T11715] binder: 11715 RLIMIT_NICE not set [ 548.497528][T11715] binder: 11714:11715 ioctl c0306201 20001440 returned -11 [ 548.499741][T11715] binder: 11714:11715 Release 1 refcount change on invalid ref 1 ret -22 [ 548.502192][T11715] binder: 11714:11715 transaction reply to 0:0 failed 381/29201/-71, size 112-24 line 2955 [ 548.506401][ T4480] binder: undelivered TRANSACTION_ERROR: 29201 [ 548.682829][T11719] capability: warning: `syz.7.1434' uses deprecated v2 capabilities in a way that may be insecure [ 548.754443][ T483] device veth1_macvtap left promiscuous mode [ 548.756285][ T483] device veth0_macvtap left promiscuous mode [ 548.757966][ T483] device veth1_vlan left promiscuous mode [ 548.759535][ T483] device veth0_vlan left promiscuous mode [ 550.295593][ T4305] Bluetooth: hci0: command 0x041b tx timeout [ 552.260141][ T483] team0 (unregistering): Port device team_slave_1 removed [ 552.365335][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 552.438283][ T483] team0 (unregistering): Port device team_slave_0 removed [ 552.616959][ T483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.836950][ T483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.445399][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 555.233693][ T483] bond0 (unregistering): Released all slaves [ 555.467951][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1436'. [ 555.532296][T11641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.546772][T11641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.639447][T11753] binder_user_error: 2 callbacks suppressed [ 555.639459][T11753] binder: 11752:11753 got transaction to invalid handle, 1 [ 555.655033][T11753] binder: 11753:11752 cannot find target node [ 555.664532][T11753] binder: 11752:11753 transaction call to 0:0 failed 385/29201/-22, size 0-0 line 3054 [ 555.670207][T11753] binder: 11752:11753 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 555.673390][T11641] team0: Port device team_slave_0 added [ 555.673771][T11753] binder: 11753 RLIMIT_NICE not set [ 555.673790][T11753] binder: 11752:11753 ioctl c0306201 20001440 returned -11 [ 555.697157][T11753] binder: 11752:11753 Release 1 refcount change on invalid ref 1 ret -22 [ 555.699516][T11753] binder: 11752:11753 BC_INCREFS_DONE node 384 has no pending increfs request [ 555.702110][T11753] binder: 11752:11753 got reply transaction with no transaction stack [ 555.704271][T11753] binder: 11752:11753 transaction reply to 0:0 failed 386/29201/-71, size 112-24 line 2955 [ 555.711284][T11641] team0: Port device team_slave_1 added [ 555.714029][ T5571] binder: undelivered TRANSACTION_ERROR: 29201 [ 556.452514][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.454258][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.479715][T11641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.493596][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.540515][T11641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.729545][T11641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.731518][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.173966][T11641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.907832][T11764] raw_sendmsg: syz.6.1449 forgot to set AF_INET. Fix it! [ 558.229242][T11774] binder: 11771:11774 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 558.232389][T11774] binder: 11771:11774 got transaction to invalid handle, 1 [ 558.234356][T11774] binder: 11774:11771 cannot find target node [ 558.236027][T11774] binder: 11771:11774 transaction async to 0:0 failed 387/29201/-22, size 88-24 line 3054 [ 558.239070][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 558.455654][T11641] device hsr_slave_0 entered promiscuous mode [ 558.519319][T11641] device hsr_slave_1 entered promiscuous mode [ 559.245385][T11641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.247425][T11641] Cannot create hsr debugfs directory [ 559.381063][T11804] binder: 11802:11804 tried to acquire reference to desc 0, got 1 instead [ 559.394106][T11804] binder: 11802:11804 ioctl c0306201 0 returned -14 [ 559.396224][T11804] binder: 11802:11804 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 559.399628][T11804] binder: 11802:11804 ioctl c0306201 20001440 returned -11 [ 559.401798][T11804] binder: 11802:11804 transaction reply to 0:0 failed 392/29201/-71, size 112-24 line 2955 [ 560.105947][T11817] binder: 11805:11817 transaction reply to 0:0 failed 393/29201/-71, size 0-0 line 2955 [ 562.127394][T11843] binder_user_error: 6 callbacks suppressed [ 562.127407][T11843] binder: 11842:11843 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 562.132823][T11843] binder: 11842:11843 got transaction to invalid handle, 1 [ 562.134719][T11843] binder: 11843:11842 cannot find target node [ 562.136541][T11843] binder: 11842:11843 transaction async to 0:0 failed 394/29201/-22, size 88-24 line 3054 [ 562.139619][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 562.566258][T11860] binder: 11858:11860 tried to acquire reference to desc 0, got 1 instead [ 562.586423][T11860] binder: 11858:11860 ioctl c0306201 0 returned -14 [ 562.588470][T11860] binder: 11858:11860 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 562.592099][T11860] binder: 11860 RLIMIT_NICE not set [ 562.593521][T11860] binder: 11858:11860 ioctl c0306201 20001440 returned -11 [ 562.617205][T11860] binder: 11858:11860 Release 1 refcount change on invalid ref 1 ret -22 [ 562.619848][T11860] binder: 11858:11860 BC_INCREFS_DONE node 397 has no pending increfs request [ 562.647522][T11860] binder: 11858:11860 got reply transaction with no transaction stack [ 562.649737][T11860] binder: 11858:11860 transaction reply to 0:0 failed 399/29201/-71, size 112-24 line 2955 [ 562.686987][T11865] binder: 11864:11865 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 562.803167][T11641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.905782][T11641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.074479][T11872] binder: 11864:11872 got reply transaction with no transaction stack [ 563.077035][T11872] binder: 11864:11872 transaction reply to 0:0 failed 400/29201/-71, size 0-0 line 2955 [ 564.363225][ T4305] Bluetooth: hci1: Invalid handle: 0xffc9 > 0x0eff [ 564.609397][T11641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 564.846715][T11641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 564.885407][T11891] binder: 11891:11882 cannot find target node [ 564.887151][T11891] binder: 11882:11891 transaction async to 0:0 failed 401/29201/-22, size 88-24 line 3054 [ 564.994241][T11641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.022897][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.027496][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.044072][T11641] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.077453][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.080358][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.083060][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.085014][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.102070][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.118384][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.121541][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.124162][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.126211][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.149824][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.157593][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.308385][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.312649][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.317457][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.503186][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 565.770579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.773828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.790410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.797219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.808505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.817693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.822855][T11641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.971276][T11924] binder: 11923:11924 ioctl c0306201 0 returned -14 [ 565.994018][T11924] binder: 11923:11924 ioctl c0306201 20001440 returned -11 [ 566.057513][T11925] binder: 11923:11925 transaction reply to 0:0 failed 406/29201/-71, size 112-24 line 2955 [ 567.153000][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.155643][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.180215][T11641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.709332][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.711970][T11965] binder_user_error: 9 callbacks suppressed [ 567.711981][T11965] binder: 11960:11965 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 567.716930][T11965] binder: 11960:11965 got transaction to invalid handle, 1 [ 567.718848][T11965] binder: 11965:11960 cannot find target node [ 567.720557][T11965] binder: 11960:11965 transaction async to 0:0 failed 407/29201/-22, size 88-24 line 3054 [ 567.724067][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.732462][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.736651][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.746389][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.756253][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.766279][T11641] device veth0_vlan entered promiscuous mode [ 567.775632][T11641] device veth1_vlan entered promiscuous mode [ 567.799386][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 567.802085][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 567.804742][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.823865][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.835186][T11641] device veth0_macvtap entered promiscuous mode [ 567.856943][T11641] device veth1_macvtap entered promiscuous mode [ 567.904214][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.913644][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.924065][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.974904][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.992869][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.010053][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.028315][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.045196][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.060839][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.082201][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.098202][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.114170][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.138578][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.151679][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.163962][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.179030][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.199410][T11641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.212147][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.215027][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 568.226406][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.243965][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.260742][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.263894][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.283837][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.296354][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.305403][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.308418][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.308550][ T4609] binder: undelivered TRANSACTION_ERROR: 29201 [ 568.311070][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.311087][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.319892][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.322704][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.325561][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.328299][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.330851][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.333565][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.336271][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.342766][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.346936][T11641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.351041][T11641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.353329][T11641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.355871][T11641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.358198][T11641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.383818][T11978] binder: 11977:11978 tried to acquire reference to desc 0, got 1 instead [ 568.392690][T11978] binder: 11977:11978 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 568.398098][T11978] binder: 11978 RLIMIT_NICE not set [ 568.402641][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.405762][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.493182][T11978] binder: 11977:11978 ioctl c0306201 20001440 returned -11 [ 568.515940][T11978] binder: 11977:11978 Release 1 refcount change on invalid ref 1 ret -22 [ 568.518308][T11978] binder: 11977:11978 BC_INCREFS_DONE node 410 has no pending increfs request [ 568.520649][T11978] binder: 11977:11978 got reply transaction with no transaction stack [ 568.522803][T11978] binder: 11977:11978 transaction reply to 0:0 failed 412/29201/-71, size 112-24 line 2955 [ 568.605211][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.607942][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.620428][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.626295][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.632909][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.659550][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 569.923612][T12010] binder: 12007:12010 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 570.098224][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.115995][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.919865][ T5017] block nbd7: Attempted send on invalid socket [ 570.921606][ T5017] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.926031][ T78] block nbd7: Attempted send on invalid socket [ 570.927698][ T78] I/O error, dev nbd7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.930962][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 570.933933][ T78] block nbd7: Attempted send on invalid socket [ 570.936507][ T78] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.939511][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 570.943016][ T78] block nbd7: Attempted send on invalid socket [ 570.944693][ T78] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.950752][ T78] block nbd7: Attempted send on invalid socket [ 570.952439][ T78] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.954920][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 570.958716][ T78] block nbd7: Attempted send on invalid socket [ 570.960393][ T78] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.963003][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 570.966786][ T78] block nbd7: Attempted send on invalid socket [ 570.968465][ T78] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.971064][ T78] block nbd7: Attempted send on invalid socket [ 570.972737][ T78] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.979610][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 570.984527][ T78] block nbd7: Attempted send on invalid socket [ 570.986315][ T78] I/O error, dev nbd7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.989626][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 570.992678][ T5017] block nbd7: Attempted send on invalid socket [ 570.994306][ T5017] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 570.997599][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 571.000280][T12026] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 571.005912][T12026] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 571.212356][T12041] binder: 12037:12041 tried to acquire reference to desc 0, got 1 instead [ 571.225176][T12041] binder: 12037:12041 ioctl c0306201 20001440 returned -11 [ 571.227842][T12041] binder: 12037:12041 transaction reply to 0:0 failed 417/29201/-71, size 112-24 line 2955 [ 571.336259][T12043] netlink: 'syz.8.1505': attribute type 2 has an invalid length. [ 571.338378][T12043] netlink: 'syz.8.1505': attribute type 1 has an invalid length. [ 571.340453][T12043] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1505'. [ 571.961762][T12043] Process accounting resumed [ 572.064314][T12050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.085538][T12050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.175391][T12083] lo speed is unknown, defaulting to 1000 [ 575.658793][T12095] binder_user_error: 5 callbacks suppressed [ 575.658806][T12095] binder: 12093:12095 tried to acquire reference to desc 0, got 1 instead [ 575.767063][T12101] netlink: 'syz.7.1518': attribute type 2 has an invalid length. [ 575.769417][T12101] netlink: 'syz.7.1518': attribute type 1 has an invalid length. [ 575.771503][T12101] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1518'. [ 576.405937][T12095] binder: 12093:12095 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 576.410698][T12095] binder: 12095 RLIMIT_NICE not set [ 576.412064][T12095] binder: 12093:12095 ioctl c0306201 20001440 returned -11 [ 576.414314][T12095] binder: 12093:12095 Release 1 refcount change on invalid ref 1 ret -22 [ 576.423416][T12095] binder: 12093:12095 BC_INCREFS_DONE node 420 has no pending increfs request [ 576.427716][T12095] binder: 12093:12095 got reply transaction with no transaction stack [ 576.430022][T12095] binder: 12093:12095 transaction reply to 0:0 failed 422/29201/-71, size 112-24 line 2955 [ 576.432838][T12101] Process accounting resumed [ 579.400051][ T4610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.497773][ T4610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.609083][ T4610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.757842][ T4610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.840999][T12223] binder: 12222:12223 tried to acquire reference to desc 0, got 1 instead [ 580.856449][T12223] binder: 12222:12223 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 580.859998][T12223] binder: 12223 RLIMIT_NICE not set [ 580.871653][T12223] binder: 12222:12223 ioctl c0306201 20001440 returned -11 [ 580.874079][T12223] binder: 12222:12223 Release 1 refcount change on invalid ref 1 ret -22 [ 580.894314][T12223] binder: 12222:12223 BC_INCREFS_DONE node 425 has no pending increfs request [ 580.904450][T12223] binder: 12222:12223 got reply transaction with no transaction stack [ 580.912273][T12223] binder: 12222:12223 transaction reply to 0:0 failed 427/29201/-71, size 112-24 line 2955 [ 581.135625][T12235] netlink: 'syz.7.1532': attribute type 2 has an invalid length. [ 581.137818][T12235] netlink: 'syz.7.1532': attribute type 1 has an invalid length. [ 581.139916][T12235] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1532'. [ 581.757161][T12232] Process accounting resumed [ 581.833735][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.838616][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 581.845858][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.849861][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.852260][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 581.855050][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.957108][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 584.195564][T12239] lo speed is unknown, defaulting to 1000 [ 584.732332][T12280] binder: 12279:12280 tried to acquire reference to desc 0, got 1 instead [ 584.826718][T12280] binder: 12279:12280 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 584.830198][T12280] binder: 12280 RLIMIT_NICE not set [ 584.831531][T12280] binder: 12279:12280 ioctl c0306201 20001440 returned -11 [ 584.895743][T12280] binder: 12279:12280 Release 1 refcount change on invalid ref 1 ret -22 [ 584.898188][T12280] binder: 12279:12280 transaction reply to 0:0 failed 432/29201/-71, size 112-24 line 2955 [ 585.883965][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.884838][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.055428][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 586.099671][ T4610] device hsr_slave_0 left promiscuous mode [ 586.136114][ T4610] device hsr_slave_1 left promiscuous mode [ 586.298012][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.301292][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.304157][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.313599][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.324051][ T4610] device bridge_slave_1 left promiscuous mode [ 586.333432][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.463534][ T4610] device bridge_slave_0 left promiscuous mode [ 586.465841][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.185931][ T4610] device veth1_macvtap left promiscuous mode [ 587.187686][ T4610] device veth0_macvtap left promiscuous mode [ 587.189510][ T4610] device veth1_vlan left promiscuous mode [ 587.191117][ T4610] device veth0_vlan left promiscuous mode [ 588.126081][ T4305] Bluetooth: hci0: command 0x040f tx timeout [ 589.232044][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 589.408956][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 589.597025][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.796759][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.206238][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 592.244952][ T4610] bond0 (unregistering): Released all slaves [ 592.525418][T12239] chnl_net:caif_netlink_parms(): no params data found [ 592.904897][T12357] binder_user_error: 2 callbacks suppressed [ 592.904909][T12357] binder: 12355:12357 tried to acquire reference to desc 0, got 1 instead [ 592.928872][T12346] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 592.941500][T12357] binder: 12355:12357 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 592.944971][T12357] binder: 12357 RLIMIT_NICE not set [ 592.972684][T12357] binder: 12355:12357 ioctl c0306201 20001440 returned -11 [ 592.974990][T12357] binder: 12355:12357 Release 1 refcount change on invalid ref 1 ret -22 [ 592.977550][T12357] binder: 12355:12357 BC_INCREFS_DONE node 435 has no pending increfs request [ 592.979997][T12357] binder: 12355:12357 got reply transaction with no transaction stack [ 592.985167][T12357] binder: 12355:12357 transaction reply to 0:0 failed 437/29201/-71, size 112-24 line 2955 [ 592.985279][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.006629][T12239] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.011969][T12239] device bridge_slave_0 entered promiscuous mode [ 593.069380][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.071422][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.107459][T12239] device bridge_slave_1 entered promiscuous mode [ 593.193342][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.219525][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.430037][T12239] team0: Port device team_slave_0 added [ 593.448356][T12239] team0: Port device team_slave_1 added [ 594.316162][T12386] binder: 12385:12386 got transaction to invalid handle, 1 [ 594.318188][T12386] binder: 12386:12385 cannot find target node [ 594.319817][T12386] binder: 12385:12386 transaction async to 0:0 failed 440/29201/-22, size 96-24 line 3054 [ 594.339981][ T4349] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.353159][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.355052][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.396067][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.414890][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.434878][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.453941][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.937381][T12239] device hsr_slave_0 entered promiscuous mode [ 597.095723][T12239] device hsr_slave_1 entered promiscuous mode [ 597.165475][T12239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.167738][T12239] Cannot create hsr debugfs directory [ 597.246390][T12416] binder: 12415:12416 tried to acquire reference to desc 0, got 1 instead [ 597.271230][T12416] binder: 12415:12416 ioctl c0306201 0 returned -14 [ 597.279779][T12416] binder: 12415:12416 Release 1 refcount change on invalid ref 1 ret -22 [ 597.289428][T12416] binder: 12415:12416 BC_INCREFS_DONE node 443 has no pending increfs request [ 597.305373][T12416] binder: 12415:12416 transaction reply to 0:0 failed 446/29201/-71, size 112-24 line 2955 [ 597.320361][ T4389] binder: release 12415:12416 transaction 445 out, still active [ 597.322571][ T4389] binder: undelivered TRANSACTION_COMPLETE [ 597.385406][ T4476] binder: send failed reply for transaction 445, target dead [ 598.716945][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.719431][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.736412][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.738925][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.331381][T12462] binder_user_error: 1 callbacks suppressed [ 599.331395][T12462] binder: tried to use weak ref as strong ref [ 599.334760][T12462] binder: 12460:12462 Acquire 1 refcount change on invalid ref 0 ret -22 [ 599.354312][T12462] binder: 12460:12462 got transaction to invalid handle, 1 [ 599.359788][T12462] binder: 12462:12460 cannot find target node [ 599.363697][T12462] binder: 12460:12462 transaction async to 0:0 failed 449/29201/-22, size 96-24 line 3054 [ 599.370000][ T4476] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.553738][T12471] binder: 12470:12471 tried to acquire reference to desc 0, got 1 instead [ 599.561791][T12471] binder: 12470:12471 ioctl c0306201 0 returned -14 [ 599.563986][T12471] binder: 12470:12471 Release 1 refcount change on invalid ref 1 ret -22 [ 599.573931][T12471] binder: 12470:12471 BC_INCREFS_DONE node 452 has no pending increfs request [ 599.577430][T12471] binder: 12470:12471 got reply transaction with no transaction stack [ 599.579581][T12471] binder: 12470:12471 transaction reply to 0:0 failed 455/29201/-71, size 112-24 line 2955 [ 599.593048][ T4476] binder: release 12470:12471 transaction 454 out, still active [ 599.594982][ T4476] binder: undelivered TRANSACTION_COMPLETE [ 599.628285][ T4476] binder: send failed reply for transaction 454, target dead [ 599.677656][T12239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 599.787676][T12239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 599.927996][ C0] Unknown status report in ack skb [ 599.930194][T12239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 599.967918][T12239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.971816][T12485] binder: 12477:12485 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 599.975165][T12485] binder: 12477:12485 got transaction to invalid handle, 1 [ 599.977411][T12485] binder: 12485:12477 cannot find target node [ 599.979081][T12485] binder: 12477:12485 transaction async to 0:0 failed 456/29201/-22, size 88-24 line 3054 [ 600.102256][T12239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.120255][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.123117][ T8214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.246725][T12239] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.997278][T12239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.000221][T12239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.114220][ T4609] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.118534][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.121564][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.126140][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.128009][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.141508][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.170554][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.195430][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.197386][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.204571][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.219077][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.221511][T12508] binder: 12507:12508 ioctl 4018620d 0 returned -22 [ 601.227288][T12508] binder: tried to use weak ref as strong ref [ 601.229943][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.263719][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.272093][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.276747][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.279639][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.282320][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.296113][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.298846][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.301564][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.304864][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.308262][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.467105][T12520] binder: 12518:12520 ioctl c0306201 0 returned -14 [ 601.772100][T12239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.779929][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.783272][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.870338][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.873268][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.936784][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.939434][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.942322][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.945046][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.949729][T12239] device veth0_vlan entered promiscuous mode [ 601.966467][T12239] device veth1_vlan entered promiscuous mode [ 602.010649][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.013325][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.016108][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.026318][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.029251][T12239] device veth0_macvtap entered promiscuous mode [ 602.037754][T12239] device veth1_macvtap entered promiscuous mode [ 602.058717][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.068950][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.076939][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.086425][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.095633][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.104888][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.117491][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.120430][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.133471][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.143502][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.163824][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.166860][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.170123][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.172977][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.195408][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.205694][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.233511][T12239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.248945][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.251638][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.254376][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.262350][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.279078][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.282115][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.284773][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.312438][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.322578][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.332720][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.342856][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.345810][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.348552][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.351476][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.394832][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.400856][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.403545][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.425445][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.431202][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.438713][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.449340][T12239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.452815][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.457397][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.464539][T12239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.467156][T12239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.479855][T12239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.482225][T12239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.614964][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.622249][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.638388][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.663485][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.666870][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.680136][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.292852][T12582] binder: 12581:12582 ioctl 4018620d 0 returned -22 [ 604.443710][T12584] binder_user_error: 9 callbacks suppressed [ 604.443723][T12584] binder: 12576:12584 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 604.449111][T12584] binder: 12576:12584 got transaction to invalid handle, 1 [ 604.451104][T12584] binder_debug: 10 callbacks suppressed [ 604.451113][T12584] binder: 12584:12576 cannot find target node [ 604.454351][T12584] binder: 12576:12584 transaction async to 0:0 failed 469/29201/-22, size 88-24 line 3054 [ 604.571962][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1608'. [ 604.718523][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 605.224613][T12617] fuse: Bad value for 'user_id' [ 606.695978][ T6613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.349431][ T6613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.458859][ T6613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.547120][ T6613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.680455][T12650] binder: 12649:12650 ioctl 4018620d 0 returned -22 [ 608.682946][T12650] binder: tried to use weak ref as strong ref [ 608.691595][T12650] binder: 12649:12650 Acquire 1 refcount change on invalid ref 0 ret -22 [ 608.694539][T12650] binder: 12649:12650 got transaction to invalid handle, 1 [ 608.711851][T12650] binder: 12650:12649 cannot find target node [ 608.713562][T12650] binder: 12649:12650 transaction async to 0:0 failed 472/29201/-22, size 96-24 line 3054 [ 608.744415][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 609.518095][T12661] trusted_key: encrypted_key: master key parameter 'ð' is invalid [ 609.816888][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 609.827303][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.830122][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.832922][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.837624][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 609.839936][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.860700][T12678] binder: 12663:12678 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 609.863960][T12678] binder: 12663:12678 got transaction to invalid handle, 1 [ 609.866164][T12678] binder: 12678:12663 cannot find target node [ 609.867994][T12678] binder: 12663:12678 transaction async to 0:0 failed 473/29201/-22, size 88-24 line 3054 [ 609.899636][T12669] lo speed is unknown, defaulting to 1000 [ 610.581083][ T4540] binder: undelivered TRANSACTION_ERROR: 29201 [ 611.294372][T12669] chnl_net:caif_netlink_parms(): no params data found [ 611.440959][T12716] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 611.936695][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 612.473584][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.477059][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.479674][T12669] device bridge_slave_0 entered promiscuous mode [ 612.495968][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.507314][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.520199][T12669] device bridge_slave_1 entered promiscuous mode [ 612.891808][T12669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.909736][T12669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.055012][T12669] team0: Port device team_slave_0 added [ 613.946677][T12767] ALSA: seq fatal error: cannot create timer (-19) [ 613.975451][ T4305] Bluetooth: hci0: command 0x041b tx timeout [ 614.233755][T12669] team0: Port device team_slave_1 added [ 614.344373][T12779] binder: 12769:12779 got transaction to invalid handle, 1 [ 614.346576][T12779] binder: 12779:12769 cannot find target node [ 614.348290][T12779] binder: 12769:12779 transaction call to 0:0 failed 477/29201/-22, size 88-24 line 3054 [ 614.880945][ T4476] binder: undelivered TRANSACTION_ERROR: 29201 [ 614.977195][T12669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.979224][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.037202][T12669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.218296][T12669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.222997][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.239636][T12669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.243571][T12786] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 616.051942][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 616.389943][T12669] device hsr_slave_0 entered promiscuous mode [ 616.425715][T12669] device hsr_slave_1 entered promiscuous mode [ 616.505380][T12669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.507463][T12669] Cannot create hsr debugfs directory [ 616.555029][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1647'. [ 616.628790][ T6613] device hsr_slave_0 left promiscuous mode [ 616.801046][ T6613] device hsr_slave_1 left promiscuous mode [ 617.295482][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.297741][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.300502][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.302746][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.305922][ T6613] device bridge_slave_1 left promiscuous mode [ 617.307840][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.348823][ T6613] device bridge_slave_0 left promiscuous mode [ 617.352889][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.532815][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.534673][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.571184][ T6613] device veth1_macvtap left promiscuous mode [ 617.573037][ T6613] device veth0_macvtap left promiscuous mode [ 617.574825][ T6613] device veth1_vlan left promiscuous mode [ 617.576930][ T6613] device veth0_vlan left promiscuous mode [ 618.135439][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 620.194456][ T6613] team0 (unregistering): Port device team_slave_1 removed [ 620.376082][ T6613] team0 (unregistering): Port device team_slave_0 removed [ 620.547216][ T6613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.836912][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.344023][ T6613] bond0 (unregistering): Released all slaves [ 623.606696][T12830] 8021q: VLANs not supported on gre0 [ 624.760372][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.762975][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.928996][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.496035][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.690144][T12846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.692682][T12846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.387817][T12883] netlink: 'syz.6.1664': attribute type 1 has an invalid length. [ 626.419710][T12886] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 626.461241][T12883] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1664'. [ 626.487878][T12883] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 626.508979][T12883] bond1 (unregistering): Released all slaves [ 627.492624][T12669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 627.578196][T12669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 627.627038][T12669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 627.647772][T12902] 8021q: VLANs not supported on gre0 [ 627.650916][T12669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 627.904644][T12669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.912176][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 627.914754][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.920325][T12669] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.924891][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.928312][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.930721][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.932626][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.935050][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.943227][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.948311][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.950829][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.952738][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.975192][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.979513][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.006471][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.016543][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.024379][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.032253][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.053767][T12669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.065527][T12669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.069487][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.071979][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.098655][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.112661][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.129787][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.145139][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.091063][T12961] netlink: 'syz.8.1681': attribute type 1 has an invalid length. [ 631.123306][T12961] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 631.139419][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1681'. [ 631.146301][T12961] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 631.201640][T12961] bond1 (unregistering): Released all slaves [ 631.222663][T12965] 8021q: VLANs not supported on gre0 [ 631.232463][T12669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.269528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 631.271792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 631.327097][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 631.330178][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 631.362600][T12669] device veth0_vlan entered promiscuous mode [ 631.386089][T12669] device veth1_vlan entered promiscuous mode [ 631.429208][T12669] device veth0_macvtap entered promiscuous mode [ 631.460863][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 631.464106][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.516349][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.520055][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.522556][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.538168][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.547192][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.549913][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.595023][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.615940][T12669] device veth1_macvtap entered promiscuous mode [ 631.636335][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.639182][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.641797][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.675025][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.685154][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.697931][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.798463][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.801289][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.803940][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.806829][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.809378][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.812124][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.814676][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.817614][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.820254][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.823015][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.836972][T12669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.855924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 631.858504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 631.861161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 631.865611][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.905730][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.908385][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.915142][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.927976][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.930883][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.933577][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.956134][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.958748][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.961523][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.984511][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.994631][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.004787][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.015457][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.025024][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.044550][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.058870][T12669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.062183][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.064986][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.091052][T12669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.093315][T12669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.115420][T12669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.117782][T12669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.287309][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.300227][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.321240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.353759][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.357001][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.371816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.678290][T13048] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 637.907452][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.909878][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.620079][ T4378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.468915][ T4378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.587722][ T4378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.728325][ T4378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.005832][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.010655][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.013466][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.017021][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.017590][T13150] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 641.021382][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 641.024571][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.061884][T13157] lo speed is unknown, defaulting to 1000 [ 642.106382][T13179] fuse: Bad value for 'rootmode' [ 643.087760][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 643.879285][T13157] chnl_net:caif_netlink_parms(): no params data found [ 645.041480][ T4378] device hsr_slave_0 left promiscuous mode [ 645.094621][ T4378] device hsr_slave_1 left promiscuous mode [ 645.155511][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.157981][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.160970][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.165381][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 645.169550][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.174793][ T4378] device bridge_slave_1 left promiscuous mode [ 645.177471][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.236437][ T4378] device bridge_slave_0 left promiscuous mode [ 645.238168][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.396068][ T4378] device veth1_macvtap left promiscuous mode [ 645.403248][ T4378] device veth0_macvtap left promiscuous mode [ 645.420861][ T4378] device veth1_vlan left promiscuous mode [ 645.422769][ T4378] device veth0_vlan left promiscuous mode [ 647.245588][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 649.325378][ T4305] Bluetooth: hci0: command 0x0419 tx timeout [ 649.829381][ T4378] team0 (unregistering): Port device team_slave_1 removed [ 650.016777][ T4378] team0 (unregistering): Port device team_slave_0 removed [ 650.211023][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.447314][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.955582][ T4378] bond0 (unregistering): Released all slaves [ 653.171957][T13226] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 653.300751][T13257] infiniband syz!: set active [ 653.302207][T13257] infiniband syz!: added team_slave_0 [ 653.307875][T13257] infiniband syz!: Couldn't open port 1 [ 653.331735][T13257] RDS/IB: syz!: added [ 653.333202][T13257] smc: adding ib device syz! with port count 1 [ 653.334969][T13257] smc: ib device syz! port 1 has pnetid [ 653.346767][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.362449][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.506270][T13157] device bridge_slave_0 entered promiscuous mode [ 653.510079][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.513494][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.522302][T13157] device bridge_slave_1 entered promiscuous mode [ 654.581405][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.628190][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.849413][T13157] team0: Port device team_slave_0 added [ 654.853259][T13157] team0: Port device team_slave_1 added [ 655.101763][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.103934][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.135927][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.151634][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.161415][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.206447][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.350757][T13157] device hsr_slave_0 entered promiscuous mode [ 655.497477][T13157] device hsr_slave_1 entered promiscuous mode [ 656.260461][T13157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.262500][T13157] Cannot create hsr debugfs directory [ 658.752799][T13362] rdma_rxe: rxe_register_device failed with error -23 [ 658.754756][T13362] rdma_rxe: failed to add team_slave_0 [ 660.254160][ T27] audit: type=1326 audit(660.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb5a7a8 code=0x7ffc0000 [ 660.298557][ T27] audit: type=1326 audit(660.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffadb5a7a8 code=0x7ffc0000 [ 660.324790][ T27] audit: type=1326 audit(660.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb5a7a8 code=0x7ffc0000 [ 660.410345][ T27] audit: type=1326 audit(660.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffadb84ec8 code=0x7ffc0000 [ 660.628310][ T27] audit: type=1326 audit(660.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffadb5a7a8 code=0x7ffc0000 [ 662.857324][T13157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.988250][T13157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 664.136487][T13157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 664.217950][T13157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 664.897356][T13446] netlink: 'syz.7.1775': attribute type 2 has an invalid length. [ 664.899920][T13446] netlink: 'syz.7.1775': attribute type 1 has an invalid length. [ 664.902262][T13446] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1775'. [ 665.678924][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.725798][T13157] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.804293][T13445] Process accounting resumed [ 666.651788][T13461] fuse: Unknown parameter 'user_i00000000000000000000' [ 666.803887][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.807187][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.809660][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.812247][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.814613][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.816527][ T5049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.875417][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.878277][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.895488][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.897396][ T5049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.906071][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.915758][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.920543][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.995779][T13157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.013197][T13157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.054034][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.059014][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.061923][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.082281][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.088541][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.117056][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.123936][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.131998][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.139854][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.147771][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.771416][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.773761][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.803851][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.904151][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.907900][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.958290][T13157] device veth0_vlan entered promiscuous mode [ 668.008096][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.011860][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.017447][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.020067][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.193835][T13157] device veth1_vlan entered promiscuous mode [ 668.877440][T13518] binder: 13514:13518 tried to acquire reference to desc 0, got 1 instead [ 668.952351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.954954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.961918][T13157] device veth0_macvtap entered promiscuous mode [ 668.973020][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.982226][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.008622][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.019205][T13525] fuse: Unknown parameter 'user_i00000000000000000000' [ 669.026102][T13157] device veth1_macvtap entered promiscuous mode [ 669.054970][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.058900][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.061515][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.071754][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.074332][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.084942][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.095387][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.098163][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.100714][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.112402][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.121126][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.149856][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.152415][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.155107][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.185487][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.205380][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.220472][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.230749][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.233511][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.367296][T13535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1793'. [ 669.516772][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.520192][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.523835][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.573483][T13542] netlink: 'syz.8.1792': attribute type 2 has an invalid length. [ 669.575900][T13542] netlink: 'syz.8.1792': attribute type 1 has an invalid length. [ 669.578136][T13542] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1792'. [ 669.591214][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.613814][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.658462][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.665270][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.670675][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.673608][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.679921][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.682988][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.686045][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.697370][T13157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.710350][T13157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.922615][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.992395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 670.084795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.097794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.128237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.213353][T13539] Process accounting resumed [ 670.247051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.262147][T13157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.268705][T13157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.281413][T13157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.283874][T13157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.455921][ T7847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.458336][ T7847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.463396][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 670.547218][ T5049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.549591][ T5049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.554624][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.297700][T13579] binder: 13578:13579 tried to acquire reference to desc 0, got 1 instead [ 672.070092][T13608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1805'. [ 672.587801][T13625] netlink: 'syz.2.1806': attribute type 2 has an invalid length. [ 672.590153][T13625] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 672.592472][T13625] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1806'. [ 673.264547][T13619] Process accounting resumed [ 673.419009][ T6613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.137353][ T6613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.229406][ T6613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.328063][ T6613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.607433][T13726] binder: 13721:13726 tried to acquire reference to desc 0, got 1 instead [ 676.408374][T13732] ALSA: seq fatal error: cannot create timer (-19) [ 676.558525][ T4305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.562910][ T4305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.566404][ T4305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.568977][ T4305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.571932][ T4305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 676.574081][ T4305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.844185][T13739] lo speed is unknown, defaulting to 1000 [ 677.549069][T13769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 678.615688][ T4305] Bluetooth: hci0: command 0x0409 tx timeout [ 678.870540][T13794] binder: 13793:13794 tried to acquire reference to desc 0, got 1 instead [ 678.874039][T13794] binder: 13793:13794 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 678.877857][T13794] binder: 13794 RLIMIT_NICE not set [ 678.879257][T13794] binder: 13794 RLIMIT_NICE not set [ 678.880928][T13794] binder: 13793:13794 Release 1 refcount change on invalid ref 1 ret -22 [ 678.883194][T13794] binder: 13793:13794 BC_INCREFS_DONE node 492 has no pending increfs request [ 678.885993][T13794] binder: 13794 RLIMIT_NICE not set [ 678.887484][T13794] binder_alloc: 13793: binder_alloc_buf, no vma [ 678.889254][T13794] binder: cannot allocate buffer: vma cleared, target dead or dying [ 678.889286][T13794] binder: 13793:13794 transaction reply to 13793:13794 failed 495/29189/-3, size 112-24 line 3239 [ 678.894183][T13794] binder: send failed reply for transaction 494 to 13793:13794 [ 679.057830][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.059813][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.673148][ T9661] binder: undelivered TRANSACTION_COMPLETE [ 679.674790][ T9661] binder: undelivered TRANSACTION_ERROR: 29189 [ 679.918120][ T6613] device hsr_slave_0 left promiscuous mode [ 679.989437][ T6613] device hsr_slave_1 left promiscuous mode [ 680.097013][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.099481][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.102308][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.107638][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.119022][ T6613] device bridge_slave_1 left promiscuous mode [ 680.127734][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.164089][T13812] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1829'. [ 680.261842][ T6613] device bridge_slave_0 left promiscuous mode [ 680.263668][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.275092][T13815] binder: 13814:13815 tried to acquire reference to desc 0, got 1 instead [ 680.879922][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 680.966383][ T6613] device veth1_macvtap left promiscuous mode [ 680.969045][ T6613] device veth0_macvtap left promiscuous mode [ 680.971106][ T6613] device veth1_vlan left promiscuous mode [ 680.985829][ T6613] device veth0_vlan left promiscuous mode [ 681.089117][T13829] fuse: Unknown parameter 'user_id00000000000000000000' [ 682.123351][T13840] binder: 13839:13840 tried to acquire reference to desc 0, got 1 instead [ 682.129728][T13840] binder: 13839:13840 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 682.133517][T13840] binder: 13840 RLIMIT_NICE not set [ 682.135075][T13840] binder: 13840 RLIMIT_NICE not set [ 682.137231][T13840] binder: 13839:13840 ioctl c0306201 0 returned -14 [ 682.139634][ T4476] binder: release 13839:13840 transaction 504 out, still active [ 682.141663][ T4476] binder: undelivered TRANSACTION_COMPLETE [ 682.177483][ T4476] binder: release 13839:13840 transaction 504 in, still active [ 682.179612][ T4476] binder: send failed reply for transaction 504, target dead [ 682.951160][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 683.264647][T13854] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1841'. [ 683.385611][T13858] binder: 13857:13858 tried to acquire reference to desc 0, got 1 instead [ 683.388492][T13858] binder: 13857:13858 got transaction with invalid data ptr [ 683.390419][T13858] binder: 13857:13858 transaction async to 13857:0 failed 509/29201/-14, size 0-24 line 3342 [ 684.933040][ T6613] team0 (unregistering): Port device team_slave_1 removed [ 685.015459][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 685.129133][ T6613] team0 (unregistering): Port device team_slave_0 removed [ 685.356285][ T6613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.578798][ T6613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.034786][ T6613] bond0 (unregistering): Released all slaves [ 689.137053][T13890] fuse: Bad value for 'fd' [ 689.160410][T13893] binder: 13886:13893 tried to acquire reference to desc 0, got 1 instead [ 689.169870][T13893] binder: 13886:13893 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 689.177819][T13893] binder: 13893 RLIMIT_NICE not set [ 689.179753][T13893] binder: 13893 RLIMIT_NICE not set [ 689.184817][T13739] chnl_net:caif_netlink_parms(): no params data found [ 689.204134][T13893] binder: 13886:13893 ioctl c0306201 0 returned -14 [ 689.206711][ T22] binder_debug: 1 callbacks suppressed [ 689.206722][ T22] binder: release 13886:13893 transaction 514 out, still active [ 689.212355][ T22] binder: undelivered TRANSACTION_COMPLETE [ 689.281448][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.285384][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.288142][T13739] device bridge_slave_0 entered promiscuous mode [ 689.299278][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.301261][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.303842][T13739] device bridge_slave_1 entered promiscuous mode [ 689.318528][T13739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.322902][T13739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.341912][ T4476] binder: release 13886:13893 transaction 514 in, still active [ 689.344033][ T4476] binder: send failed reply for transaction 514, target dead [ 689.384593][T13739] team0: Port device team_slave_0 added [ 689.388461][T13739] team0: Port device team_slave_1 added [ 689.442053][T13909] binder: 13908:13909 tried to acquire reference to desc 0, got 1 instead [ 689.445214][T13909] binder: 13908:13909 got transaction with invalid data ptr [ 689.447496][T13909] binder: 13908:13909 transaction async to 13908:0 failed 519/29201/-14, size 0-24 line 3342 [ 689.451087][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 689.455869][T13739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.457726][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.465005][T13739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.568659][T13739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.570637][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.592422][T13739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.633411][T13910] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1852'. [ 689.737776][T13739] device hsr_slave_0 entered promiscuous mode [ 689.835788][T13739] device hsr_slave_1 entered promiscuous mode [ 689.935412][T13739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.942769][T13739] Cannot create hsr debugfs directory [ 691.307074][T13948] fuse: Bad value for 'fd' [ 691.366929][T13951] binder: 13946:13951 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 691.380932][T13951] binder: 13946:13951 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 691.384556][T13951] binder: 13951 RLIMIT_NICE not set [ 691.406103][T13951] binder: 13946:13951 ioctl c0306201 20001440 returned -11 [ 691.410668][T13951] binder: 13946:13951 ioctl c0306201 0 returned -14 [ 692.270978][T13972] binder: 13969:13972 tried to acquire reference to desc 0, got 1 instead [ 692.291375][T13972] binder: 13969:13972 transaction async to 13969:0 failed 525/29201/-14, size 0-24 line 3342 [ 692.309382][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 694.070665][T14013] fuse: Bad value for 'fd' [ 694.249944][T14025] binder_user_error: 1 callbacks suppressed [ 694.249956][T14025] binder: 14022:14025 tried to acquire reference to desc 0, got 1 instead [ 694.275212][T14025] binder: 14022:14025 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 694.291723][T14025] binder: 14025 RLIMIT_NICE not set [ 694.293258][T14025] binder: 14025 RLIMIT_NICE not set [ 694.302586][T14025] binder: 14022:14025 ioctl c0306201 200002c0 returned -11 [ 694.313174][ T4476] binder: release 14022:14025 transaction 530 out, still active [ 694.315637][ T4476] binder: undelivered TRANSACTION_COMPLETE [ 694.413035][T13739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 694.416137][ T22] binder: release 14022:14025 transaction 530 in, still active [ 694.423690][ T22] binder: send failed reply for transaction 530, target dead [ 694.517759][T13739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 694.643821][T13739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.216433][T14037] binder: 14036:14037 tried to acquire reference to desc 0, got 1 instead [ 695.223219][ T22] binder: undelivered TRANSACTION_COMPLETE [ 695.263922][ T4344] binder: undelivered transaction 535, process died. [ 695.289931][T13739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.222549][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.250970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 696.253462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.267828][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.433939][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 696.445463][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 696.455165][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.457256][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.459684][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 696.462356][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 696.960194][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.962425][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.158996][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.255995][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.359410][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.362339][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.366736][T14079] binder: 14078:14079 tried to acquire reference to desc 0, got 1 instead [ 697.379361][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.384977][T14079] binder: 14078:14079 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 697.398780][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.412399][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.422086][T14079] binder: 14079 RLIMIT_NICE not set [ 697.423518][T14079] binder: 14079 RLIMIT_NICE not set [ 697.432871][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 697.438921][T14085] binder: 14078:14085 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 697.442943][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.456223][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 697.468816][ T4344] binder: release 14078:14079 transaction 540 out, still active [ 697.470897][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 697.473450][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 697.533064][T13739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.542516][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.553993][ T4476] binder: release 14078:14079 transaction 540 in, still active [ 697.565705][ T4476] binder: send failed reply for transaction 540, target dead [ 698.644454][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.647008][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.743836][T13739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.847967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 698.859840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 698.889266][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 698.892089][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 698.895146][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 698.905500][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 698.918035][T13739] device veth0_vlan entered promiscuous mode [ 698.939711][T13739] device veth1_vlan entered promiscuous mode [ 698.983519][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 698.986361][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 698.988958][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.002029][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.018932][T13739] device veth0_macvtap entered promiscuous mode [ 699.023785][T13739] device veth1_macvtap entered promiscuous mode [ 699.077454][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.092129][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.104412][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.115413][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.127614][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.137846][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.150928][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.425418][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.428251][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.448378][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.451045][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.491824][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.501964][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.515175][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.688543][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.697786][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.720162][T13739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.734017][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 699.738961][T14134] binder_user_error: 2 callbacks suppressed [ 699.738971][T14134] binder: 14129:14134 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 699.743944][T14134] binder: 14129:14134 got transaction to invalid handle, 1 [ 699.746017][T14134] binder_debug: 2 callbacks suppressed [ 699.746026][T14134] binder: 14134:14129 cannot find target node [ 699.749291][T14134] binder: 14129:14134 transaction async to 0:0 failed 546/29201/-22, size 88-24 line 3054 [ 699.753635][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 699.757688][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 699.764784][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 699.776172][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.779079][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.792177][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.798336][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.804247][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.810419][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.820787][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.827883][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.833757][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.840283][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.863988][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.875860][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.889220][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.902831][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.918417][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.942605][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.963360][T13739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.972162][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 699.975790][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 700.342283][ T5571] binder: undelivered TRANSACTION_ERROR: 29201 [ 700.755386][T13739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.757818][T13739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.760108][T13739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.762466][T13739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.807475][T14141] binder: 14140:14141 tried to acquire reference to desc 0, got 1 instead [ 700.824354][T14141] binder: 14140:14141 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 700.860536][T14141] binder: 14141 RLIMIT_NICE not set [ 700.870530][T14141] binder: 14141 RLIMIT_NICE not set [ 700.872219][T14141] binder: 14140:14141 ioctl c0306201 200002c0 returned -11 [ 700.880858][ T4476] binder: release 14140:14141 transaction 551 out, still active [ 700.883826][ T4476] binder: undelivered TRANSACTION_COMPLETE [ 700.916229][ T4476] binder: release 14140:14141 transaction 551 in, still active [ 700.918321][ T4476] binder: send failed reply for transaction 551, target dead [ 700.944541][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.947257][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.967068][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 701.006029][ T5068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.008378][ T5068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.013379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 702.207307][T14174] binder: 14173:14174 tried to acquire reference to desc 0, got 1 instead [ 702.211866][ T24] binder: undelivered TRANSACTION_COMPLETE [ 702.255460][ T4540] binder: undelivered transaction 556, process died. [ 704.088540][T14209] binder: 14202:14209 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 704.091726][T14209] binder: 14202:14209 got transaction to invalid handle, 1 [ 704.093854][T14209] binder: 14209:14202 cannot find target node [ 705.261873][ T4540] binder_debug: 1 callbacks suppressed [ 705.261887][ T4540] binder: undelivered TRANSACTION_ERROR: 29201 [ 706.962401][ T4859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=181 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 707.829480][ T4859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.938032][ T4859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.207867][ T4859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.631499][ T4859] device hsr_slave_0 left promiscuous mode [ 710.665814][ T4859] device hsr_slave_1 left promiscuous mode [ 710.745993][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.747977][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.756207][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.758315][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.763696][ T4859] device bridge_slave_1 left promiscuous mode [ 710.774716][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.816445][ T4859] device bridge_slave_0 left promiscuous mode [ 710.818251][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.965613][ T4859] device veth1_macvtap left promiscuous mode [ 710.967366][ T4859] device veth0_macvtap left promiscuous mode [ 710.969021][ T4859] device veth1_vlan left promiscuous mode [ 710.970640][ T4859] device veth0_vlan left promiscuous mode [ 712.880031][ T4859] team0 (unregistering): Port device team_slave_1 removed [ 713.070692][ T4859] team0 (unregistering): Port device team_slave_0 removed [ 713.257070][ T4859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.497444][ T4859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.883112][ T4859] bond0 (unregistering): Released all slaves