last executing test programs: 4m50.661109856s ago: executing program 32 (id=127): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) 4m27.107210234s ago: executing program 33 (id=233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) close_range(r0, 0xffffffffffffffff, 0x0) 3m45.04322126s ago: executing program 34 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 3m44.379016892s ago: executing program 35 (id=512): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x60, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$setregs(0xd, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 3m9.683929238s ago: executing program 36 (id=710): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfffe, 0x2}, 0x6) 2m55.700550176s ago: executing program 37 (id=705): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bbff020000000000eaffffff00000000018900907800000000fe"], 0x0) 2m24.922377374s ago: executing program 38 (id=818): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.072178272s ago: executing program 6 (id=1097): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a0090"], 0x54}}, 0x0) 2m3.058461376s ago: executing program 6 (id=1104): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) read(r0, 0x0, 0x0) 2m2.812955147s ago: executing program 6 (id=1110): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m0.539278736s ago: executing program 6 (id=1123): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000680)='net/snmp6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) 1m59.994804568s ago: executing program 9 (id=1130): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000001c0)={0x0, 0x2, 0x4, {0x4, 0x0, "441a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m59.62021158s ago: executing program 6 (id=1131): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close(r2) 1m59.348055601s ago: executing program 9 (id=1132): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x9f23, 0x10, 0x0, 0x38e}) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m58.952828013s ago: executing program 9 (id=1134): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m58.019139956s ago: executing program 9 (id=1139): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x8000000, 0x6e, &(0x7f0000000040)=""/110}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m57.968303167s ago: executing program 6 (id=1140): bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 1m57.535337419s ago: executing program 0 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1m57.445845509s ago: executing program 0 (id=1144): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000180)=0x84) 1m57.342534209s ago: executing program 0 (id=1145): r0 = syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 1m57.2509284s ago: executing program 0 (id=1147): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m56.749305862s ago: executing program 3 (id=1152): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000001980)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x4}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x1, 0x10, 0x1, 0x7}, &(0x7f0000000380)=0x18) 1m56.507649163s ago: executing program 3 (id=1154): socket$inet(0x2, 0x4000000000000001, 0x8222) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x1, 0x6) ptrace(0x11, r0) 1m56.327649174s ago: executing program 3 (id=1156): unshare(0x20000400) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040)) 1m56.219931084s ago: executing program 9 (id=1157): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr={{0x18, 0x29, 0x43, {0x3b, 0x0, 0x2}}}], 0x18}, 0x84) 1m56.219772894s ago: executing program 9 (id=1158): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtfilter={0x160, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x134, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x8, 0x10, 0x10, 0x8, 0x8001, 0x1, 0xff00, 0x5, [{0xcb, 0x200, 0x200, 0x1}, {0x3, 0x4, 0x4, 0xd}, {0x2, 0x8, 0x5, 0x3ff}, {0xf5, 0xa, 0x3, 0x7f}, {0xbb, 0x400, 0x9}, {0x9, 0x0, 0x3, 0x629}, {0x9, 0x80000000, 0x5, 0xa8}, {0x6, 0x1598017f, 0x8, 0x6}, {0xfff, 0x1, 0x6, 0xb96}, {0xffffff00, 0x2, 0x861, 0x1}, {0x262, 0x80000000, 0x401, 0x7f98}, {0x10000, 0x6, 0x4, 0x19fe}, {0xf, 0x4, 0x9, 0xfffffff7}, {0xf1, 0x7, 0x4, 0x100}, {0x48ff85e2, 0x2, 0x9, 0x80}, {0x71, 0x4, 0x80000000, 0x3}]}}]}}]}, 0x160}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.704158437s ago: executing program 3 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x0) 1m55.645510766s ago: executing program 3 (id=1160): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m55.082755019s ago: executing program 4 (id=1165): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 1m55.025733159s ago: executing program 4 (id=1166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f51501420301090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000570872e375ad6a9b2cce45000090ab178afd8a8bc616b52baebf3e0fcfe3215fa5694945924177c5ea86e890a0c33e1b699143"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) sched_setattr(0x0, 0x0, 0x0) 1m54.76155552s ago: executing program 3 (id=1167): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 1m54.232934872s ago: executing program 4 (id=1168): r0 = syz_io_uring_setup(0x110, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x285}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x1}, &(0x7f0000000100), &(0x7f00000012c0)) unshare(0x22020400) io_uring_enter(r3, 0x0, 0x3, 0x7, 0x0, 0x0) 1m54.170398023s ago: executing program 4 (id=1169): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @mcast2, 0xa2}}, 0x70) 1m54.081022533s ago: executing program 4 (id=1170): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000440)=""/102, 0x66) 1m53.925134574s ago: executing program 4 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 1m53.894079194s ago: executing program 0 (id=1172): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 1m53.763634575s ago: executing program 0 (id=1173): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.80738847s ago: executing program 39 (id=1140): bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 1m40.784387729s ago: executing program 40 (id=1158): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtfilter={0x160, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x134, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x8, 0x10, 0x10, 0x8, 0x8001, 0x1, 0xff00, 0x5, [{0xcb, 0x200, 0x200, 0x1}, {0x3, 0x4, 0x4, 0xd}, {0x2, 0x8, 0x5, 0x3ff}, {0xf5, 0xa, 0x3, 0x7f}, {0xbb, 0x400, 0x9}, {0x9, 0x0, 0x3, 0x629}, {0x9, 0x80000000, 0x5, 0xa8}, {0x6, 0x1598017f, 0x8, 0x6}, {0xfff, 0x1, 0x6, 0xb96}, {0xffffff00, 0x2, 0x861, 0x1}, {0x262, 0x80000000, 0x401, 0x7f98}, {0x10000, 0x6, 0x4, 0x19fe}, {0xf, 0x4, 0x9, 0xfffffff7}, {0xf1, 0x7, 0x4, 0x100}, {0x48ff85e2, 0x2, 0x9, 0x80}, {0x71, 0x4, 0x80000000, 0x3}]}}]}}]}, 0x160}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m38.786337527s ago: executing program 41 (id=1167): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 1m38.654828047s ago: executing program 42 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 1m38.247290009s ago: executing program 43 (id=1173): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.315050791s ago: executing program 2 (id=1436): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 5.818479356s ago: executing program 5 (id=1447): r0 = syz_io_uring_setup(0x952, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) preadv(r3, &(0x7f0000002580)=[{0x0}, {&(0x7f0000002280)=""/249, 0xf9}, {&(0x7f0000002380)=""/92, 0x5c}, {&(0x7f0000002400)=""/121, 0x79}], 0x4, 0x200, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r5, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x400380, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5.666544037s ago: executing program 1 (id=1448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xb}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 5.511585957s ago: executing program 5 (id=1449): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.362347328s ago: executing program 5 (id=1452): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000800)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.150870159s ago: executing program 5 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 4.965546019s ago: executing program 5 (id=1456): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x800, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r2, 0x0, r0}, 0x10) 3.960437824s ago: executing program 1 (id=1458): syz_usb_connect(0x3, 0x4f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c02000000000904"], 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.862384244s ago: executing program 5 (id=1459): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000680)='net/snmp6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) 2.987107188s ago: executing program 8 (id=1465): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04090700c9"], 0x6) 2.908314358s ago: executing program 2 (id=1467): r0 = syz_open_dev$video(&(0x7f0000000040), 0x20000b, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x8, 0x4, 0x0, 0x31}) 2.838800318s ago: executing program 8 (id=1468): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x81, 0x73, 0xfffffffd, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2}}}}) 2.801980759s ago: executing program 2 (id=1470): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c0000800800020000000000080004000000000008"], 0xc0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) 2.685995979s ago: executing program 2 (id=1471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@noblock_validity}, {@sb={'sb', 0x3d, 0xffffffffffffffe0}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004000000000000a06740c5381059ff303e4e39335697148a3fe9832274c703808dc16a1d8d56319f2361de4f91e8d992336ab9023e08c6bc91fa63b441fd27597289dcaaa5e54ad5cfdf24edaec51606a5d68f5d15bbeb169fa38f215efc9902ef30264d8348c166302375cf6446a849e05a96a2dee08da7865168e2148bc3f9e0fdaee033a62c617d868f"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) waitid(0x1, r2, &(0x7f0000001300), 0x8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4090) 2.594687859s ago: executing program 8 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000d5}, 0x0) 2.50301307s ago: executing program 7 (id=1473): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r6, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r5) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.49574902s ago: executing program 8 (id=1474): r0 = syz_io_uring_setup(0x952, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) preadv(r3, &(0x7f0000002580)=[{0x0}, {&(0x7f0000002280)=""/249, 0xf9}, {&(0x7f0000002380)=""/92, 0x5c}, {&(0x7f0000002400)=""/121, 0x79}], 0x4, 0x200, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r5, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x400380, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.258518351s ago: executing program 8 (id=1475): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000007f"], 0x98}}], 0x1, 0x0) 1.279716815s ago: executing program 7 (id=1476): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.221277255s ago: executing program 8 (id=1477): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 986.083236ms ago: executing program 7 (id=1478): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x800000, 0x10, 0x0, 0x3be}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 975.810816ms ago: executing program 1 (id=1479): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 720.453367ms ago: executing program 7 (id=1480): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 582.927308ms ago: executing program 7 (id=1481): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 492.730368ms ago: executing program 7 (id=1482): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xc, '\x00\b'}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="200eb300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 431.815329ms ago: executing program 2 (id=1483): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @dev, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6tnl0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 266.893649ms ago: executing program 1 (id=1484): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x4008af03, &(0x7f0000000280)) 170.63685ms ago: executing program 1 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000d5}, 0x0) 48.82624ms ago: executing program 1 (id=1486): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='.\x00\x00\x00J', 0x5}], 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_io_uring_submit(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1487): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r6, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r5) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kernel console output (not intermixed with test programs): ous mode [ 241.217287][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.321030][ T6584] device bridge_slave_0 left promiscuous mode [ 241.322517][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.509852][ T6584] device veth1_macvtap left promiscuous mode [ 242.511308][ T6584] device veth0_macvtap left promiscuous mode [ 242.512757][ T6584] device veth1_vlan left promiscuous mode [ 242.514051][ T6584] device veth0_vlan left promiscuous mode [ 242.605996][ T6584] device veth1_macvtap left promiscuous mode [ 242.607377][ T6584] device veth0_macvtap left promiscuous mode [ 242.608773][ T6584] device veth1_vlan left promiscuous mode [ 242.613747][ T6584] device veth0_vlan left promiscuous mode [ 243.259510][ T7141] Restarting kernel threads ... done. [ 243.707209][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 243.738525][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 243.758565][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.818039][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.030330][ T6584] bond0 (unregistering): Released all slaves [ 244.442570][ T7145] loop4: detected capacity change from 0 to 128 [ 245.671801][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 245.695053][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 245.738245][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.778553][ T7153] loop4: detected capacity change from 0 to 512 [ 245.809872][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.849774][ T7153] EXT4-fs (loop4): Test dummy encryption mode enabled [ 245.894338][ T7153] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.834: invalid block [ 245.896736][ T7153] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.834: couldn't read orphan inode 11 (err -117) [ 245.918443][ T7153] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 245.997164][ T6584] bond0 (unregistering): Released all slaves [ 246.107537][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.110262][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.112581][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.119857][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.122073][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.124099][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.162748][ T7140] netlink: 'syz.9.829': attribute type 4 has an invalid length. [ 246.164403][ T7140] netlink: 17 bytes leftover after parsing attributes in process `syz.9.829'. [ 246.221751][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.224049][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.226045][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.249036][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.259258][ T6889] device veth0_macvtap entered promiscuous mode [ 246.283821][ T6889] device veth1_macvtap entered promiscuous mode [ 246.330247][ T7158] device syzkaller0 entered promiscuous mode [ 246.356992][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.359168][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.369663][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.371769][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.375500][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.377872][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.389487][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.391647][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.393662][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.407137][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.411599][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.504937][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.507280][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.515287][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.520439][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.531878][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.533973][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.535782][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.538105][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.550556][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.552913][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.554928][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.557040][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.558874][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.569475][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.575141][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.580239][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.582396][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.637438][ T6889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.639369][ T6889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.643233][ T6889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.644986][ T6889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.717830][ T7162] udc-core: couldn't find an available UDC or it's busy [ 246.719213][ T7162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 246.904437][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.906761][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.914346][ T7167] loop4: detected capacity change from 0 to 512 [ 246.916510][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.025875][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.027710][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.038740][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.839: corrupted inode contents [ 247.057469][ T7167] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.839: mark_inode_dirty error [ 247.062485][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.077495][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.839: corrupted inode contents [ 247.097569][ T7167] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.839: mark_inode_dirty error [ 247.125212][ T7167] __quota_error: 29 callbacks suppressed [ 247.125226][ T7167] Quota error (device loop4): write_blk: dquota write failed [ 247.128130][ T7167] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 247.163081][ T7167] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.839: Failed to acquire dquot type 0 [ 247.172845][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.839: corrupted inode contents [ 247.178261][ T7167] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #16: comm syz.4.839: mark_inode_dirty error [ 247.190384][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.839: corrupted inode contents [ 247.195750][ T7167] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.839: mark_inode_dirty error [ 247.203250][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.839: corrupted inode contents [ 247.209683][ T7167] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 247.215030][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.839: corrupted inode contents [ 247.223807][ T7167] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.839: mark_inode_dirty error [ 247.247059][ T7167] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 247.280431][ T7167] EXT4-fs (loop4): 1 truncate cleaned up [ 247.281602][ T7167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.794723][ T7193] loop4: detected capacity change from 0 to 256 [ 248.938672][ T7196] udc-core: couldn't find an available UDC or it's busy [ 248.968627][ T7196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 248.995802][ T26] audit: type=1326 audit(248.970:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 249.033727][ T26] audit: type=1326 audit(249.010:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 249.041537][ T26] audit: type=1326 audit(249.020:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 249.051187][ T26] audit: type=1326 audit(249.020:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 249.055709][ T26] audit: type=1326 audit(249.020:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 250.221376][ T26] audit: type=1326 audit(249.020:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 250.237470][ T26] audit: type=1326 audit(249.020:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 250.260402][ T26] audit: type=1326 audit(250.190:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.9.843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c9c81a8 code=0x7ffc0000 [ 251.081730][ T7232] loop3: detected capacity change from 0 to 512 [ 251.209556][ T7235] bridge0: port 3(gretap0) entered blocking state [ 251.211170][ T7235] bridge0: port 3(gretap0) entered disabled state [ 251.225935][ T7235] device gretap0 entered promiscuous mode [ 251.229956][ T7235] bridge0: port 3(gretap0) entered blocking state [ 251.231481][ T7235] bridge0: port 3(gretap0) entered forwarding state [ 251.381159][ T7235] device gretap0 left promiscuous mode [ 251.384058][ T7235] bridge0: port 3(gretap0) entered disabled state [ 251.892412][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.852: corrupted inode contents [ 251.895572][ T7232] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.852: mark_inode_dirty error [ 251.898746][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.852: corrupted inode contents [ 251.916191][ T7232] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.852: mark_inode_dirty error [ 251.920728][ T7232] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.852: Failed to acquire dquot type 0 [ 251.928952][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.852: corrupted inode contents [ 251.936081][ T7232] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.852: mark_inode_dirty error [ 251.940714][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.852: corrupted inode contents [ 251.949970][ T7232] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.852: mark_inode_dirty error [ 251.958041][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.852: corrupted inode contents [ 251.966525][ T7232] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 251.968738][ T7232] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.852: corrupted inode contents [ 251.973127][ T7232] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.852: mark_inode_dirty error [ 251.976681][ T7232] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 251.989951][ T7232] EXT4-fs (loop3): 1 truncate cleaned up [ 251.991100][ T7232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.532997][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 253.592599][ T7280] syz.6.864 uses obsolete (PF_INET,SOCK_PACKET) [ 253.628124][ T7283] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.865'. [ 253.941522][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.942881][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.100886][ T7299] device vlan2 entered promiscuous mode [ 254.102339][ T7299] device dummy0 entered promiscuous mode [ 254.194377][ T7303] loop3: detected capacity change from 0 to 1024 [ 254.225042][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.871'. [ 254.235900][ T7303] EXT4-fs (loop3): Ignoring removed orlov option [ 254.237260][ T7303] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 254.258932][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.268882][ T7303] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 254.283511][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.300681][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.309721][ T7306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.490842][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.873'. [ 256.021580][ T4108] Bluetooth: hci4: command 0x0406 tx timeout [ 256.526357][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 256.899794][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.922448][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.924898][ T7338] device bridge_slave_0 entered promiscuous mode [ 256.931271][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.949629][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.967578][ T7338] device bridge_slave_1 entered promiscuous mode [ 257.090089][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.891'. [ 257.136181][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.237871][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.289937][ T7338] team0: Port device team_slave_0 added [ 257.315284][ T7338] team0: Port device team_slave_1 added [ 257.483843][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.485386][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.495772][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.518905][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.528492][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.552161][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.765414][ T7338] device hsr_slave_0 entered promiscuous mode [ 257.830233][ T7338] device hsr_slave_1 entered promiscuous mode [ 257.889601][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.891214][ T7338] Cannot create hsr debugfs directory [ 257.937607][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.975359][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.019853][ T4870] Bluetooth: hci0: command 0x0409 tx timeout [ 258.051826][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'. [ 258.591701][ T7436] netlink: 'syz.6.911': attribute type 10 has an invalid length. [ 258.734465][ T7409] loop4: detected capacity change from 0 to 40427 [ 258.767589][ T7436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 258.789910][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 258.792245][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.797186][ T7409] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 258.799623][ T7409] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 258.805577][ T7409] F2FS-fs (loop4): invalid crc value [ 258.806940][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 258.808709][ T7447] qfq: no options [ 258.830338][ T7409] F2FS-fs (loop4): Found nat_bits in checkpoint [ 258.878224][ T7409] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 258.879853][ T7409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.051555][ T7409] attempt to access beyond end of device [ 259.051555][ T7409] loop4: rw=10241, want=45208, limit=40427 [ 259.192053][ T7471] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 259.534134][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.910'. [ 260.099658][ T4870] Bluetooth: hci0: command 0x041b tx timeout [ 260.345397][ T7338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.482965][ T7338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.539353][ T7338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.582265][ T7338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.798454][ T7537] udc-core: couldn't find an available UDC or it's busy [ 260.807510][ T7537] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.868348][ T7540] device bridge0 entered promiscuous mode [ 260.870373][ T7540] device macvlan2 entered promiscuous mode [ 260.900707][ T7540] bridge0: port 4(macvlan2) entered blocking state [ 260.909676][ T7540] bridge0: port 4(macvlan2) entered disabled state [ 260.919969][ T7540] device bridge0 left promiscuous mode [ 261.043320][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.094835][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.096815][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.105691][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.150364][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.152937][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.155117][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.156637][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.177827][ T7547] udc-core: couldn't find an available UDC or it's busy [ 261.182681][ T7547] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.411963][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.485987][ T7558] loop3: detected capacity change from 0 to 256 [ 262.346322][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.478300][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 262.478768][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.479139][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.479207][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.700994][ T6584] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.755297][ T7564] netlink: 'syz.6.936': attribute type 1 has an invalid length. [ 262.759903][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.762429][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.764848][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.798125][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.805215][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.813846][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.825377][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.839893][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.850290][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.858368][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.865533][ T7338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.877447][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.956911][ T6584] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.095279][ T6584] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.310714][ T6584] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.360749][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.362433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.364030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.423755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.427099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.488356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.490858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.493828][ T7338] device veth0_vlan entered promiscuous mode [ 263.519099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.522467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.553729][ T7338] device veth1_vlan entered promiscuous mode [ 263.611481][ T6584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.650613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.652864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.654891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.661544][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.676200][ T7338] device veth0_macvtap entered promiscuous mode [ 263.702218][ T7338] device veth1_macvtap entered promiscuous mode [ 263.734017][ T6584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.752522][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.761500][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.763515][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.765827][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.767803][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.794074][ T7624] udc-core: couldn't find an available UDC or it's busy [ 263.795697][ T7624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.797242][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.799243][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.803601][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.805853][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.819670][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.821751][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.823819][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.842935][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.902049][ T6584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.919003][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.921409][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.923477][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.925618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.931549][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.933517][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.935420][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.937408][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.950154][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.952336][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.954301][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.956365][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.958291][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.978400][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.983582][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.985752][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.002323][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.142279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.145580][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.151526][ T7338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.153429][ T7338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.155164][ T7338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.156900][ T7338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.185709][ T6584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.324019][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.325968][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.329350][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.399831][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.401674][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.405714][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.500016][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 265.046309][ T7660] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 265.795526][ T7661] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 266.130029][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.344966][ T7691] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 266.346565][ T7691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.967'. [ 266.529074][ T7709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.974'. [ 267.452025][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.988'. [ 267.750720][ T7772] netlink: 'syz.9.994': attribute type 8 has an invalid length. [ 268.226128][ T7803] udc-core: couldn't find an available UDC or it's busy [ 268.227701][ T7803] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.749146][ T7819] udc-core: couldn't find an available UDC or it's busy [ 268.758278][ T7819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.006298][ T7869] udc-core: couldn't find an available UDC or it's busy [ 270.012609][ T7869] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.031953][ T7871] udc-core: couldn't find an available UDC or it's busy [ 270.033970][ T7871] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.074283][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 270.249298][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 270.251391][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 270.254489][ T7883] bridge0: port 3(syz_tun) entered blocking state [ 270.272808][ T7883] bridge0: port 3(syz_tun) entered disabled state [ 270.282766][ T7883] device syz_tun entered promiscuous mode [ 270.284463][ T7883] bridge0: port 3(syz_tun) entered blocking state [ 270.286039][ T7883] bridge0: port 3(syz_tun) entered forwarding state [ 270.883535][ T7919] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1043'. [ 271.023709][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1044'. [ 272.229620][ T4077] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 272.469761][ T4077] usb 1-1: Using ep0 maxpacket: 16 [ 272.589721][ T4077] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 272.591558][ T4077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.593684][ T4077] usb 1-1: config 0 has no interface number 0 [ 272.749787][ T4077] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 272.751692][ T4077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.753588][ T4077] usb 1-1: Product: syz [ 272.754478][ T4077] usb 1-1: Manufacturer: syz [ 272.755471][ T4077] usb 1-1: SerialNumber: syz [ 272.770973][ T4077] usb 1-1: config 0 descriptor?? [ 272.979754][ T8011] loop9: detected capacity change from 0 to 16 [ 273.039656][ T4077] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 273.041264][ T4077] usb 1-1: No valid video chain found. [ 273.046920][ T4077] usb 1-1: USB disconnect, device number 3 [ 273.083629][ T8011] erofs: (device loop9): mounted with root inode @ nid 36. [ 273.302413][ T8018] attempt to access beyond end of device [ 273.302413][ T8018] loop9: rw=0, want=24, limit=16 [ 273.305256][ T8018] netlink: 'syz.9.1068': attribute type 1 has an invalid length. [ 273.309898][ T8022] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 273.630013][ T8030] device syzkaller1 entered promiscuous mode [ 273.650594][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 273.880367][ T8038] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1074'. [ 274.209024][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 275.206670][ T8059] udc-core: couldn't find an available UDC or it's busy [ 275.208206][ T8059] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 275.677389][ T8076] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 275.853243][ T8093] udc-core: couldn't find an available UDC or it's busy [ 275.854753][ T8093] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 276.498719][ T8108] input: syz0 as /devices/virtual/input/input4 [ 276.727760][ T8118] binder: 8114:8118 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 276.730847][ T8118] binder: 8114:8118 ioctl c0306201 20000080 returned -14 [ 276.898559][ T4502] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 276.901245][ T4502] Bluetooth: hci1: Injecting HCI hardware error event [ 276.904163][ T4026] Bluetooth: hci1: hardware error 0x00 [ 277.556948][ T8153] udc-core: couldn't find an available UDC or it's busy [ 277.558396][ T8153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.705773][ T8156] udc-core: couldn't find an available UDC or it's busy [ 277.707239][ T8156] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.775303][ T8157] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 279.269864][ T8180] udc-core: couldn't find an available UDC or it's busy [ 279.273610][ T8180] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 279.287966][ T8180] udc-core: couldn't find an available UDC or it's busy [ 279.298176][ T8180] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 279.861248][ T8198] udc-core: couldn't find an available UDC or it's busy [ 279.867410][ T8198] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 279.997349][ T8202] loop6: detected capacity change from 0 to 16 [ 280.150057][ T8202] erofs: (device loop6): mounted with root inode @ nid 36. [ 280.377607][ T8219] attempt to access beyond end of device [ 280.377607][ T8219] loop6: rw=0, want=24, limit=16 [ 280.381015][ T8219] netlink: 'syz.6.1123': attribute type 1 has an invalid length. [ 280.459551][ T4144] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 280.525908][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 280.546476][ T8228] udc-core: couldn't find an available UDC or it's busy [ 280.548128][ T8228] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 280.608377][ T8225] device bridge_slave_1 left promiscuous mode [ 280.623416][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.699560][ T4144] usb 1-1: Using ep0 maxpacket: 16 [ 280.859737][ T4144] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.894186][ T8225] bridge2: port 1(bridge_slave_1) entered blocking state [ 280.895740][ T8225] bridge2: port 1(bridge_slave_1) entered disabled state [ 280.897863][ T8225] device bridge_slave_1 entered promiscuous mode [ 280.948317][ T4144] usb 1-1: config 64 has an invalid interface number: 18 but max is 1 [ 280.950913][ T4144] usb 1-1: config 64 has an invalid interface number: 213 but max is 1 [ 280.952720][ T4144] usb 1-1: config 64 has no interface number 0 [ 280.954027][ T4144] usb 1-1: config 64 has no interface number 1 [ 280.955213][ T4144] usb 1-1: config 64 interface 18 has no altsetting 0 [ 280.956510][ T4144] usb 1-1: config 64 interface 213 has no altsetting 0 [ 281.119691][ T4144] usb 1-1: New USB device found, idVendor=1164, idProduct=1f08, bcdDevice=6c.27 [ 281.121674][ T4144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.123241][ T4144] usb 1-1: Product: syz [ 281.124143][ T4144] usb 1-1: Manufacturer: syz [ 281.125063][ T4144] usb 1-1: SerialNumber: syz [ 281.185061][ T8238] device batadv0 entered promiscuous mode [ 281.471263][ T4144] dvb-usb: found a 'YUAN High-Tech STK7700PH' in cold state, will try to load a firmware [ 281.514783][ T4144] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 281.516665][ T4144] dib0700: firmware download failed at 7 with -8 [ 281.558549][ T8251] udc-core: couldn't find an available UDC or it's busy [ 281.570529][ T8251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 281.580009][ T4144] dvb-usb: found a 'YUAN High-Tech STK7700PH' in cold state, will try to load a firmware [ 281.583006][ T4144] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 281.585932][ T4144] dib0700: firmware download failed at 7 with -8 [ 281.613828][ T4144] usb 1-1: USB disconnect, device number 4 [ 281.713887][ T8237] device batadv0 left promiscuous mode [ 282.415986][ T6584] device hsr_slave_0 left promiscuous mode [ 283.907529][ T6584] device hsr_slave_1 left promiscuous mode [ 284.178711][ T8316] udc-core: couldn't find an available UDC or it's busy [ 284.184337][ T8316] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 285.143154][ T8328] mmap: syz.4.1162 (8328): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 285.369906][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 285.369920][ T26] audit: type=1326 audit(285.350:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dfc81a8 code=0x7ffc0000 [ 285.380963][ T26] audit: type=1326 audit(285.360:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff9dfc81a8 code=0x7ffc0000 [ 285.399458][ T26] audit: type=1326 audit(285.360:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dfc81a8 code=0x7ffc0000 [ 285.403830][ T26] audit: type=1326 audit(285.360:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dfc81a8 code=0x7ffc0000 [ 285.459856][ T8336] udc-core: couldn't find an available UDC or it's busy [ 285.461342][ T8336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.567054][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.568723][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.585847][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.587515][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.598837][ T6584] device bridge_slave_1 left promiscuous mode [ 286.600426][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.947655][ T6584] device bridge_slave_0 left promiscuous mode [ 287.949076][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.132001][ T6584] device hsr_slave_0 left promiscuous mode [ 290.440530][ T6584] device hsr_slave_1 left promiscuous mode [ 292.668237][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.670016][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.710007][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.711576][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.769058][ T6584] device bridge_slave_1 left promiscuous mode [ 292.770605][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.858449][ T6584] device bridge_slave_0 left promiscuous mode [ 292.859815][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.204691][ T6584] device veth1_macvtap left promiscuous mode [ 295.206096][ T6584] device veth0_macvtap left promiscuous mode [ 295.207363][ T6584] device veth1_vlan left promiscuous mode [ 295.208463][ T6584] device veth0_vlan left promiscuous mode [ 297.525964][ T6584] device veth1_macvtap left promiscuous mode [ 297.527225][ T6584] device veth0_macvtap left promiscuous mode [ 297.528714][ T6584] device veth1_vlan left promiscuous mode [ 297.530023][ T6584] device veth0_vlan left promiscuous mode [ 299.109823][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 299.127680][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 299.152168][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.643543][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.435693][ T4069] Bluetooth: hci2: command 0x0409 tx timeout [ 301.305025][ T6584] bond0 (unregistering): Released all slaves [ 301.966816][ T4870] Bluetooth: hci6: command 0x0409 tx timeout [ 302.516134][ T4108] Bluetooth: hci2: command 0x041b tx timeout [ 304.037082][ T4070] Bluetooth: hci6: command 0x041b tx timeout [ 304.200556][ T4070] Bluetooth: hci7: command 0x0409 tx timeout [ 304.268943][ T4502] Bluetooth: hci8: command 0x0409 tx timeout [ 304.315425][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 304.371948][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 304.412671][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.529453][ T4070] Bluetooth: hci9: command 0x0409 tx timeout [ 304.589332][ T4502] Bluetooth: hci2: command 0x040f tx timeout [ 305.587282][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.110152][ T4502] Bluetooth: hci6: command 0x040f tx timeout [ 306.267506][ T4502] Bluetooth: hci7: command 0x041b tx timeout [ 306.346973][ T4502] Bluetooth: hci8: command 0x041b tx timeout [ 306.592342][ T4502] Bluetooth: hci9: command 0x041b tx timeout [ 306.668296][ T4502] Bluetooth: hci2: command 0x0419 tx timeout [ 308.106038][ T6584] bond0 (unregistering): Released all slaves [ 308.206516][ T4502] Bluetooth: hci6: command 0x0419 tx timeout [ 308.356951][ T4502] Bluetooth: hci7: command 0x040f tx timeout [ 308.438997][ T4502] Bluetooth: hci8: command 0x040f tx timeout [ 308.671706][ T4502] Bluetooth: hci9: command 0x040f tx timeout [ 310.444151][ T25] Bluetooth: hci7: command 0x0419 tx timeout [ 310.511332][ T25] Bluetooth: hci8: command 0x0419 tx timeout [ 310.745586][ T25] Bluetooth: hci9: command 0x0419 tx timeout [ 310.752350][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 311.103154][ T8359] chnl_net:caif_netlink_parms(): no params data found [ 311.396210][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 311.459496][ T8371] chnl_net:caif_netlink_parms(): no params data found [ 311.562936][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.564573][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.566979][ T8366] device bridge_slave_0 entered promiscuous mode [ 311.603965][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 311.754738][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.756418][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.758808][ T8366] device bridge_slave_1 entered promiscuous mode [ 311.809251][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.819456][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.822899][ T8359] device bridge_slave_0 entered promiscuous mode [ 311.949496][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.959752][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.962142][ T8359] device bridge_slave_1 entered promiscuous mode [ 312.114812][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.132717][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.305478][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.306999][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.309840][ T8371] device bridge_slave_0 entered promiscuous mode [ 312.344876][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.346318][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.348781][ T8353] device bridge_slave_0 entered promiscuous mode [ 312.389479][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.390942][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.394106][ T8364] device bridge_slave_0 entered promiscuous mode [ 312.429928][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.438077][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.460667][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.464929][ T8371] device bridge_slave_1 entered promiscuous mode [ 312.467326][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.468752][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.473832][ T8353] device bridge_slave_1 entered promiscuous mode [ 312.484857][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.497289][ T8366] team0: Port device team_slave_0 added [ 312.499051][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.529511][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.531767][ T8364] device bridge_slave_1 entered promiscuous mode [ 312.637738][ T8366] team0: Port device team_slave_1 added [ 312.687462][ T8371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.721773][ T8359] team0: Port device team_slave_0 added [ 312.845413][ T8371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.907199][ T8359] team0: Port device team_slave_1 added [ 312.912862][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.957714][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.081360][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.117356][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.118896][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.141699][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.183167][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.262295][ T8353] team0: Port device team_slave_0 added [ 313.264550][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.266068][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.290634][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.336881][ T8371] team0: Port device team_slave_0 added [ 313.359871][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.361278][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.366393][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.431915][ T8353] team0: Port device team_slave_1 added [ 313.523392][ T8371] team0: Port device team_slave_1 added [ 313.544673][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.546103][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.559111][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.632696][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.634183][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.639262][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.707554][ T8364] team0: Port device team_slave_0 added [ 313.743048][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.744539][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.771291][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.780438][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.781937][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.787178][ T8371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.871976][ T8364] team0: Port device team_slave_1 added [ 314.056017][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.057482][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.092179][ T8371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.764997][ T8359] device hsr_slave_0 entered promiscuous mode [ 314.937579][ T8359] device hsr_slave_1 entered promiscuous mode [ 315.113972][ T8366] device hsr_slave_0 entered promiscuous mode [ 315.158309][ T8366] device hsr_slave_1 entered promiscuous mode [ 315.220061][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.221740][ T8366] Cannot create hsr debugfs directory [ 315.359088][ T8371] device hsr_slave_0 entered promiscuous mode [ 315.389073][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.390462][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.451552][ T8371] device hsr_slave_1 entered promiscuous mode [ 315.530152][ T8371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.531874][ T8371] Cannot create hsr debugfs directory [ 315.753870][ T8351] bridge0: port 3(syz_tun) entered disabled state [ 315.799766][ T8351] device syz_tun left promiscuous mode [ 315.801027][ T8351] bridge0: port 3(syz_tun) entered disabled state [ 316.027950][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.029655][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.034739][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.055430][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.056901][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.068552][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.323628][ T8353] device hsr_slave_0 entered promiscuous mode [ 316.398750][ T8353] device hsr_slave_1 entered promiscuous mode [ 316.447977][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.449541][ T8353] Cannot create hsr debugfs directory [ 316.701862][ T8364] device hsr_slave_0 entered promiscuous mode [ 316.761846][ T8364] device hsr_slave_1 entered promiscuous mode [ 316.825731][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.827305][ T8364] Cannot create hsr debugfs directory [ 325.333547][ T6584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.405495][ T6584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.428400][ T6584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.488371][ T6584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.705203][ T8359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.733839][ T8359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.797252][ T6584] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.805058][ T8359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.831887][ T8359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.881510][ T6584] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.921482][ T6584] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.990604][ T6584] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.004958][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.025791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.027881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.049793][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.076761][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.079042][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.082362][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.083899][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.085788][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.087980][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.093649][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.095175][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.097054][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.117012][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.119116][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.122181][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.127426][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.136116][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.138490][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.141656][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.143780][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.161291][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.166469][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.168897][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.237059][ T6584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.248315][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.307040][ T6584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.339192][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.352770][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.354318][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.384492][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.387162][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.402500][ T6584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.410233][ T8359] device veth0_vlan entered promiscuous mode [ 326.416015][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.418225][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.421332][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.423335][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.429169][ T8359] device veth1_vlan entered promiscuous mode [ 326.448095][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.452931][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.454894][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.456981][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.467378][ T6584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.474836][ T8359] device veth0_macvtap entered promiscuous mode [ 326.478951][ T8359] device veth1_macvtap entered promiscuous mode [ 326.492443][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.494657][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.496684][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.498710][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.502707][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.504910][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.506838][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.508783][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.519451][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.521503][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.525099][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.526689][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.529040][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.532708][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.535030][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.544933][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.547222][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.549188][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.551736][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.554177][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.556719][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.558630][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.560925][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.563042][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.565092][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.568314][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.575189][ T8359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.577017][ T8359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.578776][ T8359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.581370][ T8359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.585692][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.588075][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.677849][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.679873][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.684853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.720722][ T6584] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.731467][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.733252][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.737650][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.793371][ T6584] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.803568][ T8713] binder: 8712:8713 tried to acquire reference to desc 0, got 1 instead [ 326.813854][ T25] binder: send failed reply for transaction 7 to 8712:8713 [ 326.829929][ T25] binder: undelivered TRANSACTION_COMPLETE [ 326.831608][ T25] binder: undelivered TRANSACTION_ERROR: 29189 [ 326.864646][ T6584] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.922469][ T6584] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.201902][ T6584] tipc: Disabling bearer [ 327.203155][ T6584] tipc: Left network mode [ 328.860976][ T8787] udc-core: couldn't find an available UDC or it's busy [ 328.862583][ T8787] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 329.419030][ T8815] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 329.421211][ T8815] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 329.886537][ T6584] bridge0: port 3(gretap0) entered disabled state [ 329.914609][ T6584] device gretap0 left promiscuous mode [ 329.915782][ T6584] bridge0: port 3(gretap0) entered disabled state [ 330.051514][ T8366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.098175][ T8366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.143040][ T8366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.180003][ T8366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.232032][ T8371] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.264083][ T8371] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.301752][ T8371] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.460406][ T8371] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.600408][ T8364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 330.700688][ T8364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 330.752723][ T8364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 330.761754][ T8881] binder: 8880:8881 tried to acquire reference to desc 0, got 1 instead [ 330.764530][ T8881] binder: 8880:8881 got transaction with invalid data ptr [ 330.766418][ T8881] binder: 8880:8881 transaction failed 29201/-14, size 0-24 line 3186 [ 330.769161][ T8881] binder: 8880:8881 ioctl c0306201 0 returned -14 [ 330.783700][ T8881] binder: 8880:8881 tried to acquire reference to desc 0, got 1 instead [ 330.787605][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 330.789141][ T25] binder: undelivered TRANSACTION_COMPLETE [ 330.792983][ T8364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 330.798199][ T25] binder: undelivered transaction 16, process died. [ 330.863551][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.981372][ T8353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.041546][ T8353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.073549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.075666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.101105][ T8353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.142499][ T8353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.172854][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.179303][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.182424][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.184491][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.185817][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.189133][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.219048][ T8371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.238779][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.247176][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.260905][ T6584] IPVS: stopping backup sync thread 8022 ... [ 331.262935][ T8371] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.265366][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.267774][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.271692][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.273185][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.380065][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.406743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.415903][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.418264][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.421717][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.423435][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.428125][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.504186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.509199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.514443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.519062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.525188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.527437][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.529080][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.599243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.602476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.604997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.615792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.618095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.678228][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.721352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.723770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.726394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.728815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.749024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.751998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.757843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.763061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.770296][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.777520][ T6584] bond0: (slave wlan1): Releasing backup interface [ 331.811263][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.813731][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.834531][ T8371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.838030][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.845916][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.848132][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.903788][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.905874][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.924857][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.931876][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.934252][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.937944][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.939607][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.949373][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.039886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.042444][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.044559][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.046100][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.081804][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.083568][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.174442][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.176867][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.179093][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.188916][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.191636][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.194557][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.196973][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.199162][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.219801][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.273731][ T8364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.276452][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.280095][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.282215][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.284365][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.293444][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.295268][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.343227][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 332.349953][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.391260][ T8371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.440145][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.442323][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.506122][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.508510][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.518330][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.593078][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.595532][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.597615][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.599024][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.611814][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.616143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.620415][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.622086][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.755104][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.757393][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.766123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.769008][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.774659][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.777051][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.779253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.864040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.866162][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.868028][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.870364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.880623][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.892313][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.894777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.918088][ T8982] device wlan0 entered promiscuous mode [ 332.921289][ T8982] device macsec1 entered promiscuous mode [ 332.925412][ T8982] device wlan0 left promiscuous mode [ 332.942965][ T8353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.947035][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.961716][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.993849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.996154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.998494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.003804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.006754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.016595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.028705][ T8371] device veth0_vlan entered promiscuous mode [ 333.040798][ T8366] device veth0_vlan entered promiscuous mode [ 333.047411][ T8366] device veth1_vlan entered promiscuous mode [ 333.116407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.125420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.128252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.134058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.175071][ T6584] device bridge_slave_1 left promiscuous mode [ 333.176566][ T6584] bridge2: port 1(bridge_slave_1) entered disabled state [ 333.216202][ T6584] device hsr_slave_0 left promiscuous mode [ 333.251463][ T6584] device hsr_slave_1 left promiscuous mode [ 333.342864][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.344580][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.346815][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.348314][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.352508][ T6584] device bridge_slave_0 left promiscuous mode [ 333.354006][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.405759][ T6584] device hsr_slave_0 left promiscuous mode [ 333.440077][ T6584] device hsr_slave_1 left promiscuous mode [ 333.519760][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.521293][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.523478][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.525054][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.527197][ T6584] device bridge_slave_1 left promiscuous mode [ 333.528496][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.582023][ T6584] device bridge_slave_0 left promiscuous mode [ 333.583539][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.625603][ T6584] device hsr_slave_0 left promiscuous mode [ 333.660076][ T6584] device hsr_slave_1 left promiscuous mode [ 333.749843][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.751541][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.754044][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.755742][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.758096][ T6584] device bridge_slave_1 left promiscuous mode [ 333.759684][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.801781][ T6584] device bridge_slave_0 left promiscuous mode [ 333.803295][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.845256][ T6584] device hsr_slave_0 left promiscuous mode [ 333.889894][ T6584] device hsr_slave_1 left promiscuous mode [ 333.969772][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.971511][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.974030][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.975650][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.977887][ T6584] device bridge_slave_1 left promiscuous mode [ 333.979368][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.032256][ T6584] device bridge_slave_0 left promiscuous mode [ 334.033930][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.199773][ T6584] device veth1_macvtap left promiscuous mode [ 334.201027][ T6584] device veth0_macvtap left promiscuous mode [ 334.202309][ T6584] device veth1_vlan left promiscuous mode [ 334.203578][ T6584] device veth0_vlan left promiscuous mode [ 334.206057][ T6584] device dummy0 left promiscuous mode [ 334.289864][ T6584] device veth1_macvtap left promiscuous mode [ 334.291119][ T6584] device veth0_macvtap left promiscuous mode [ 334.292374][ T6584] device veth1_vlan left promiscuous mode [ 334.293685][ T6584] device veth0_vlan left promiscuous mode [ 334.379759][ T6584] device veth1_macvtap left promiscuous mode [ 334.381148][ T6584] device veth0_macvtap left promiscuous mode [ 334.382353][ T6584] device veth1_vlan left promiscuous mode [ 334.383617][ T6584] device veth0_vlan left promiscuous mode [ 334.470286][ T6584] device veth1_macvtap left promiscuous mode [ 334.471562][ T6584] device veth0_macvtap left promiscuous mode [ 334.472975][ T6584] device veth1_vlan left promiscuous mode [ 334.474168][ T6584] device veth0_vlan left promiscuous mode [ 335.284374][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 335.294614][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 335.303062][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.347811][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.505159][ T6584] bond0 (unregistering): Released all slaves [ 335.707493][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 335.720634][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 335.729201][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.781330][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.928333][ T6584] bond0 (unregistering): Released all slaves [ 336.138487][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 336.147651][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 336.173424][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.217503][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.366655][ T6584] bond0 (unregistering): Released all slaves [ 336.576279][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 336.592812][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 336.604789][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.668262][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.837917][ T6584] bond0 (unregistering): Released all slaves [ 336.935971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.938131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.940342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.942749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.950892][ T8371] device veth1_vlan entered promiscuous mode [ 336.970043][ T8994] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 336.981999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.983558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.026093][ T8366] device veth0_macvtap entered promiscuous mode [ 337.048341][ T8366] device veth1_macvtap entered promiscuous mode [ 337.080106][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.082043][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.084364][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.087107][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.115536][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.118146][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.181116][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.183514][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.186033][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.188975][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.210307][ T8371] device veth0_macvtap entered promiscuous mode [ 337.220989][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.223787][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.225826][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.227975][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.232945][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.236088][ T8364] device veth0_vlan entered promiscuous mode [ 337.260240][ T8371] device veth1_macvtap entered promiscuous mode [ 337.275720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.277938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.281350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.290474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.321358][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.323477][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.326852][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.329154][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.334848][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.351662][ T8366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.353465][ T8366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.355350][ T8366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.385235][ T8366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.395223][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.397588][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.410831][ T8364] device veth1_vlan entered promiscuous mode [ 337.430950][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.433197][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.435329][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.437368][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.439362][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.468729][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.474730][ T8371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.480779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 337.481328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.481927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.542162][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.542185][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.542201][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.542214][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.542226][ T8371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.542238][ T8371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.543528][ T8371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.547211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.547780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.548240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.548725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.549205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.605544][ T8371] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.605578][ T8371] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.605602][ T8371] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.605625][ T8371] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.614502][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.615114][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.632031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.632562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.637626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.638116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.682045][ T8364] device veth0_macvtap entered promiscuous mode [ 337.685010][ T8364] device veth1_macvtap entered promiscuous mode [ 337.724042][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.726028][ T8353] device veth0_vlan entered promiscuous mode [ 337.726471][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.737390][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.741192][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.745117][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.860294][ T8353] device veth1_vlan entered promiscuous mode [ 337.907002][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.909267][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.936702][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.938809][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.948515][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.956034][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.958191][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.967179][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.971063][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.975426][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.977427][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.012520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.021376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.024590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.036263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.121787][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.123853][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.125830][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.127989][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.142649][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.145377][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.147351][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.159754][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.163089][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.166722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.168977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.228681][ T8353] device veth0_macvtap entered promiscuous mode [ 338.265731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.267987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.271834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.281374][ T8364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.283145][ T8364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.297511][ T8364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.320111][ T8364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.352362][ T8353] device veth1_macvtap entered promiscuous mode [ 338.366340][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.368255][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.384762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 338.386937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.511075][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.516155][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.523495][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.530447][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.536614][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.541521][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.549032][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.551862][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.553841][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.561480][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.568986][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.587200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.592449][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.608912][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.612501][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.617091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.735901][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.739584][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.745987][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.749963][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.766714][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.769028][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.782620][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.786337][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.789871][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.792349][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.836930][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.860320][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.863104][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.897404][ T8353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.906747][ T8353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.915241][ T8353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.926272][ T8353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.976394][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.978391][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.987390][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.155896][ T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.160589][ T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.237742][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.267265][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.269341][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.282841][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.360163][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.362022][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.370195][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.433462][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1176'. [ 339.446055][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1176'. [ 339.456928][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1176'. [ 339.602377][ T9087] loop1: detected capacity change from 0 to 1024 [ 339.645692][ T9087] EXT4-fs (loop1): Ignoring removed orlov option [ 339.648256][ T9087] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 339.726860][ T9087] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 339.775304][ T9102] loop7: detected capacity change from 0 to 16 [ 339.889603][ T9102] erofs: (device loop7): mounted with root inode @ nid 36. [ 340.060470][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 341.016519][ T9110] attempt to access beyond end of device [ 341.016519][ T9110] loop7: rw=0, want=24, limit=16 [ 341.019498][ T9110] netlink: 'syz.7.1212': attribute type 1 has an invalid length. [ 341.240373][ T9106] udc-core: couldn't find an available UDC or it's busy [ 341.241827][ T9106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.791357][ T9150] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 346.119927][ T9175] loop5: detected capacity change from 0 to 16 [ 346.181378][ T9175] erofs: (device loop5): mounted with root inode @ nid 36. [ 346.511409][ T9187] attempt to access beyond end of device [ 346.511409][ T9187] loop5: rw=0, want=24, limit=16 [ 346.532272][ T9187] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 347.090042][ T9194] loop8: detected capacity change from 0 to 1024 [ 347.095213][ T9194] EXT4-fs (loop8): Ignoring removed orlov option [ 347.096598][ T9194] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 347.234426][ T9194] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 347.249292][ T9195] device wlan0 entered promiscuous mode [ 347.251348][ T9195] device macsec1 entered promiscuous mode [ 347.348829][ T9195] device wlan0 left promiscuous mode [ 349.436042][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1227'. [ 350.001949][ T9244] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 350.438301][ T9252] binder: tried to use weak ref as strong ref [ 350.450258][ T9252] binder: 9251:9252 Acquire 1 refcount change on invalid ref 0 ret -22 [ 350.463500][ T9252] binder: 9251:9252 got transaction to invalid handle, 1 [ 350.507063][ T9252] binder: 9251:9252 transaction failed 29201/-22, size 0-0 line 2917 [ 350.525300][ T4108] binder: undelivered TRANSACTION_ERROR: 29201 [ 350.768176][ T9260] loop1: detected capacity change from 0 to 16 [ 350.843272][ T9260] erofs: (device loop1): mounted with root inode @ nid 36. [ 351.116084][ T9265] attempt to access beyond end of device [ 351.116084][ T9265] loop1: rw=0, want=24, limit=16 [ 351.140414][ T9265] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 352.626488][ T9283] udc-core: couldn't find an available UDC or it's busy [ 352.628086][ T9283] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 354.318659][ T9316] loop5: detected capacity change from 0 to 1024 [ 354.340559][ T9318] binder: tried to use weak ref as strong ref [ 354.341899][ T9318] binder: 9317:9318 Acquire 1 refcount change on invalid ref 0 ret -22 [ 354.344220][ T9318] binder: 9317:9318 got transaction to invalid handle, 1 [ 354.345596][ T9318] binder: 9317:9318 transaction failed 29201/-22, size 0-0 line 2917 [ 354.369864][ T4144] binder: undelivered TRANSACTION_ERROR: 29201 [ 354.383731][ T9316] EXT4-fs (loop5): Ignoring removed orlov option [ 354.385152][ T9316] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 354.480721][ T9316] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 355.493997][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 356.315179][ T9338] udc-core: couldn't find an available UDC or it's busy [ 356.316788][ T9338] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 356.429977][ T9344] loop5: detected capacity change from 0 to 1024 [ 356.440378][ T9344] EXT4-fs (loop5): Ignoring removed orlov option [ 356.441760][ T9344] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 356.486239][ T9344] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 356.788842][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1267'. [ 356.826524][ T6584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.944201][ T6584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.074106][ T6584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.373433][ T6584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.930997][ T9387] loop8: detected capacity change from 0 to 16 [ 357.974089][ T9387] erofs: (device loop8): mounted with root inode @ nid 36. [ 358.110800][ T9395] binder: tried to use weak ref as strong ref [ 358.112011][ T9395] binder: 9393:9395 Acquire 1 refcount change on invalid ref 0 ret -22 [ 358.129981][ T9395] binder: 9393:9395 got transaction to invalid handle, 1 [ 358.131478][ T9395] binder: 9393:9395 transaction failed 29201/-22, size 0-0 line 2917 [ 358.961242][ T4144] binder: undelivered TRANSACTION_ERROR: 29201 [ 359.136265][ T9400] attempt to access beyond end of device [ 359.136265][ T9400] loop8: rw=0, want=24, limit=16 [ 359.158764][ T9400] netlink: 'syz.8.1270': attribute type 1 has an invalid length. [ 359.163733][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 359.308139][ T9408] netlink: 'syz.5.1273': attribute type 15 has an invalid length. [ 359.688477][ T9419] loop5: detected capacity change from 0 to 1024 [ 360.726040][ T9419] EXT4-fs (loop5): Ignoring removed orlov option [ 360.727371][ T9419] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 360.823118][ T9419] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 361.076849][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1276'. [ 362.837908][ T9460] binder: BINDER_SET_CONTEXT_MGR already set [ 362.860996][ T9460] binder: 9459:9460 ioctl 4018620d 20000100 returned -16 [ 362.880474][ T9460] binder: 9459:9460 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 362.883863][ T9460] binder: 9459:9460 got transaction to invalid handle, 1 [ 362.885314][ T9460] binder: 9459:9460 transaction failed 29201/-22, size 0-24 line 2917 [ 362.913874][ T9460] binder: 9459:9460 ioctl c0306201 0 returned -14 [ 362.915442][ T9460] binder: 9459:9460 got transaction to invalid handle, 1 [ 362.916975][ T9460] binder: 9459:9460 transaction failed 29201/-22, size 0-0 line 2917 [ 362.939724][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 362.941251][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 363.018514][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 363.370826][ T9481] udc-core: couldn't find an available UDC or it's busy [ 363.372273][ T9481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 363.402779][ T9482] loop7: detected capacity change from 0 to 1024 [ 363.456466][ T9482] EXT4-fs (loop7): Ignoring removed orlov option [ 363.457840][ T9482] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 363.547835][ T9482] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 363.806991][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1290'. [ 365.199885][ T9520] binder: 9517:9520 tried to acquire reference to desc 0, got 1 instead [ 365.202494][ T9520] binder: 9517:9520 got transaction with invalid data ptr [ 365.204158][ T9520] binder: 9517:9520 transaction failed 29201/-14, size 0-24 line 3186 [ 365.206219][ T9520] binder: 9517:9520 ioctl c0306201 0 returned -14 [ 365.208071][ T9520] binder: 9517:9520 got transaction to invalid handle, 1 [ 365.210130][ T9520] binder: 9517:9520 transaction failed 29201/-22, size 0-0 line 2917 [ 365.230384][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.233997][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.667093][ T9536] input: syz0 as /devices/virtual/input/input5 [ 365.756126][ T9540] loop7: detected capacity change from 0 to 16 [ 365.865063][ T9540] erofs: (device loop7): mounted with root inode @ nid 36. [ 366.176272][ T9556] attempt to access beyond end of device [ 366.176272][ T9556] loop7: rw=0, want=24, limit=16 [ 366.188250][ T9555] binder: 9554:9555 tried to acquire reference to desc 0, got 1 instead [ 366.204122][ T9555] binder: 9554:9555 got transaction with invalid data ptr [ 366.205590][ T9556] netlink: 'syz.7.1302': attribute type 1 has an invalid length. [ 366.215826][ T9555] binder: 9554:9555 transaction failed 29201/-14, size 0-24 line 3186 [ 366.218064][ T9555] binder: 9554:9555 ioctl c0306201 0 returned -14 [ 366.224552][ T9555] binder: 9554:9555 got transaction to invalid handle, 1 [ 366.237179][ T9555] binder: 9554:9555 transaction failed 29201/-22, size 0-0 line 2917 [ 366.244425][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 366.245921][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 366.453167][ T9565] loop8: detected capacity change from 0 to 1024 [ 366.507991][ T9565] EXT4-fs (loop8): Ignoring removed orlov option [ 366.510409][ T9565] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 366.567829][ T9565] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 366.850369][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1309'. [ 368.482884][ T9599] netlink: 'syz.8.1315': attribute type 3 has an invalid length. [ 368.484481][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1315'. [ 368.872148][ T9613] binder: 9612:9613 tried to acquire reference to desc 0, got 1 instead [ 368.914259][ T9613] binder: 9612:9613 got transaction with invalid data ptr [ 368.915949][ T9613] binder: 9612:9613 transaction failed 29201/-14, size 0-24 line 3186 [ 368.920980][ T9613] binder: 9612:9613 tried to acquire reference to desc 0, got 1 instead [ 368.929372][ T4067] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.931064][ T4067] binder: undelivered TRANSACTION_COMPLETE [ 368.941256][ T6584] device hsr_slave_0 left promiscuous mode [ 368.969573][ T4067] binder: undelivered transaction 56, process died. [ 369.010294][ T6584] device hsr_slave_1 left promiscuous mode [ 369.079790][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.081292][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.084538][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.086158][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.104870][ T6584] device bridge_slave_1 left promiscuous mode [ 369.106231][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.354911][ T6584] device bridge_slave_0 left promiscuous mode [ 369.356549][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.387573][ T9628] loop2: detected capacity change from 0 to 1024 [ 369.485475][ T9628] EXT4-fs (loop2): Ignoring removed orlov option [ 369.486762][ T9628] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 369.499753][ T6584] device veth1_macvtap left promiscuous mode [ 369.501168][ T6584] device veth0_macvtap left promiscuous mode [ 369.502663][ T6584] device veth1_vlan left promiscuous mode [ 369.504700][ T6584] device veth0_vlan left promiscuous mode [ 369.541176][ T9628] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 371.224208][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 371.280771][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 371.325231][ T9649] udc-core: couldn't find an available UDC or it's busy [ 371.329882][ T9649] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 371.333122][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.390764][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.548861][ T6584] bond0 (unregistering): Released all slaves [ 371.668458][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 371.820361][ T9657] binder: BINDER_SET_CONTEXT_MGR already set [ 371.821874][ T9657] binder: 9656:9657 ioctl 4018620d 20000100 returned -16 [ 371.832124][ T9657] binder: 9656:9657 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 371.850863][ T9657] binder: 9656:9657 got transaction to invalid handle, 1 [ 371.852432][ T9657] binder: 9656:9657 transaction failed 29201/-22, size 0-24 line 2917 [ 371.862738][ T9657] binder: 9656:9657 tried to acquire reference to desc 0, got 1 instead [ 371.865501][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 371.866940][ T21] binder: undelivered TRANSACTION_COMPLETE [ 371.935809][ T21] binder: undelivered transaction 63, process died. [ 372.015152][ T9665] loop1: detected capacity change from 0 to 16 [ 372.070420][ T9665] erofs: (device loop1): mounted with root inode @ nid 36. [ 372.327024][ T9674] netlink: 'syz.7.1335': attribute type 1 has an invalid length. [ 373.560380][ T9687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.709315][ T9693] syz.7.1339 sent an empty control message without MSG_MORE. [ 373.790631][ T9701] attempt to access beyond end of device [ 373.790631][ T9701] loop1: rw=0, want=24, limit=16 [ 373.793451][ T9701] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 373.798977][ T9699] loop5: detected capacity change from 0 to 1024 [ 373.851052][ T9699] EXT4-fs (loop5): Ignoring removed orlov option [ 373.852725][ T9699] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 373.884635][ T9702] binder: 9700:9702 tried to acquire reference to desc 0, got 1 instead [ 373.919116][ T9702] binder: 9700:9702 got transaction with invalid data ptr [ 373.924516][ T9699] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 373.929621][ T9702] binder: 9700:9702 transaction failed 29201/-14, size 0-24 line 3186 [ 373.931531][ T9702] binder: 9700:9702 tried to acquire reference to desc 0, got 1 instead [ 373.972878][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 373.974419][ T4070] binder: undelivered TRANSACTION_COMPLETE [ 373.988496][ T9708] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 374.221139][ T4502] binder: undelivered transaction 72, process died. [ 374.260747][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1340'. [ 374.568280][ T9724] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 375.975974][ T9746] udc-core: couldn't find an available UDC or it's busy [ 375.978703][ T9746] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 376.097167][ T9752] binder: 9751:9752 tried to acquire reference to desc 0, got 1 instead [ 376.100176][ T9752] binder: 9751:9752 tried to acquire reference to desc 0, got 1 instead [ 376.104316][ T4502] binder: undelivered TRANSACTION_COMPLETE [ 376.116658][ T4502] binder: undelivered transaction 80, process died. [ 376.227191][ T9755] loop2: detected capacity change from 0 to 16 [ 376.266912][ T9755] erofs: (device loop2): mounted with root inode @ nid 36. [ 376.645346][ T9769] loop7: detected capacity change from 0 to 1024 [ 376.648177][ T9771] udc-core: couldn't find an available UDC or it's busy [ 376.651666][ T9771] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 376.694434][ T9769] EXT4-fs (loop7): Ignoring removed orlov option [ 376.695750][ T9769] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 376.762880][ T9769] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 376.821174][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.822521][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.534197][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1358'. [ 377.991484][ T9802] binder: 9800:9802 tried to acquire reference to desc 0, got 1 instead [ 378.017899][ T9802] binder: 9800:9802 tried to acquire reference to desc 0, got 1 instead [ 378.051950][ T5308] binder: undelivered TRANSACTION_COMPLETE [ 378.119004][ T4070] binder: undelivered transaction 88, process died. [ 379.577569][ T9836] loop8: detected capacity change from 0 to 16 [ 379.582331][ T9834] loop7: detected capacity change from 0 to 1024 [ 379.596138][ T9834] EXT4-fs (loop7): Ignoring removed orlov option [ 379.598460][ T9834] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 379.626265][ T9836] erofs: (device loop8): mounted with root inode @ nid 36. [ 379.696879][ T9834] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 379.920924][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1375'. [ 379.963004][ T9847] attempt to access beyond end of device [ 379.963004][ T9847] loop8: rw=0, want=24, limit=16 [ 379.966038][ T9847] netlink: 'syz.8.1374': attribute type 1 has an invalid length. [ 380.075050][ T9849] binder: 9846:9849 tried to acquire reference to desc 0, got 1 instead [ 380.105852][ T9849] binder: 9846:9849 tried to acquire reference to desc 0, got 1 instead [ 380.142486][ T4070] binder: undelivered TRANSACTION_COMPLETE [ 380.212570][ T5308] binder: undelivered transaction 96, process died. [ 382.238855][ T9890] binder: 9889:9890 got transaction to invalid handle, 1 [ 382.259544][ T9890] binder: 9889:9890 transaction failed 29201/-22, size 0-24 line 2917 [ 382.265445][ T9890] binder: 9889:9890 tried to acquire reference to desc 0, got 1 instead [ 382.286635][ T4502] binder: undelivered TRANSACTION_ERROR: 29201 [ 382.288062][ T4502] binder: undelivered TRANSACTION_COMPLETE [ 382.317138][ T4502] binder: undelivered transaction 104, process died. [ 382.414343][ T9902] loop7: detected capacity change from 0 to 1024 [ 382.474899][ T9902] EXT4-fs (loop7): Ignoring removed orlov option [ 382.476231][ T9902] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 382.532075][ T9902] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 382.795878][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1390'. [ 385.473923][ T9947] binder: 9946:9947 got transaction to invalid handle, 1 [ 385.475435][ T9947] binder: 9946:9947 transaction failed 29201/-22, size 0-24 line 2917 [ 385.500198][ T9947] binder: 9946:9947 tried to acquire reference to desc 0, got 1 instead [ 385.510603][ T4502] binder: undelivered TRANSACTION_ERROR: 29201 [ 385.512046][ T4502] binder: undelivered TRANSACTION_COMPLETE [ 385.545581][ T4502] binder: undelivered transaction 112, process died. [ 385.653768][ T9961] udc-core: couldn't find an available UDC or it's busy [ 385.655216][ T9961] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 387.245923][ T9989] loop1: detected capacity change from 0 to 16 [ 387.324420][ T9989] erofs: (device loop1): mounted with root inode @ nid 36. [ 387.511362][ T9993] udc-core: couldn't find an available UDC or it's busy [ 387.512799][ T9993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 387.669064][T10000] binder: 9999:10000 got transaction to invalid handle, 1 [ 387.673391][T10000] binder: 9999:10000 transaction failed 29201/-22, size 0-24 line 2917 [ 387.675748][T10000] binder: 9999:10000 tried to acquire reference to desc 0, got 1 instead [ 387.684293][ T5309] binder: undelivered TRANSACTION_ERROR: 29201 [ 387.685775][ T5309] binder: undelivered TRANSACTION_COMPLETE [ 387.711497][ T5309] binder: undelivered transaction 120, process died. [ 387.827257][T10006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.948436][T10006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.190580][T10026] attempt to access beyond end of device [ 388.190580][T10026] loop1: rw=0, want=24, limit=16 [ 388.212285][T10026] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 388.765859][T10047] loop7: detected capacity change from 0 to 1024 [ 388.862166][T10047] EXT4-fs (loop7): Ignoring removed orlov option [ 388.863571][T10047] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 388.948732][T10047] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 389.866923][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1425'. [ 390.755871][T10065] binder: tried to use weak ref as strong ref [ 390.757445][T10065] binder: 10064:10065 Acquire 1 refcount change on invalid ref 0 ret -22 [ 390.763574][T10065] binder: 10064:10065 got transaction to invalid handle, 1 [ 390.765233][T10065] binder: 10064:10065 transaction failed 29201/-22, size 0-24 line 2917 [ 390.767329][T10065] binder: tried to use weak ref as strong ref [ 390.768732][T10065] binder: 10064:10065 Acquire 1 refcount change on invalid ref 0 ret -22 [ 390.773086][T10065] binder: 10064:10065 got transaction to invalid handle, 1 [ 390.774759][T10065] binder: 10064:10065 transaction failed 29201/-22, size 0-0 line 2917 [ 390.779811][ T4112] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.781252][ T4112] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.538130][T10098] binder: tried to use weak ref as strong ref [ 391.539364][T10098] binder: 10096:10098 Acquire 1 refcount change on invalid ref 0 ret -22 [ 391.547401][T10098] binder: 10096:10098 got transaction to invalid handle, 1 [ 391.553625][T10099] loop7: detected capacity change from 0 to 1024 [ 391.557057][T10098] binder: 10096:10098 transaction failed 29201/-22, size 0-24 line 2917 [ 391.569117][T10098] binder: tried to use weak ref as strong ref [ 391.579708][T10098] binder: 10096:10098 Acquire 1 refcount change on invalid ref 0 ret -22 [ 391.588808][T10098] binder: 10096:10098 got transaction to invalid handle, 1 [ 391.598761][T10098] binder: 10096:10098 transaction failed 29201/-22, size 0-0 line 2917 [ 391.610673][T10099] EXT4-fs (loop7): Ignoring removed orlov option [ 391.612106][T10099] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 391.613336][ T4502] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.615186][ T4502] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.672250][T10099] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 392.141166][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1437'. [ 394.478479][T10135] udc-core: couldn't find an available UDC or it's busy [ 394.499678][T10135] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 395.047880][T10155] binder: tried to use weak ref as strong ref [ 395.049165][T10155] binder: 10154:10155 Acquire 1 refcount change on invalid ref 0 ret -22 [ 395.063571][T10155] binder: 10154:10155 got transaction to invalid handle, 1 [ 395.072603][T10155] binder: 10154:10155 transaction failed 29201/-22, size 0-24 line 2917 [ 395.077069][T10155] binder: tried to use weak ref as strong ref [ 395.083052][T10155] binder: 10154:10155 Acquire 1 refcount change on invalid ref 0 ret -22 [ 395.088849][T10155] binder: 10154:10155 got transaction to invalid handle, 1 [ 395.095615][T10155] binder: 10154:10155 transaction failed 29201/-22, size 0-0 line 2917 [ 395.101596][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 395.103218][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 395.204164][T10163] loop7: detected capacity change from 0 to 1024 [ 395.236182][T10163] EXT4-fs (loop7): Ignoring removed orlov option [ 395.237555][T10163] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 395.295831][T10170] netlink: 134672 bytes leftover after parsing attributes in process `syz.8.1453'. [ 395.303832][T10163] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 395.324373][T10170] netlink: zone id is out of range [ 395.325587][T10170] netlink: zone id is out of range [ 395.326639][T10170] netlink: zone id is out of range [ 395.327819][T10170] netlink: zone id is out of range [ 395.355873][T10170] netlink: get zone limit has 4 unknown bytes [ 395.456100][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1454'. [ 395.872514][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1451'. [ 396.674356][T10190] udc-core: couldn't find an available UDC or it's busy [ 396.675971][T10190] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 396.757472][T10192] loop5: detected capacity change from 0 to 16 [ 396.795012][T10192] erofs: (device loop5): mounted with root inode @ nid 36. [ 397.467924][T10209] binder: 10208:10209 tried to acquire reference to desc 0, got 1 instead [ 397.476543][T10209] binder_alloc: 10208: binder_alloc_buf, no vma [ 397.478285][T10209] binder: 10208:10209 transaction failed 29189/-3, size 0-24 line 3085 [ 397.487927][T10209] binder: 10208:10209 tried to acquire reference to desc 0, got 1 instead [ 397.490970][T10209] binder_alloc: 10208: binder_alloc_buf, no vma [ 397.493370][T10209] binder: 10208:10209 transaction failed 29189/-3, size 0-0 line 3085 [ 397.495912][ T4071] binder: undelivered TRANSACTION_ERROR: 29189 [ 397.497805][ T4071] binder: undelivered TRANSACTION_ERROR: 29189 [ 397.922825][T10235] loop2: detected capacity change from 0 to 1024 [ 397.974026][T10235] EXT4-fs (loop2): Ignoring removed orlov option [ 397.975581][T10235] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 398.030822][T10235] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,sb=0xffffffffffffffe0,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 398.090142][T10248] attempt to access beyond end of device [ 398.090142][T10248] loop5: rw=0, want=24, limit=16 [ 398.114226][T10248] netlink: 'syz.5.1459': attribute type 1 has an invalid length. [ 399.300028][T10259] binder: 10258:10259 tried to acquire reference to desc 0, got 1 instead [ 399.302351][T10259] binder_alloc: 10258: binder_alloc_buf, no vma [ 399.303669][T10259] binder: 10258:10259 transaction failed 29189/-3, size 0-24 line 3085 [ 399.325971][T10259] binder: 10258:10259 tried to acquire reference to desc 0, got 1 instead [ 399.336283][T10259] binder_alloc: 10258: binder_alloc_buf, no vma [ 399.341307][T10259] binder: 10258:10259 transaction failed 29189/-3, size 0-0 line 3085 [ 399.344290][ T4071] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.345855][ T4071] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.605047][T10272] udc-core: couldn't find an available UDC or it's busy [ 399.606591][T10272] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 399.790917][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'. [ 400.068880][T10288] udc-core: couldn't find an available UDC or it's busy [ 400.071748][T10288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 400.501599][T10300] udc-core: couldn't find an available UDC or it's busy [ 400.503122][T10300] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 400.538380][ T4026] Bluetooth: hci8: Unknown advertising packet type: 0x200 [ 400.538526][ T4026] ================================================================== [ 400.542024][ T4026] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdd0/0x31c0 [ 400.543579][ T4026] Read of size 1 at addr ffff0000e687c406 by task kworker/u5:3/4026 [ 400.545256][ T4026] [ 400.545714][ T4026] CPU: 0 PID: 4026 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0 [ 400.547428][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.549518][ T4026] Workqueue: hci8 hci_rx_work [ 400.550478][ T4026] Call trace: [ 400.551106][ T4026] dump_backtrace+0x0/0x530 [ 400.551969][ T4026] show_stack+0x2c/0x3c [ 400.552805][ T4026] dump_stack_lvl+0x108/0x170 [ 400.553899][ T4026] print_address_description+0x7c/0x3f0 [ 400.555138][ T4026] kasan_report+0x174/0x1e4 [ 400.556003][ T4026] __asan_report_load1_noabort+0x44/0x50 [ 400.557173][ T4026] hci_le_meta_evt+0xdd0/0x31c0 [ 400.558159][ T4026] hci_event_packet+0xd34/0x12b4 [ 400.559136][ T4026] hci_rx_work+0x1c0/0x7c4 [ 400.560056][ T4026] process_one_work+0x790/0x11b8 [ 400.561100][ T4026] worker_thread+0x910/0x1034 [ 400.562087][ T4026] kthread+0x37c/0x45c [ 400.562950][ T4026] ret_from_fork+0x10/0x20 [ 400.563845][ T4026] [ 400.564297][ T4026] Allocated by task 10300: [ 400.565224][ T4026] ____kasan_kmalloc+0xbc/0xfc [ 400.566193][ T4026] __kasan_kmalloc+0x10/0x1c [ 400.567118][ T4026] __kmalloc_node_track_caller+0x234/0x448 [ 400.568322][ T4026] kmalloc_reserve+0xe8/0x270 [ 400.569308][ T4026] __alloc_skb+0x1a4/0x584 [ 400.570243][ T4026] vhci_write+0xb8/0x3b8 [ 400.571205][ T4026] vfs_write+0x884/0xb44 [ 400.572071][ T4026] ksys_write+0x15c/0x26c [ 400.572994][ T4026] __arm64_sys_write+0x7c/0x90 [ 400.574019][ T4026] invoke_syscall+0x98/0x2b8 [ 400.575015][ T4026] el0_svc_common+0x138/0x258 [ 400.576014][ T4026] do_el0_svc+0x58/0x14c [ 400.576902][ T4026] el0_svc+0x7c/0x1f0 [ 400.577744][ T4026] el0t_64_sync_handler+0x84/0xe4 [ 400.578880][ T4026] el0t_64_sync+0x1a0/0x1a4 [ 400.579849][ T4026] [ 400.580350][ T4026] The buggy address belongs to the object at ffff0000e687c000 [ 400.580350][ T4026] which belongs to the cache kmalloc-1k of size 1024 [ 400.583119][ T4026] The buggy address is located 6 bytes to the right of [ 400.583119][ T4026] 1024-byte region [ffff0000e687c000, ffff0000e687c400) [ 400.586230][ T4026] The buggy address belongs to the page: [ 400.587334][ T4026] page:00000000e2c6ae35 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126878 [ 400.589333][ T4026] head:00000000e2c6ae35 order:3 compound_mapcount:0 compound_pincount:0 [ 400.590967][ T4026] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 400.592656][ T4026] raw: 05ffc00000010200 fffffc0003734a00 0000000300000003 ffff0000c0002780 [ 400.594305][ T4026] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 400.595958][ T4026] page dumped because: kasan: bad access detected [ 400.597305][ T4026] [ 400.597749][ T4026] Memory state around the buggy address: [ 400.598863][ T4026] ffff0000e687c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.600435][ T4026] ffff0000e687c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.602015][ T4026] >ffff0000e687c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.603593][ T4026] ^ [ 400.604388][ T4026] ffff0000e687c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.605994][ T4026] ffff0000e687c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.607519][ T4026] ================================================================== [ 400.609088][ T4026] Disabling lock debugging due to kernel taint