last executing test programs: 2.45226267s ago: executing program 1 (id=1496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2.451703039s ago: executing program 1 (id=1497): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) 2.387696701s ago: executing program 1 (id=1498): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xff, 0x200, 0x4, 0x2, r8}, 0x10) write$rfkill(r6, &(0x7f0000000080)={0x80000, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.244465235s ago: executing program 0 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x851, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.334766747s ago: executing program 0 (id=1513): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt(r1, 0xc8, 0x16, 0x0, 0x62) 1.332339667s ago: executing program 3 (id=1514): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4076, 0xfec}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/4083, 0x1055}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) 1.268121299s ago: executing program 3 (id=1515): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 1.267865789s ago: executing program 0 (id=1516): syz_emit_ethernet(0x22, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) read(r0, &(0x7f0000000240)=""/155, 0x9b) 1.259652619s ago: executing program 3 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 1.110634943s ago: executing program 3 (id=1518): openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 908.125108ms ago: executing program 1 (id=1519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r0], 0xb8}}, 0x20040014) 897.856328ms ago: executing program 1 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000300)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 708.019182ms ago: executing program 1 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x851, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 613.078605ms ago: executing program 4 (id=1526): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x2400c040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$NFT_BATCH(r3, 0x0, 0x20000044) getsockopt(r0, 0xb, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) 547.007697ms ago: executing program 4 (id=1527): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 488.568098ms ago: executing program 4 (id=1530): setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x8}, 0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000d40), &(0x7f0000000d80)=0x30) 403.95786ms ago: executing program 4 (id=1532): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 397.89959ms ago: executing program 2 (id=1534): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x87, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xae, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x6, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x3, 0x5, 0x2, 0x7f6e, 0x7f, 0x0, 0x5, 0x5]}, &(0x7f00000001c0)=0x100) 364.281641ms ago: executing program 2 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 334.100222ms ago: executing program 4 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="5c41afe82f065523d45df0ccae1b1da1a4d3b4b6265afd3b2da33459a4dbe47792d48f51c105c8c005c957f9b3813840ec3b929f46b724ca594c7431b474b5db3ff536bf7465ce55c92dd9ee3de6a7467a76c7b512e7d386b3a4c2baf687be553db5d571c1568588dc0d97eee86b37aa4e33c69f4b815b285a67cd7493273b7717ded5a2", 0x84) 290.382913ms ago: executing program 2 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000010}, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) 289.726203ms ago: executing program 4 (id=1538): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioprio_get$pid(0x1, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x410040, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) 212.259585ms ago: executing program 0 (id=1539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000780)={@local, @empty, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "6e08b83b119dc904"}}}}, 0x0) 185.676846ms ago: executing program 2 (id=1540): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 185.148326ms ago: executing program 0 (id=1541): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="4c00000011000e14001100020000060002000000200000", 0x17) 168.201796ms ago: executing program 3 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x2004c895) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 126.928837ms ago: executing program 2 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000900)={0x21, 0x1e, '\x00', [@generic={0xe, 0xec, "535955cbe89cc8327986c7f0f576b04015f4f6e42cfd2cf69276ed2a427d6a277e0aec92a0274e57b2bb0d61c06f68afed6e8051ade0ef4ac1318c1757dee3410f0331f464f74f442a041522e6316edd5d0a38c6456eb6b525ed121e7f35bcca616d0fd321418d3327cceb35857df3d60b457d6e5400aa17309e2a6416ed4a1070c5093fde5af72697e341fafef991ebd15fa26054b8588ad0f073a7dc038afea4e64a317d36e230da8166c7fd5b94791e77ab09e8cf5909cd9012fd90915da459202b62417ede557695e9fb7167ad06563417ba6cadb98c618cca072321b169114f31a1126f62dcd0006343"}, @padn]}, 0xf8) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 126.637077ms ago: executing program 0 (id=1544): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 166.8µs ago: executing program 2 (id=1545): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x87, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xae, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x6, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x3, 0x5, 0x2, 0x7f6e, 0x7f, 0x0, 0x5, 0x5]}, &(0x7f00000001c0)=0x100) 0s ago: executing program 3 (id=1546): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 29.459773][ T4317] cgroup: Unknown subsys name 'net' [ 29.762492][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.076035][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.398000][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.401101][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.402470][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.403878][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.405660][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.406932][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.408218][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.409950][ T4337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.411246][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.413160][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.415656][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.417423][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.419051][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.423527][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.425032][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.426449][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.427830][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.429166][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.431016][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.432585][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.434360][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.436081][ T4345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.437992][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.443861][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.445238][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.446656][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.448312][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.479451][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.481857][ T4345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.483254][ T4345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.544449][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 31.579671][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.608984][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.611453][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.613139][ T4334] device bridge_slave_0 entered promiscuous mode [ 31.615266][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 31.617401][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.618602][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.620304][ T4334] device bridge_slave_1 entered promiscuous mode [ 31.627520][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 31.650756][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.657420][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.658590][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.660355][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.665701][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.671107][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.672334][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.673882][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.678407][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.697461][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.698791][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.702353][ T4340] device bridge_slave_0 entered promiscuous mode [ 31.712480][ T4334] team0: Port device team_slave_0 added [ 31.714343][ T4334] team0: Port device team_slave_1 added [ 31.717402][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.718734][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.722390][ T4340] device bridge_slave_1 entered promiscuous mode [ 31.724796][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.726365][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.727630][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.729178][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.739012][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.742987][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.744264][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.745912][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.747535][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.748754][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.753463][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.755830][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.757079][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.758684][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.767993][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.769230][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.773938][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.775983][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.777232][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.778833][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.786386][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.788612][ T4329] team0: Port device team_slave_0 added [ 31.793353][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.795682][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.798201][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.803542][ T4329] team0: Port device team_slave_1 added [ 31.805879][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.808143][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.824381][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.825638][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.830528][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.881162][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.920093][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.962152][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.963418][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.967441][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.970852][ T4339] team0: Port device team_slave_0 added [ 31.972757][ T4339] team0: Port device team_slave_1 added [ 31.974641][ T4340] team0: Port device team_slave_0 added [ 31.976428][ T4340] team0: Port device team_slave_1 added [ 31.979004][ T4330] team0: Port device team_slave_0 added [ 31.986149][ T4330] team0: Port device team_slave_1 added [ 31.997910][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.999185][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.003963][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.007554][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.008804][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.016522][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.022814][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.024076][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.028471][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.033628][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.034851][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.039292][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.041974][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.043087][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.047272][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.091079][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.130020][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.172163][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.173560][ T4329] Cannot create hsr debugfs directory [ 32.179480][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.180806][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.185366][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.241377][ T4340] device hsr_slave_0 entered promiscuous mode [ 32.280155][ T4340] device hsr_slave_1 entered promiscuous mode [ 32.319881][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.321310][ T4340] Cannot create hsr debugfs directory [ 32.361008][ T4339] device hsr_slave_0 entered promiscuous mode [ 32.410142][ T4339] device hsr_slave_1 entered promiscuous mode [ 32.449925][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.451197][ T4339] Cannot create hsr debugfs directory [ 32.511711][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.560190][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.599922][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.601186][ T4330] Cannot create hsr debugfs directory [ 32.705620][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.745013][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.772391][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.821155][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.888664][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.922252][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.964414][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.002635][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.075917][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.105569][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.106866][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.180969][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.221915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.223986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.228016][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.230667][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.280966][ T4340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.324242][ T4340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.361262][ T4340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.401878][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.440206][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 33.465300][ T4340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.511857][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.520213][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 33.521351][ T4345] Bluetooth: hci4: command 0x0409 tx timeout [ 33.522455][ T4345] Bluetooth: hci2: command 0x0409 tx timeout [ 33.523501][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 33.551033][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.603142][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.605185][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.606979][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.608297][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.610483][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.613518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.615412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.617073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.618380][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.621502][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.685254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.700753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.704990][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.714071][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.716036][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.720551][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.726010][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.727775][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.729416][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.732452][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.734188][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.735823][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.741356][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.743530][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.747094][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.748745][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.758602][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.784802][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.786178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.787851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.789380][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.790828][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.793597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.799365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.801469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.803007][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.804144][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.814358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.818782][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.828403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.830436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.831813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.833110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.845649][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.847473][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.849105][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.852507][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.853771][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.855387][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.858212][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.862282][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.864463][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.868624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.871128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.873492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.879517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.881357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.882984][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.884256][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.885765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.888734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.893302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.899458][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.902882][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.907109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.908737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.911590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.913251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.914876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.916485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.918176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.920967][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.925155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.933287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.935292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.936890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.938575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.940428][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.941628][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.943312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.949784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.951484][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.952871][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.954653][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.956276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.958002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.959664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.965368][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.972478][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.976187][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.977896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.979437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.984740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.986418][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.988019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.989722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.992647][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.993865][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.995363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.996907][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.003845][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.009030][ T4334] device veth0_vlan entered promiscuous mode [ 34.011554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.013491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.015040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.016609][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.017733][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.019039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.030448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.032303][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.033546][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.035101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.043997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.045896][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.047666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.054295][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.056143][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.057784][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.059495][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.071634][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.073449][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.076271][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.078111][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.083711][ T4334] device veth1_vlan entered promiscuous mode [ 34.086858][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.088647][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.091778][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.102293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.103865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.108383][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.111190][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.112817][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.117290][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.118938][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.123199][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.129369][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.131580][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.133097][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.134483][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.135805][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.138359][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.146679][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.148811][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.157472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.159307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.180069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.181762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.183413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.184988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.195541][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.197201][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.199499][ T4334] device veth0_macvtap entered promiscuous mode [ 34.220819][ T4334] device veth1_macvtap entered promiscuous mode [ 34.223472][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.225060][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.226423][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.227994][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.233266][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.234783][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.241809][ T4329] device veth0_vlan entered promiscuous mode [ 34.245389][ T4329] device veth1_vlan entered promiscuous mode [ 34.247524][ T4339] device veth0_vlan entered promiscuous mode [ 34.253057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.254726][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.256424][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.257958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.259480][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.268618][ T4329] device veth0_macvtap entered promiscuous mode [ 34.275218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.276770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.278436][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.280417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.285501][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.287698][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.289454][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.292334][ T4339] device veth1_vlan entered promiscuous mode [ 34.299339][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.301344][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.302743][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.304142][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.306519][ T4329] device veth1_macvtap entered promiscuous mode [ 34.309625][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.313694][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.315619][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.317227][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.318666][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.324153][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.325913][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.327586][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.335623][ T4339] device veth0_macvtap entered promiscuous mode [ 34.339350][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.342138][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.344176][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.345858][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.347225][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.348610][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.353354][ T4339] device veth1_macvtap entered promiscuous mode [ 34.366055][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.384238][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.386236][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.388565][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.390813][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.392510][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.394188][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.395927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.397895][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.409194][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.414206][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.415857][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.417563][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.420336][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.423011][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.424782][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.426859][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.428729][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.434380][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.437872][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.439783][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.447733][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.449672][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.453264][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.455232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.457041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.458684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.461099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.473390][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.474706][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.476630][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.487446][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.489082][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.491900][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.493510][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.498072][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.499659][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.502820][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.504312][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.515123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.516659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.518334][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.519696][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.521437][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.523058][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.526365][ T4340] device veth0_vlan entered promiscuous mode [ 34.529619][ T4340] device veth1_vlan entered promiscuous mode [ 34.534855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.536439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.562990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.564753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.566354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.584015][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.585692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.588230][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.589751][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.601654][ T4330] device veth0_vlan entered promiscuous mode [ 34.611626][ T4330] device veth1_vlan entered promiscuous mode [ 34.629635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.632194][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.633990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.635848][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.647170][ T4340] device veth0_macvtap entered promiscuous mode [ 34.655823][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.657252][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.657723][ T4340] device veth1_macvtap entered promiscuous mode [ 34.662496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.664193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.669046][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.671613][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.766067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.767774][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.771036][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.773403][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.779139][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.781694][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.784408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.788872][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.792037][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.794148][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.795857][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.797578][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.799360][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.809489][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.813780][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.815701][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.819697][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.823040][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.825051][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.827241][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.829750][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.833964][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.835684][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.837404][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.839150][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.844358][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.846063][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.866335][ T4330] device veth0_macvtap entered promiscuous mode [ 34.876443][ T4340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.878103][ T4340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.879657][ T4340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.053516][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 36.054901][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 36.055948][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 36.057014][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 36.057990][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 36.089090][ T4340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.143503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.146452][ T4330] device veth1_macvtap entered promiscuous mode [ 36.150328][ T4431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'. [ 36.152230][ T4431] Zero length message leads to an empty skb [ 36.158405][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.168342][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.171835][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.173731][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.175477][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.187523][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.193784][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.195652][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.206475][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.239557][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.241592][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.251114][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.252846][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.254524][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.267787][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.269575][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.279902][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.281761][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.557088][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.573517][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.584708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.586510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.590743][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.592502][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.594311][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.596080][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.660544][ T1619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.662058][ T1619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.663977][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.688921][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.690338][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.697766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.697791][ T1619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.702117][ T1619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.703702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.706760][ T1619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.708375][ T1619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.712380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.786452][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.788328][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.902059][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.071677][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 38.080962][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 38.082144][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 38.083368][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 38.084414][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 38.085406][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 38.294695][ T4472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 39.605754][ T4345] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 40.169935][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 40.170093][ T4345] Bluetooth: hci1: command 0x0419 tx timeout [ 40.171949][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 40.172434][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 40.173257][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 40.819237][ T4514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.36'. [ 42.170263][ T4338] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 42.239929][ T4338] Bluetooth: hci1: command 0x2016 tx timeout [ 42.241074][ T4338] Bluetooth: hci2: command 0x2016 tx timeout [ 43.130623][ T4553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 44.631407][ T4338] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 44.641010][ T4338] Bluetooth: hci3: command 0x2016 tx timeout [ 44.762840][ T4583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'. [ 45.103249][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 45.105364][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.271729][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.738972][ T4338] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:2304' [ 45.741222][ T4338] CPU: 1 PID: 4338 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 45.742609][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.744533][ T4338] Workqueue: hci1 hci_rx_work [ 45.745448][ T4338] Call trace: [ 45.746052][ T4338] dump_backtrace+0x1c4/0x1f0 [ 45.746868][ T4338] show_stack+0x2c/0x3c [ 45.747575][ T4338] __dump_stack+0x30/0x40 [ 45.748341][ T4338] dump_stack_lvl+0xf4/0x15c [ 45.749211][ T4338] dump_stack+0x1c/0x5c [ 45.749976][ T4338] sysfs_create_dir_ns+0x244/0x264 [ 45.750862][ T4338] kobject_add_internal+0x5a8/0xb18 [ 45.751786][ T4338] kobject_add+0x144/0x20c [ 45.752583][ T4338] device_add+0x3dc/0xe4c [ 45.753335][ T4338] hci_conn_add_sysfs+0xb8/0x1bc [ 45.754177][ T4338] le_conn_complete_evt+0xd3c/0x1300 [ 45.755110][ T4338] hci_le_conn_complete_evt+0x114/0x3b8 [ 45.756096][ T4338] hci_le_meta_evt+0x2c0/0x4a8 [ 45.756943][ T4338] hci_event_packet+0x64c/0xe60 [ 45.757819][ T4338] hci_rx_work+0x320/0xa94 [ 45.758625][ T4338] process_one_work+0x7e4/0x13bc [ 45.759496][ T4338] worker_thread+0x8cc/0xfe8 [ 45.760331][ T4338] kthread+0x254/0x2e0 [ 45.761026][ T4338] ret_from_fork+0x10/0x20 [ 45.763070][ T4338] kobject_add_internal failed for hci1:2304 with -EEXIST, don't try to register things with the same name in the same directory. [ 45.765898][ T4338] Bluetooth: hci1: failed to register connection device [ 46.289661][ T4338] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 46.375648][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 47.032688][ T4338] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 47.753480][ T4686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 47.849436][ T4338] Bluetooth: hci1: command 0x2016 tx timeout [ 48.462812][ T4736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.112'. [ 48.577026][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 60.418114][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 60.419791][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.541385][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.765543][ T4861] ======================================================= [ 60.765543][ T4861] WARNING: The mand mount option has been deprecated and [ 60.765543][ T4861] and is ignored by this kernel. Remove the mand [ 60.765543][ T4861] option from the mount to silence this warning. [ 60.765543][ T4861] ======================================================= [ 61.537692][ T4884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.154'. [ 61.616745][ T4894] loop3: detected capacity change from 0 to 16 [ 61.627025][ T4894] erofs: (device loop3): erofs_read_inode: unsupported chunk format 300 of nid 36 [ 61.969595][ T4915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.166'. [ 62.154088][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 62.382057][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 62.383879][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.471749][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.954831][ T4949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.179'. [ 63.322844][ T4982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.192'. [ 63.332350][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 64.151696][ T5009] loop0: detected capacity change from 0 to 256 [ 64.171754][ T5009] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.239317][ T5011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 64.355084][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 64.438093][ T5033] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 64.446769][ T5033] EXT4-fs (loop6): unable to read superblock [ 64.481592][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482682][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.825219][ T4337] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:2304' [ 64.827008][ T4337] CPU: 0 PID: 4337 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 64.828343][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.830051][ T4337] Workqueue: hci2 hci_rx_work [ 64.830895][ T4337] Call trace: [ 64.831475][ T4337] dump_backtrace+0x1c4/0x1f0 [ 64.832303][ T4337] show_stack+0x2c/0x3c [ 64.832991][ T4337] __dump_stack+0x30/0x40 [ 64.833699][ T4337] dump_stack_lvl+0xf4/0x15c [ 64.834502][ T4337] dump_stack+0x1c/0x5c [ 64.835197][ T4337] sysfs_create_dir_ns+0x244/0x264 [ 64.836037][ T4337] kobject_add_internal+0x5a8/0xb18 [ 64.836949][ T4337] kobject_add+0x144/0x20c [ 64.837723][ T4337] device_add+0x3dc/0xe4c [ 64.838465][ T4337] hci_conn_add_sysfs+0xb8/0x1bc [ 64.839251][ T4337] le_conn_complete_evt+0xd3c/0x1300 [ 64.840167][ T4337] hci_le_conn_complete_evt+0x114/0x3b8 [ 64.841072][ T4337] hci_le_meta_evt+0x2c0/0x4a8 [ 64.841847][ T4337] hci_event_packet+0x64c/0xe60 [ 64.842649][ T4337] hci_rx_work+0x320/0xa94 [ 64.843396][ T4337] process_one_work+0x7e4/0x13bc [ 64.844210][ T4337] worker_thread+0x8cc/0xfe8 [ 64.844941][ T4337] kthread+0x254/0x2e0 [ 64.845621][ T4337] ret_from_fork+0x10/0x20 [ 64.848081][ T4337] kobject_add_internal failed for hci2:2304 with -EEXIST, don't try to register things with the same name in the same directory. [ 64.850432][ T4337] Bluetooth: hci2: failed to register connection device [ 65.408811][ T5057] bond0: option mode: unable to set because the bond device has slaves [ 65.472504][ T5060] loop2: detected capacity change from 0 to 128 [ 65.746966][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 66.879940][ T4338] Bluetooth: hci2: command 0x2016 tx timeout [ 68.045215][ T5124] loop0: detected capacity change from 0 to 128 [ 68.094795][ T5124] process 'syz.0.246' launched './file1' with NULL argv: empty string added [ 69.606533][ T22] cfg80211: failed to load regulatory.db [ 70.598144][ T5190] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.270'. [ 72.860574][ T5276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.301'. [ 72.864525][ T5276] netlink: 7 bytes leftover after parsing attributes in process `syz.4.301'. [ 72.997009][ T27] audit: type=1326 audit(72.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.002432][ T27] audit: type=1326 audit(72.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.018928][ T27] audit: type=1326 audit(73.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.031686][ T27] audit: type=1326 audit(73.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.072102][ T27] audit: type=1326 audit(73.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.093103][ T27] audit: type=1326 audit(73.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.097854][ T27] audit: type=1326 audit(73.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.112940][ T27] audit: type=1326 audit(73.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.116938][ T27] audit: type=1326 audit(73.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 73.141026][ T27] audit: type=1326 audit(73.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.4.306" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97379228 code=0x7ffc0000 [ 74.964402][ T5362] loop1: detected capacity change from 0 to 164 [ 74.992616][ T5362] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.230071][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 76.422955][ T5384] bond0: (slave bond_slave_0): Releasing backup interface [ 77.327152][ T5430] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20ffe000 [ 77.330314][ T5430] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 77.673493][ T5438] loop3: detected capacity change from 0 to 764 [ 77.747249][ T5438] loop3: detected capacity change from 0 to 128 [ 77.766976][ T5438] FAT-fs (loop3): Directory bread(block 32) failed [ 77.767734][ T5441] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 77.768254][ T5438] FAT-fs (loop3): Directory bread(block 33) failed [ 77.770869][ T5441] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 77.774051][ T5438] FAT-fs (loop3): Directory bread(block 34) failed [ 77.775153][ T5438] FAT-fs (loop3): Directory bread(block 35) failed [ 77.776357][ T5438] FAT-fs (loop3): Directory bread(block 36) failed [ 77.790076][ T5438] FAT-fs (loop3): Directory bread(block 37) failed [ 77.791202][ T5438] FAT-fs (loop3): Directory bread(block 38) failed [ 77.792357][ T5438] FAT-fs (loop3): Directory bread(block 39) failed [ 77.793556][ T5438] FAT-fs (loop3): Directory bread(block 40) failed [ 77.797922][ T5438] FAT-fs (loop3): Directory bread(block 41) failed [ 77.805748][ T5441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.668745][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 78.668754][ T27] audit: type=1326 audit(78.650:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.681383][ T27] audit: type=1326 audit(78.650:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.693847][ T27] audit: type=1326 audit(78.650:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.708637][ T27] audit: type=1326 audit(78.650:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.726229][ T27] audit: type=1326 audit(78.650:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=19 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.740451][ T27] audit: type=1326 audit(78.650:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.745971][ T27] audit: type=1326 audit(78.650:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.752434][ T27] audit: type=1326 audit(78.650:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 78.756972][ T27] audit: type=1326 audit(78.650:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.1.384" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff7ef79228 code=0x7ffc0000 [ 80.440489][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.664624][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.668035][ T22] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 80.669663][ T22] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 80.671420][ T22] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 80.673321][ T22] usb 1-1: config 129 has no interface number 0 [ 80.674394][ T22] usb 1-1: config 129 has no interface number 1 [ 80.675502][ T22] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.677585][ T22] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 80.679316][ T22] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 80.693491][ T22] usb 1-1: config 129 interface 80 has no altsetting 0 [ 80.694763][ T22] usb 1-1: config 129 interface 5 has no altsetting 0 [ 80.699740][ T22] usb 1-1: string descriptor 0 read error: -22 [ 80.702758][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 80.707622][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.729854][ T22] usb 1-1: MIDIStreaming interface descriptor not found [ 80.938503][ T22] usb 1-1: USB disconnect, device number 2 [ 81.741200][ T5581] Boot memory [48000000 50000000] offlining attempted [ 82.380386][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.383979][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.437522][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.439254][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.729911][ T4378] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.931218][ T4378] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.933294][ T4378] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.935095][ T4378] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.938141][ T4378] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.939159][ T4378] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 82.940820][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.957254][ T4378] usb 1-1: config 0 descriptor?? [ 82.993925][ T5617] binder: 5616:5617 tried to acquire reference to desc 0, got 1 instead [ 83.002680][ T5617] binder: 5616:5617 unknown command 0 [ 83.008063][ T5617] binder: 5616:5617 ioctl c0306201 200001c0 returned -22 [ 83.014023][ T5617] binder: tried to use weak ref as strong ref [ 83.015255][ T5617] binder: 5616:5617 got transaction to invalid handle, 1 [ 83.020156][ T5617] binder: 5617:5616 cannot find target node [ 83.021288][ T5617] binder: 5616:5617 transaction async to 0:0 failed 12/29201/-22, size 0-0 line 3062 [ 83.023022][ T14] binder: release 5616:5617 transaction 5 out, still active [ 83.024334][ T14] binder: undelivered TRANSACTION_COMPLETE [ 83.039546][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.040883][ T14] binder: send failed reply for transaction 5, target dead [ 83.365716][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.367036][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.368262][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.369437][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.374272][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.377841][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.383006][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.385447][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.388999][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.393682][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.397145][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.400030][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.403701][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.407233][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.411815][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.416424][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.418938][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.422532][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.427398][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.430826][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.435859][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.439564][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.442206][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.445993][ T4378] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 83.453254][ T4378] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v80.08 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 83.567303][ T4378] usb 1-1: USB disconnect, device number 3 [ 84.405248][ T5654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.414725][ T5653] usb usb1: usbfs: process 5653 (syz.4.449) did not claim interface 0 before use [ 84.423928][ T5654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.478119][ T5658] using random self ethernet address [ 84.479565][ T5658] using random host ethernet address [ 84.526351][ T5664] binder: 5663:5664 unknown command 1074553619 [ 84.527625][ T5664] binder: 5663:5664 ioctl c0306201 20000040 returned -22 [ 84.779914][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.960231][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 84.962705][ T14] usb 1-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.964848][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.965894][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 84.967375][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.975030][ T14] usb 1-1: config 0 descriptor?? [ 84.984785][ T5680] UDC core: g1: couldn't find an available UDC or it's busy [ 85.281352][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.283154][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.384381][ T14] logitech-djreceiver 0003:046D:C71C.0002: unknown main item tag 0x6 [ 85.385661][ T14] logitech-djreceiver 0003:046D:C71C.0002: unknown main item tag 0x4 [ 85.386883][ T14] logitech-djreceiver 0003:046D:C71C.0002: ignoring exceeding usage max [ 85.389274][ T14] logitech-djreceiver 0003:046D:C71C.0002: unknown main item tag 0x7 [ 85.395205][ T14] logitech-djreceiver 0003:046D:C71C.0002: hidraw0: USB HID v0.05 Device [HID 046d:c71c] on usb-dummy_hcd.0-1/input0 [ 85.607380][ T4376] usb 1-1: USB disconnect, device number 4 [ 85.607976][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.616162][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.618800][ T5705] fido_id[5705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 86.041555][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.043303][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.190507][ T5737] option changes via remount are deprecated (pid=5736 comm=syz.0.485) [ 86.582706][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.584382][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.675333][ T5756] Boot memory [50000000 58000000] offlining attempted [ 86.712775][ T5761] Boot memory [48000000 50000000] offlining attempted [ 87.918571][ T5779] option changes via remount are deprecated (pid=5778 comm=syz.2.500) [ 87.930425][ T5779] cgroup: option or name mismatch, new: 0x0 ".", old: 0x0 "" [ 88.216779][ T5789] bond0: option arp_interval: invalid value () [ 88.220615][ T5789] bond0: option arp_interval: allowed values 0 - 2147483647 [ 88.567358][ T5815] 8021q: VLANs not supported on gre0 [ 88.568930][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 88.591818][ T5817] devpts: called with bogus options [ 89.965977][ T5850] Illegal XDP return value 4294967277 on prog (id 29) dev syz_tun, expect packet loss! [ 90.046499][ T5855] device syzkaller0 entered promiscuous mode [ 90.060506][ T5857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 90.070127][ T4337] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 102.039710][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 102.122016][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 102.168657][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 102.331393][ T5930] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n #|[8},) [ 102.339017][ T5930] bond0: option arp_interval: allowed values 0 - 2147483647 [ 102.410122][ T5938] device syzkaller0 entered promiscuous mode [ 113.236625][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.562'. [ 113.506977][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 113.584176][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.579'. [ 113.724959][ T5998] device syzkaller0 entered promiscuous mode [ 124.529218][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 124.530951][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.543043][ T6028] binder: 6027:6028 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 124.677414][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.812661][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.594'. [ 126.094062][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.095287][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.420455][ T4337] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 127.509025][ T6103] device syzkaller0 entered promiscuous mode [ 138.897629][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.618'. [ 138.964927][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 139.895444][ T6173] binder: BINDER_SET_CONTEXT_MGR already set [ 139.896604][ T6173] binder: 6172:6173 ioctl 4018620d 20004a80 returned -16 [ 139.918926][ T6173] binder: 6172:6173 got transaction to invalid handle, 1 [ 139.922712][ T6173] binder: 6173:6172 cannot find target node [ 139.923804][ T6173] binder: 6172:6173 transaction async to 0:0 failed 17/29201/-22, size 0-0 line 3062 [ 139.946016][ T6176] binder: tried to use weak ref as strong ref [ 139.947246][ T6176] binder: 6174:6176 Acquire 1 refcount change on invalid ref 0 ret -22 [ 139.949125][ T6176] binder: 6174:6176 got transaction to invalid handle, 1 [ 139.972368][ T6176] binder: 6176:6174 cannot find target node [ 139.973886][ T6176] binder: 6174:6176 transaction call to 0:0 failed 20/29201/-22, size 72-24 line 3062 [ 139.990130][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.000502][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.047173][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 140.638892][ T6215] binder: BINDER_SET_CONTEXT_MGR already set [ 140.644264][ T6215] binder: 6214:6215 ioctl 4018620d 20004a80 returned -16 [ 140.646072][ T6215] binder: 6214:6215 got transaction to invalid handle, 1 [ 140.647448][ T6215] binder: 6215:6214 cannot find target node [ 140.648434][ T6215] binder: 6214:6215 transaction async to 0:0 failed 23/29201/-22, size 0-0 line 3062 [ 140.656996][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.115706][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 141.593800][ T6234] binder: 6233:6234 ioctl c0306201 0 returned -14 [ 141.674227][ T6244] binder: BINDER_SET_CONTEXT_MGR already set [ 141.675400][ T6244] binder: 6243:6244 ioctl 4018620d 20004a80 returned -16 [ 141.680875][ T6244] binder: 6243:6244 got transaction to invalid handle, 1 [ 141.682149][ T6244] binder: 6244:6243 cannot find target node [ 142.081722][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 142.110208][ T6258] binder: BINDER_SET_CONTEXT_MGR already set [ 142.111498][ T6258] binder: 6257:6258 ioctl 4018620d 20004a80 returned -16 [ 142.115473][ T6258] binder: 6257:6258 got transaction to invalid handle, 1 [ 142.821203][ T4337] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 142.859712][ T6289] binder: 6288:6289 got transaction to invalid handle, 1 [ 142.861445][ T6289] binder: 6288:6289 got transaction to invalid handle, 1 [ 143.883535][ T6325] binder: 6323:6325 got transaction to invalid handle, 1 [ 143.888361][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 145.512649][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 145.661007][ T6368] binder_user_error: 1 callbacks suppressed [ 145.661017][ T6368] binder: 6367:6368 got transaction to invalid handle, 1 [ 145.664550][ T6368] binder_debug: 17 callbacks suppressed [ 145.664562][ T6368] binder: 6368:6367 cannot find target node [ 145.669435][ T6368] binder: 6367:6368 transaction call to 0:0 failed 47/29201/-22, size 72-24 line 3062 [ 145.675130][ T6368] binder: 6367:6368 got transaction to invalid handle, 1 [ 145.678826][ T6368] binder: 6368:6367 cannot find target node [ 145.681225][ T6368] binder: 6367:6368 transaction async to 0:0 failed 48/29201/-22, size 0-0 line 3062 [ 145.684479][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.698842][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.699877][ T4337] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 146.852125][ T6401] binder: BINDER_SET_CONTEXT_MGR already set [ 146.853150][ T6401] binder: 6400:6401 ioctl 4018620d 20004a80 returned -16 [ 146.863481][ T6401] binder: 6400:6401 got transaction to invalid handle, 1 [ 146.864741][ T6401] binder: 6401:6400 cannot find target node [ 146.865761][ T6401] binder: 6400:6401 transaction async to 0:0 failed 51/29201/-22, size 0-0 line 3062 [ 146.896068][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.306872][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 148.743912][ T6438] binder: BINDER_SET_CONTEXT_MGR already set [ 148.745238][ T6438] binder: 6437:6438 ioctl 4018620d 20004a80 returned -16 [ 148.747135][ T6438] binder: 6437:6438 got transaction to invalid handle, 1 [ 148.748656][ T6438] binder: 6438:6437 cannot find target node [ 149.899939][ T4337] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 149.939827][ C0] sched: RT throttling activated [ 150.105243][ T6472] binder: BINDER_SET_CONTEXT_MGR already set [ 150.106359][ T6472] binder: 6471:6472 ioctl 4018620d 20004a80 returned -16 [ 150.107887][ T6472] binder: 6471:6472 got transaction to invalid handle, 1 [ 151.047823][ T4337] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 152.122224][ T6510] binder: 6509:6510 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 152.133366][ T6510] binder: 6509:6510 got transaction to invalid handle, 1 [ 152.134636][ T6510] binder_debug: 5 callbacks suppressed [ 152.134647][ T6510] binder: 6510:6509 cannot find target node [ 152.136554][ T6510] binder: 6509:6510 transaction call to 0:0 failed 60/29201/-22, size 72-24 line 3062 [ 152.158535][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.762'. [ 152.162554][ T6510] binder: 6509:6510 got transaction to invalid handle, 1 [ 152.163920][ T6510] binder: 6510:6509 cannot find target node [ 152.165010][ T6510] binder: 6509:6510 transaction async to 0:0 failed 61/29201/-22, size 0-0 line 3062 [ 152.182708][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.212560][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.299662][ T4338] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 153.565163][ T6551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 153.599901][ T4338] Bluetooth: hci0: command 0x0406 tx timeout [ 153.601028][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 153.602194][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 153.603336][ T4338] Bluetooth: hci4: command 0x0406 tx timeout [ 153.604501][ T4338] Bluetooth: hci3: command 0x0406 tx timeout [ 153.657446][ T6555] binder: 6554:6555 got transaction to invalid handle, 1 [ 153.667023][ T6555] binder: 6555:6554 cannot find target node [ 153.669498][ T6555] binder: 6554:6555 transaction call to 0:0 failed 65/29201/-22, size 72-24 line 3062 [ 153.673472][ T4337] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 153.675530][ T6555] binder: 6554:6555 got transaction to invalid handle, 1 [ 153.676994][ T6555] binder: 6555:6554 cannot find target node [ 153.690798][ T6555] binder: 6554:6555 transaction async to 0:0 failed 66/29201/-22, size 0-0 line 3062 [ 155.091705][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 155.263828][ T4337] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 155.336032][ T6596] binder: 6593:6596 got transaction to invalid handle, 1 [ 155.350285][ T6596] binder: 6593:6596 got transaction to invalid handle, 1 [ 156.237024][ T4337] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 156.646316][ T6638] binder: BINDER_SET_CONTEXT_MGR already set [ 156.650328][ T6638] binder: 6637:6638 ioctl 4018620d 20004a80 returned -16 [ 156.654255][ T6638] binder: 6637:6638 got transaction to invalid handle, 1 [ 157.203392][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 157.969949][ T6679] binder: BINDER_SET_CONTEXT_MGR already set [ 157.971259][ T6679] binder: 6678:6679 ioctl 4018620d 20004a80 returned -16 [ 157.976974][ T6679] binder: 6678:6679 got transaction to invalid handle, 1 [ 157.978345][ T6679] binder_debug: 11 callbacks suppressed [ 157.978357][ T6679] binder: 6679:6678 cannot find target node [ 157.984935][ T6679] binder: 6678:6679 transaction async to 0:0 failed 75/29201/-22, size 0-0 line 3062 [ 158.006731][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.243009][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 158.654360][ T6715] binder: BINDER_SET_CONTEXT_MGR already set [ 158.657943][ T6715] binder: 6714:6715 ioctl 4018620d 20004a80 returned -16 [ 158.662343][ T6715] binder: 6714:6715 got transaction to invalid handle, 1 [ 158.664817][ T6715] binder: 6715:6714 cannot find target node [ 158.667150][ T6715] binder: 6714:6715 transaction async to 0:0 failed 77/29201/-22, size 0-0 line 3062 [ 158.689674][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.750393][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 160.174622][ T6750] binder: 6749:6750 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 160.177860][ T6750] binder: 6749:6750 got transaction to invalid handle, 1 [ 160.179237][ T6750] binder: 6750:6749 cannot find target node [ 160.187010][ T6750] binder: 6749:6750 transaction call to 0:0 failed 80/29201/-22, size 72-24 line 3062 [ 160.193050][ T6750] binder: 6749:6750 got transaction to invalid handle, 1 [ 160.194418][ T6750] binder: 6750:6749 cannot find target node [ 160.195593][ T6750] binder: 6749:6750 transaction async to 0:0 failed 81/29201/-22, size 0-0 line 3062 [ 160.703019][ T4337] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 161.339309][ T6792] binder: 6791:6792 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 161.353381][ T6792] binder: 6791:6792 got transaction to invalid handle, 1 [ 161.354829][ T6792] binder: 6791:6792 got transaction to invalid handle, 1 [ 162.146204][ T4337] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 162.769309][ T6825] binder: 6824:6825 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 162.776787][ T6825] binder: 6824:6825 got transaction to invalid handle, 1 [ 163.317625][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 163.954341][ T6864] binder_user_error: 1 callbacks suppressed [ 163.954350][ T6864] binder: 6863:6864 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 163.965160][ T6864] binder: 6863:6864 got transaction to invalid handle, 1 [ 163.969660][ T6864] binder_debug: 14 callbacks suppressed [ 163.969675][ T6864] binder: 6864:6863 cannot find target node [ 163.972964][ T6864] binder: 6863:6864 transaction async to 0:0 failed 91/29201/-22, size 0-0 line 3062 [ 163.992201][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.637717][ T4337] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 165.075195][ T6900] binder: 6899:6900 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 165.083973][ T6900] binder: 6899:6900 got transaction to invalid handle, 1 [ 165.085398][ T6900] binder: 6900:6899 cannot find target node [ 165.090511][ T6900] binder: 6899:6900 transaction async to 0:0 failed 93/29201/-22, size 0-0 line 3062 [ 165.107669][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.112676][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 167.011401][ T6942] binder: 6939:6942 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 167.014997][ T6942] binder: 6939:6942 got transaction to invalid handle, 1 [ 167.017458][ T6942] binder: 6942:6939 cannot find target node [ 167.018379][ T6942] binder: 6939:6942 transaction async to 0:0 failed 95/29201/-22, size 0-0 line 3062 [ 167.041795][ T5823] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.483159][ T6957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.916'. [ 168.920423][ T6976] binder: 6975:6976 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 168.928878][ T6976] binder: 6975:6976 got transaction to invalid handle, 1 [ 168.930562][ T6976] binder: 6976:6975 cannot find target node [ 169.351596][ T6989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.929'. [ 170.536069][ T7017] binder: 7016:7017 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 170.553438][ T7017] binder: 7016:7017 got transaction to invalid handle, 1 [ 170.554846][ T7017] binder_debug: 2 callbacks suppressed [ 170.554859][ T7017] binder: 7017:7016 cannot find target node [ 170.561926][ T7017] binder: 7016:7017 transaction async to 0:0 failed 99/29201/-22, size 0-0 line 3062 [ 170.595083][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.755311][ T7025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.942'. [ 171.478212][ T7053] binder: 7051:7053 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 171.535820][ T7053] binder: 7051:7053 got transaction to invalid handle, 1 [ 171.537114][ T7053] binder: 7053:7051 cannot find target node [ 171.538075][ T7053] binder: 7051:7053 transaction async to 0:0 failed 101/29201/-22, size 0-0 line 3062 [ 171.625366][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.547218][ T7090] binder: 7086:7090 ioctl 4018620d 0 returned -22 [ 173.547385][ T7092] fuse: Bad value for 'fd' [ 173.548816][ T7090] binder: 7086:7090 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 173.569302][ T7090] binder: 7086:7090 got transaction to invalid handle, 1 [ 173.578611][ T7090] binder: 7090:7086 cannot find target node [ 173.579687][ T7090] binder: 7086:7090 transaction call to 0:0 failed 104/29201/-22, size 72-24 line 3062 [ 173.861384][ T7098] binder: 7086:7098 got transaction to invalid handle, 1 [ 173.862607][ T7098] binder: 7098:7086 cannot find target node [ 173.864068][ T7098] binder: 7086:7098 transaction async to 0:0 failed 105/29201/-22, size 0-0 line 3062 [ 174.903766][ T7131] fuse: Bad value for 'fd' [ 175.719566][ T7133] binder: 7132:7133 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 175.734773][ T7133] binder: 7132:7133 got transaction to invalid handle, 1 [ 175.736066][ T7133] binder_debug: 2 callbacks suppressed [ 175.736077][ T7133] binder: 7133:7132 cannot find target node [ 175.738225][ T7133] binder: 7132:7133 transaction call to 0:0 failed 108/29201/-22, size 72-24 line 3062 [ 175.753660][ T7133] binder: 7132:7133 got transaction to invalid handle, 1 [ 175.754984][ T7133] binder: 7133:7132 cannot find target node [ 175.755975][ T7133] binder: 7132:7133 transaction async to 0:0 failed 109/29201/-22, size 0-0 line 3062 [ 175.780349][ T5823] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.819098][ T5823] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.486275][ T7164] fuse: Bad value for 'fd' [ 176.659127][ T7172] binder: 7170:7172 ioctl 4018620d 0 returned -22 [ 176.671740][ T7172] binder: 7170:7172 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 176.692772][ T7172] binder: 7170:7172 got transaction to invalid handle, 1 [ 176.698543][ T7172] binder: 7172:7170 cannot find target node [ 176.706720][ T7172] binder: 7170:7172 transaction call to 0:0 failed 112/29201/-22, size 72-24 line 3062 [ 176.716866][ T7172] binder: 7170:7172 got transaction to invalid handle, 1 [ 176.723898][ T7172] binder: 7172:7170 cannot find target node [ 176.728546][ T7172] binder: 7170:7172 transaction async to 0:0 failed 113/29201/-22, size 0-0 line 3062 [ 177.906726][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 178.341350][ T7206] binder: BINDER_SET_CONTEXT_MGR already set [ 178.342455][ T7206] binder: 7205:7206 ioctl 4018620d 20004a80 returned -16 [ 178.356154][ T7206] binder: 7205:7206 got transaction to invalid handle, 1 [ 178.975647][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 180.137657][ T7263] binder: BINDER_SET_CONTEXT_MGR already set [ 180.138764][ T7263] binder: 7261:7263 ioctl 4018620d 20004a80 returned -16 [ 180.151376][ T7263] binder: 7261:7263 got transaction to invalid handle, 1 [ 180.319284][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 181.089769][ T7306] binder: BINDER_SET_CONTEXT_MGR already set [ 181.096548][ T7306] binder: 7305:7306 ioctl 4018620d 20004a80 returned -16 [ 181.103105][ T7306] binder: 7305:7306 got transaction to invalid handle, 1 [ 181.107919][ T7306] binder_debug: 8 callbacks suppressed [ 181.107931][ T7306] binder: 7306:7305 cannot find target node [ 181.114997][ T7306] binder: 7305:7306 transaction async to 0:0 failed 119/29201/-22, size 0-0 line 3062 [ 181.155291][ T6922] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.015704][ T7317] binder: 7316:7317 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 182.056849][ T7317] binder: 7316:7317 got transaction to invalid handle, 1 [ 182.058215][ T7317] binder: 7317:7316 cannot find target node [ 182.059162][ T7317] binder: 7316:7317 transaction async to 0:0 failed 121/29201/-22, size 0-0 line 3062 [ 182.067571][ T5823] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.686302][ T7338] binder: 7337:7338 ioctl c0306201 0 returned -14 [ 182.698474][ T7338] binder: 7337:7338 got transaction to invalid handle, 1 [ 182.704180][ T7338] binder: 7338:7337 cannot find target node [ 182.707332][ T7338] binder: 7337:7338 transaction call to 0:0 failed 125/29201/-22, size 72-24 line 3062 [ 182.713341][ T7338] binder: 7337:7338 got transaction to invalid handle, 1 [ 182.714664][ T7338] binder: 7338:7337 cannot find target node [ 182.715735][ T7338] binder: 7337:7338 transaction async to 0:0 failed 126/29201/-22, size 0-0 line 3062 [ 182.876193][ T7352] binder: 7351:7352 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 182.879684][ T7352] binder: 7351:7352 got transaction to invalid handle, 1 [ 183.241925][ T7373] binder: 7372:7373 ioctl c0306201 0 returned -14 [ 183.244882][ T7373] binder: 7372:7373 got transaction to invalid handle, 1 [ 183.246405][ T7373] binder: 7372:7373 got transaction to invalid handle, 1 [ 184.224108][ T7380] binder: 7379:7380 ioctl 4018620d 0 returned -22 [ 184.230967][ T7380] binder: 7379:7380 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 185.142509][ T7414] binder: 7413:7414 ioctl 4018620d 0 returned -22 [ 186.340521][ T7448] binder: 7447:7448 ioctl 4018620d 0 returned -22 [ 186.407718][ T7448] binder_user_error: 5 callbacks suppressed [ 186.407727][ T7448] binder: 7447:7448 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 186.412871][ T7448] binder: 7447:7448 got transaction to invalid handle, 1 [ 186.414086][ T7448] binder_debug: 23 callbacks suppressed [ 186.414126][ T7448] binder: 7448:7447 cannot find target node [ 186.416336][ T7448] binder: 7447:7448 transaction call to 0:0 failed 144/29201/-22, size 72-24 line 3062 [ 186.419691][ T7448] binder: 7447:7448 got transaction to invalid handle, 1 [ 186.421934][ T7448] binder: 7448:7447 cannot find target node [ 186.422912][ T7448] binder: 7447:7448 transaction async to 0:0 failed 145/29201/-22, size 0-0 line 3062 [ 186.427044][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.437731][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.253951][ T7468] fuse: Bad value for 'fd' [ 187.360864][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.362092][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.574127][ T7495] binder: BINDER_SET_CONTEXT_MGR already set [ 188.575279][ T7495] binder: 7492:7495 ioctl 4018620d 20004a80 returned -16 [ 188.581688][ T7495] binder: 7492:7495 got transaction to invalid handle, 1 [ 188.582775][ T7495] binder: 7495:7492 cannot find target node [ 188.583765][ T7495] binder: 7492:7495 transaction async to 0:0 failed 147/29201/-22, size 0-0 line 3062 [ 188.608876][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.989331][ T7505] fuse: Bad value for 'fd' [ 189.594933][ T7535] binder: BINDER_SET_CONTEXT_MGR already set [ 189.596218][ T7535] binder: 7534:7535 ioctl 4018620d 20004a80 returned -16 [ 189.597805][ T7535] binder: 7534:7535 got transaction to invalid handle, 1 [ 189.599188][ T7535] binder: 7535:7534 cannot find target node [ 189.616673][ T7537] fuse: Bad value for 'fd' [ 191.202766][ T7571] binder: BINDER_SET_CONTEXT_MGR already set [ 191.204094][ T7571] binder: 7570:7571 ioctl 4018620d 20004a80 returned -16 [ 191.206184][ T7571] binder: 7570:7571 got transaction to invalid handle, 1 [ 192.537358][ T7615] device syzkaller0 entered promiscuous mode [ 203.949388][ T7686] bond0: option arp_interval: invalid value (+ve) [ 203.953912][ T7686] bond0: option arp_interval: allowed values 0 - 2147483647 [ 204.687979][ T7714] loop4: detected capacity change from 0 to 128 [ 204.809012][ T7723] overlayfs: failed to set xattr on upper [ 204.814496][ T7723] overlayfs: ...falling back to index=off,metacopy=off. [ 205.286201][ T7752] bond0: option arp_interval: invalid value (+ve) [ 205.287512][ T7752] bond0: option arp_interval: allowed values 0 - 2147483647 [ 207.367248][ T7847] loop2: detected capacity change from 0 to 256 [ 207.373519][ T7847] exfat: Deprecated parameter 'namecase' [ 207.375701][ T7847] exfat: Deprecated parameter 'namecase' [ 207.385884][ T7847] exFAT-fs (loop2): failed to read sector(0x800000080) [ 207.387474][ T7847] exFAT-fs (loop2): failed to load upcase table [ 207.388710][ T7847] exFAT-fs (loop2): failed to recognize exfat type [ 208.118158][ T7873] bond0: option arp_interval: invalid value (+ve) [ 208.119428][ T7873] bond0: option arp_interval: allowed values 0 - 2147483647 [ 208.153211][ T7879] fuse: Unknown parameter 'grou00000000000000000000' [ 208.344432][ T7895] loop0: detected capacity change from 0 to 4096 [ 208.378866][ T7895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 208.436608][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 208.526602][ T7909] fuse: Unknown parameter 'grou00000000000000000000' [ 208.644223][ T7924] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-) [ 208.646440][ T7924] bond0: option arp_interval: allowed values 0 - 2147483647 [ 208.720963][ T7934] fuse: Unknown parameter 'grou00000000000000000000' [ 209.248323][ T7961] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-) [ 209.254051][ T7961] bond0: option arp_interval: allowed values 0 - 2147483647 [ 209.618192][ T7997] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-) [ 209.624092][ T7997] bond0: option arp_interval: allowed values 0 - 2147483647 [ 211.234556][ T8044] bond0: option arp_interval: invalid value (+ve) [ 211.247046][ T8044] bond0: option arp_interval: allowed values 0 - 2147483647 [ 212.588570][ T8076] bond0: option arp_interval: invalid value (+ve) [ 212.590530][ T8076] bond0: option arp_interval: allowed values 0 - 2147483647 [ 213.748056][ T8111] bond0: option arp_interval: invalid value (+ve) [ 213.749315][ T8111] bond0: option arp_interval: allowed values 0 - 2147483647 [ 213.918899][ T8123] udc dummy_udc.0: soft-connect without a gadget driver [ 215.586837][ T8149] bond0: option arp_interval: invalid value (+ve) [ 215.588340][ T8149] bond0: option arp_interval: allowed values 0 - 2147483647 [ 215.600727][ T8151] UDC core: g1: couldn't find an available UDC or it's busy [ 215.715679][ T8165] binder: 8164:8165 ioctl c0306201 0 returned -14 [ 215.750364][ T8165] binder: 8164:8165 got transaction to invalid handle, 1 [ 215.751859][ T8165] binder_debug: 5 callbacks suppressed [ 215.751871][ T8165] binder: 8165:8164 cannot find target node [ 215.754109][ T8165] binder: 8164:8165 transaction call to 0:0 failed 155/29201/-22, size 72-24 line 3062 [ 215.757171][ T8165] binder: 8164:8165 got transaction to invalid handle, 1 [ 215.760276][ T8165] binder: 8165:8164 cannot find target node [ 215.761419][ T8165] binder: 8164:8165 transaction async to 0:0 failed 156/29201/-22, size 0-0 line 3062 [ 215.763481][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.775257][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.638732][ T8198] binder: 8197:8198 ioctl c0306201 0 returned -14 [ 216.644778][ T8198] binder: 8197:8198 got transaction to invalid handle, 1 [ 216.650058][ T8198] binder: 8198:8197 cannot find target node [ 216.651164][ T8198] binder: 8197:8198 transaction call to 0:0 failed 160/29201/-22, size 72-24 line 3062 [ 216.656468][ T8198] binder: 8197:8198 got transaction to invalid handle, 1 [ 216.657810][ T8198] binder: 8198:8197 cannot find target node [ 216.658795][ T8198] binder: 8197:8198 transaction async to 0:0 failed 161/29201/-22, size 0-0 line 3062 [ 216.683599][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 216.837999][ T8209] loop2: detected capacity change from 0 to 2048 [ 216.916897][ T8209] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 216.935356][ T8209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.178094][ T8225] binder: 8224:8225 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 217.729574][ T8233] binder: 8232:8233 got transaction to invalid handle, 1 [ 217.732874][ T8233] binder: 8232:8233 got transaction to invalid handle, 1 [ 217.794557][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 218.029647][ T8260] loop4: detected capacity change from 0 to 160 [ 218.123116][ T8267] binder: 8261:8267 got transaction to invalid handle, 1 [ 218.127033][ T8267] binder: 8261:8267 got transaction to invalid handle, 1 [ 218.143711][ T8270] loop3: detected capacity change from 0 to 1024 [ 218.153613][ T8275] loop4: detected capacity change from 0 to 128 [ 218.155172][ T8275] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.167866][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 218.173074][ T8270] hfsplus: failed to load attributes file [ 219.952992][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 219.985784][ T8346] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1442'. [ 220.277802][ T8369] bond0: option arp_interval: invalid value (+ve) [ 220.279206][ T8369] bond0: option arp_interval: allowed values 0 - 2147483647 [ 220.332350][ T8373] binder: 8372:8373 got transaction to invalid handle, 1 [ 220.357876][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 220.380718][ T8377] Bluetooth: MGMT ver 1.22 [ 220.382401][ T8377] Bluetooth: hci0: unsupported parameter 5134 [ 220.383641][ T8377] Bluetooth: hci0: unsupported parameter 8192 [ 220.384563][ T8377] Bluetooth: hci0: unsupported parameter 5134 [ 220.385738][ T8377] Bluetooth: hci0: unsupported parameter 8192 [ 220.847310][ T8411] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1471'. [ 221.210344][ T8436] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1480'. [ 221.560318][ T8429] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1477'. [ 222.167970][ T8468] Bluetooth: hci0: unsupported parameter 5134 [ 222.169370][ T8468] Bluetooth: hci0: unsupported parameter 8192 [ 222.171012][ T8468] Bluetooth: hci0: unsupported parameter 5134 [ 222.172182][ T8468] Bluetooth: hci0: unsupported parameter 8192 [ 222.221491][ T8472] fuse: Unknown parameter 'group_id00000000000000000000' [ 222.300095][ T8478] binder_user_error: 3 callbacks suppressed [ 222.300104][ T8478] binder: 8477:8478 tried to acquire reference to desc 0, got 1 instead [ 222.303013][ T8478] binder: 8477:8478 ioctl c0306201 0 returned -14 [ 222.304353][ T8478] binder: 8477:8478 got transaction to invalid handle, 1 [ 222.305848][ T8478] binder_debug: 26 callbacks suppressed [ 222.305860][ T8478] binder: 8478:8477 cannot find target node [ 222.307901][ T8478] binder: 8477:8478 transaction async to 0:0 failed 186/29201/-22, size 0-0 line 3062 [ 222.317548][ T4442] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.582245][ T8565] syz.0.1516 uses obsolete (PF_INET,SOCK_PACKET) [ 223.967269][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 223.969962][ T8594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1520'. [ 224.461465][ T8654] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբ) [ 224.466327][ T8654] bond0: option arp_interval: allowed values 0 - 2147483647 [ 224.791374][ T8676] ------------[ cut here ]------------ [ 224.792663][ T8676] skb_assert_len [ 224.794147][ T8676] WARNING: CPU: 0 PID: 8676 at include/linux/skbuff.h:2570 __dev_queue_xmit+0x19f0/0x3154 [ 224.795923][ T8676] Modules linked in: [ 224.796575][ T8676] CPU: 0 PID: 8676 Comm: syz.0.1544 Not tainted syzkaller #0 [ 224.797852][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 224.799563][ T8676] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 224.800802][ T8676] pc : __dev_queue_xmit+0x19f0/0x3154 [ 224.801702][ T8676] lr : __dev_queue_xmit+0x19f0/0x3154 [ 224.802586][ T8676] sp : ffff800020ea7480 [ 224.803295][ T8676] x29: ffff800020ea7640 x28: ffff7000041d4ea0 x27: dfff800000000000 [ 224.804652][ T8676] x26: 1fffe000197a9a92 x25: ffff0000d5ab4000 x24: ffff0000dc8dc664 [ 224.805993][ T8676] x23: 1fffe000197a9a7a x22: 0000000000000000 x21: ffff0000cbd4d3d0 [ 224.807328][ T8676] x20: ffff800017d5e000 x19: ffff0000cbd4d3c0 x18: 1fffe00033e7277e [ 224.808915][ T8676] x17: ffff80001537d000 x16: ffff8000082dd248 x15: 0000000040000000 [ 224.810306][ T8676] x14: 0000000000000001 x13: 1fffe00033e74e70 x12: 0000000000000000 [ 224.811619][ T8676] x11: ff0080000a975d20 x10: 0000000000000003 x9 : bf2ab9ad5996e400 [ 224.812973][ T8676] x8 : bf2ab9ad5996e400 x7 : ffff80000825ab50 x6 : 0000000000000000 [ 224.814311][ T8676] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 224.815642][ T8676] x2 : 0000000000000006 x1 : ffff800011cedc80 x0 : ffff80018a0bd000 [ 224.816960][ T8676] Call trace: [ 224.817513][ T8676] __dev_queue_xmit+0x19f0/0x3154 [ 224.818306][ T8676] dev_queue_xmit+0x24/0x34 [ 224.819078][ T8676] packet_sendmsg+0x1b14/0x40ac [ 224.819905][ T8676] sock_write_iter+0x268/0x368 [ 224.820675][ T8676] vfs_write+0x3c8/0x7c8 [ 224.821380][ T8676] ksys_write+0x12c/0x228 [ 224.822089][ T8676] __arm64_sys_write+0x7c/0x90 [ 224.822884][ T8676] invoke_syscall+0x98/0x290 [ 224.823655][ T8676] el0_svc_common+0x13c/0x258 [ 224.824425][ T8676] do_el0_svc+0x5c/0x134 [ 224.825103][ T8676] el0_svc+0x58/0x128 [ 224.825759][ T8676] el0t_64_sync_handler+0x84/0xf0 [ 224.826584][ T8676] el0t_64_sync+0x18c/0x190 [ 224.827358][ T8676] irq event stamp: 526 [ 224.828055][ T8676] hardirqs last enabled at (525): [] finish_lock_switch+0xb0/0x1c8 [ 224.829705][ T8676] hardirqs last disabled at (526): [] el1_dbg+0x24/0x80 [ 224.831095][ T8676] softirqs last enabled at (488): [] local_bh_enable+0x10/0x34 [ 224.832599][ T8676] softirqs last disabled at (486): [] local_bh_disable+0x10/0x34 [ 224.834085][ T8676] ---[ end trace 0000000000000000 ]--- [ 224.850429][ T8676] skb len=0 headroom=160 headlen=0 tailroom=32 [ 224.850429][ T8676] mac=(160,0) net=(160,-1) trans=-1 [ 224.850429][ T8676] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 224.850429][ T8676] csum(0x0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 224.850429][ T8676] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 224.856396][ T8676] dev name=tunl0 feat=0x00000006401d7869 [ 224.857789][ T8676] sk family=17 type=2 proto=0