last executing test programs: 1m50.456788162s ago: executing program 2 (id=990): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000140)={0x40000002}) 1m50.450829632s ago: executing program 2 (id=991): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m49.35291448s ago: executing program 2 (id=1018): fsopen(&(0x7f0000000140)='erofs\x00', 0x1) 1m49.280616077s ago: executing program 2 (id=1021): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @mcast2, 0xe846}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000840)={0x0, 0xfff, 0x0, 0x8, 0x542}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000040)=ANY=[]) 1m48.744766665s ago: executing program 2 (id=1038): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000005c0)=""/191}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18005}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000440)={0xa, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x20004000) 1m47.90741407s ago: executing program 2 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 1m32.891031778s ago: executing program 32 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 1.220649691s ago: executing program 5 (id=2311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) 1.212033591s ago: executing program 0 (id=2313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x50, r1, 0x607, 0x270bd09, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10}]}, 0x50}}, 0x4008400) 1.207144582s ago: executing program 5 (id=2315): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.140969108s ago: executing program 4 (id=2316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.140351098s ago: executing program 0 (id=2319): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.102714431s ago: executing program 5 (id=2320): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.093293412s ago: executing program 0 (id=2321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.020804088s ago: executing program 5 (id=2323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) 1.016847989s ago: executing program 4 (id=2324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 948.804295ms ago: executing program 5 (id=2327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4(r0, 0x0, &(0x7f0000000100), 0x800) 948.616755ms ago: executing program 4 (id=2328): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0xa800) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 648.712722ms ago: executing program 4 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x32, 0x1, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20048030) 618.398064ms ago: executing program 4 (id=2339): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd710079dbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="08006b003c0000000a0018"], 0x4c}, 0x1, 0x0, 0x0, 0x4c005}, 0x40480c0) 606.016766ms ago: executing program 1 (id=2340): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 575.385178ms ago: executing program 4 (id=2341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0x1f}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000040000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) set_mempolicy(0x8006, 0x0, 0x5) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r10, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) 392.962605ms ago: executing program 1 (id=2345): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251900000008000300", @ANYRES32=r4, @ANYBLOB="050060040000000005001d0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 392.731435ms ago: executing program 1 (id=2346): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) 291.718494ms ago: executing program 1 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x2c}}, 0x4000804) 244.822648ms ago: executing program 3 (id=2351): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x15, r2}, 0x14) 244.502218ms ago: executing program 1 (id=2352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="bada30fbc99b5400040000ea07561592619feb03c2abb6fc5e567c251f46bbd42b0b03b7", 0x24, 0x8040, &(0x7f00000001c0)={0x11, 0x86dd, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 197.880872ms ago: executing program 3 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x12000000) 177.266704ms ago: executing program 3 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x3c, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x0) 177.036874ms ago: executing program 0 (id=2355): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) 91.435592ms ago: executing program 3 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac=@broadcast, @random="b1725f45e9fa", {0x5, 0xb}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x40) 91.096321ms ago: executing program 5 (id=2357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc080) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0xfc}, 0x5}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 90.513681ms ago: executing program 0 (id=2358): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 78.611463ms ago: executing program 1 (id=2359): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) 978.04ТЕs ago: executing program 3 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2e, 0x25dfdb79, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c005}, 0x88c4) 586.7ТЕs ago: executing program 3 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 0 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x18, 0x2, 0x4}, {0x2, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): dge: link becomes ready [ 34.464407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.465835][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.466971][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.468547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.478632][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.485591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.487434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.489103][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.490173][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.500937][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.505348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.509710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.511327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.513869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.518441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.520020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.521426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.533185][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.535087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.536694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.538159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.539621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.541349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.542766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.545141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.547641][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.550622][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.558384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.559949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.561359][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.562402][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.565922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.579053][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.584287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.585887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.587341][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.588414][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.589756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.591104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.592546][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.593702][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.596830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.598423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.599930][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.601036][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.602327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.612022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.613644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.615708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.617562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.619161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.621009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.627603][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.629131][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.639294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.640891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.642935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.645560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.647285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.648720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.650147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.651764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.653200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.655408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.656965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.658606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.660090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.668757][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.670378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.671940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.673778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.675140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.679357][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.685392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.686829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.688284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.689597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.690961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.693049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.694879][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.696055][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.697410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.702284][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.708404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.709728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.711096][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.712756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.714471][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.715639][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.717733][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.725114][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.727538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.736632][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.738366][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.740112][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.748281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.750442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.751951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.754243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.758817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.759955][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.761517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.763057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.770245][ T4324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.771916][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.777667][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.779311][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.780660][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.782042][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.783993][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.785501][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.786869][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.788390][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.789822][ T1652] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.790842][ T1652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.792051][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.800964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.802585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.807469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.808785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.810113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.811880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.819790][ T4319] device veth0_vlan entered promiscuous mode [ 34.822623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.824387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.826348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.827955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.830089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.834539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.836116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.839162][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.842208][ T4319] device veth1_vlan entered promiscuous mode [ 34.855520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.857017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.858622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.860179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.872407][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.874278][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.877253][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.878445][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.880977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.882634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.889506][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.901160][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.908369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.909834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.917115][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.918670][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.920456][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.921863][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.932660][ T4319] device veth0_macvtap entered promiscuous mode [ 34.938722][ T4319] device veth1_macvtap entered promiscuous mode [ 34.941596][ T4331] device veth0_vlan entered promiscuous mode [ 34.945868][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.958002][ T4331] device veth1_vlan entered promiscuous mode [ 34.965463][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.967015][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.968413][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.969857][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.971321][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.972441][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.977281][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.979413][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.999638][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.001314][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.005002][ T4331] device veth0_macvtap entered promiscuous mode [ 35.008991][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.010463][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.012532][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.014911][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.018962][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.020553][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.028459][ T4324] device veth0_vlan entered promiscuous mode [ 35.030524][ T4331] device veth1_macvtap entered promiscuous mode [ 35.032190][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.035000][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.036869][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.038332][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.039549][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.042839][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.048187][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.055055][ T4324] device veth1_vlan entered promiscuous mode [ 35.056334][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.057892][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.059457][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.064537][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.065933][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.067300][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.068686][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.074880][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.076612][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.078774][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.084664][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.086122][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.087747][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.095297][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.096939][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.098953][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.102168][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.104176][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.105652][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.107148][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.119746][ T4324] device veth0_macvtap entered promiscuous mode [ 35.122012][ T4324] device veth1_macvtap entered promiscuous mode [ 35.125147][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.126441][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.127773][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.129097][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.131113][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.132648][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.137673][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.139230][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.140776][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.150952][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.161178][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.162819][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.165086][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.166612][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.168671][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.173198][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.174782][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.176318][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.177861][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.179402][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.180756][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.188641][ T4328] device veth0_vlan entered promiscuous mode [ 35.193802][ T4318] device veth0_vlan entered promiscuous mode [ 35.195843][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.197552][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.199194][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.200678][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.202841][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.207102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.208729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.210243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.211754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.213208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.215688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.228767][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.230014][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.231977][ T194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.238702][ T4328] device veth1_vlan entered promiscuous mode [ 35.244641][ T4318] device veth1_vlan entered promiscuous mode [ 35.255525][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.256834][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.258132][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.259394][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.269163][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.270391][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.283185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.284953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.286320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.287787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.289264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.295091][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.296334][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.298434][ T4328] device veth0_macvtap entered promiscuous mode [ 35.300705][ T4328] device veth1_macvtap entered promiscuous mode [ 35.307550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.309081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.310591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.312085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.314870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.321369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.323111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.327176][ T4318] device veth0_macvtap entered promiscuous mode [ 35.338614][ T4318] device veth1_macvtap entered promiscuous mode [ 35.345797][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.347468][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.348901][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.350513][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.352234][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.355377][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.357717][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.360078][ T1652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.361304][ T1652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.362468][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.365261][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.366590][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.368075][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.369534][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.371031][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.372426][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.374747][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.377505][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.380441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.382021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.383946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.385535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.387406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.388789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.390329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.395839][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.397718][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.399158][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.400553][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.402036][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.404017][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.406151][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.418883][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.420140][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.427861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.429663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.431247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.432953][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.435082][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.436458][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.438062][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.439529][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.441086][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.441202][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.447369][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.447421][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.450301][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.452452][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.466849][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.468688][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.470052][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.471281][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.474805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.476312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.477919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.551156][ T4318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.552553][ T4318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.560496][ T4318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.561917][ T4318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.630916][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.632265][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.657048][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.658183][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.659905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.666850][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.668036][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.670695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.679108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.681084][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.682756][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.687313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.511013][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 36.514154][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 36.515129][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 36.516161][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 36.517130][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 36.964675][ T4468] mmap: syz.3.16 (4468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.978556][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.980407][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.444901][ T4485] netlink: 84 bytes leftover after parsing attributes in process `syz.0.21'. [ 37.834689][ T4498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.835859][ T4498] IPv6: NLM_F_CREATE should be set when creating new route [ 38.050750][ T4497] netlink: 500 bytes leftover after parsing attributes in process `syz.4.25'. [ 38.098709][ T4502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 38.240831][ T4517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.242810][ T4517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.573377][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.585002][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 38.586475][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 38.587427][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 38.588459][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 39.516033][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 39.519168][ T4552] device syz_tun entered promiscuous mode [ 40.013601][ T4403] atkbd serio0: keyboard reset failed on [ 40.138666][ T4572] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 40.140059][ T4572] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 40.901463][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 40.904772][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 40.906151][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 40.907499][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 40.908759][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 42.517697][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.519137][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.868705][ T4643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.870366][ T4643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.907476][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.909129][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.914321][ T4649] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 42.915554][ T4649] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 42.973319][ T4327] Bluetooth: hci2: command 0x7a00 tx timeout [ 44.377020][ T4695] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 44.496014][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 45.152608][ T1965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.376908][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.381690][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.503367][ T1965] usb 1-1: Using ep0 maxpacket: 32 [ 45.506710][ T1965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.508294][ T1965] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.510334][ T1965] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 45.511622][ T1965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.527558][ T1965] usb 1-1: config 0 descriptor?? [ 45.606701][ T1965] usb 1-1: bad CDC descriptors [ 45.611796][ T1965] usb 1-1: bad CDC descriptors [ 45.806800][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.808290][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.843158][ T1965] usb 1-1: USB disconnect, device number 2 [ 46.140237][ T4738] ======================================================= [ 46.140237][ T4738] WARNING: The mand mount option has been deprecated and [ 46.140237][ T4738] and is ignored by this kernel. Remove the mand [ 46.140237][ T4738] option from the mount to silence this warning. [ 46.140237][ T4738] ======================================================= [ 46.650240][ T4755] process 'syz.3.116' launched './file0' with NULL argv: empty string added [ 46.803634][ T4763] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.124' sets config #32769 [ 47.267778][ T4785] loop8: detected capacity change from 0 to 8 [ 47.270818][ T4785] Dev loop8: unable to read RDB block 8 [ 47.271786][ T4785] loop8: unable to read partition table [ 47.272701][ T4785] loop8: partition table beyond EOD, truncated [ 47.293485][ T4785] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 47.602461][ T4812] netlink: 'syz.4.143': attribute type 13 has an invalid length. [ 47.969048][ T4812] gretap0: refused to change device tx_queue_len [ 47.971382][ T4812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 47.989356][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.990721][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.592576][ T27] audit: type=1326 audit(48.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 48.595985][ T27] audit: type=1326 audit(48.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 48.599317][ T27] audit: type=1326 audit(48.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff93559dd4 code=0x7ffc0000 [ 48.602622][ T27] audit: type=1326 audit(48.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 48.606890][ T27] audit: type=1326 audit(48.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 48.610426][ T27] audit: type=1326 audit(48.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 48.613831][ T27] audit: type=1326 audit(48.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 48.874714][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.889919][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 48.896434][ T27] audit: type=1326 audit(48.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 48.899616][ T27] audit: type=1326 audit(48.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 49.064267][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 49.069750][ T27] audit: type=1326 audit(49.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9355b510 code=0x7ffc0000 [ 49.077125][ T14] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 49.079404][ T14] usb 1-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.081589][ T14] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 49.086390][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.308770][ T14] usb 1-1: USB disconnect, device number 3 [ 49.895308][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.897557][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.899483][ T4875] 9pnet_fd: Insufficient options for proto=fd [ 50.462819][ T4330] Bluetooth: Wrong link type (-22) [ 50.523526][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.713334][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 50.716493][ T14] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 50.717674][ T14] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.718764][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.720125][ T14] usb 1-1: config 0 has no interface number 0 [ 50.722927][ T14] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 50.724864][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.726090][ T14] usb 1-1: Product: syz [ 50.726727][ T14] usb 1-1: Manufacturer: syz [ 50.727683][ T14] usb 1-1: SerialNumber: syz [ 50.730617][ T14] usb 1-1: config 0 descriptor?? [ 50.936190][ T14] usb 1-1: USB disconnect, device number 4 [ 51.435644][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.437308][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.479508][ T4947] binder: 4946:4947 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 54.059600][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.070571][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.205680][ T5010] capability: warning: `syz.3.214' uses 32-bit capabilities (legacy support in use) [ 54.564789][ T5022] netlink: 56 bytes leftover after parsing attributes in process `syz.0.219'. [ 54.614498][ T5027] kernel profiling enabled (shift: 63) [ 54.615515][ T5027] profiling shift: 63 too large [ 54.688541][ T5028] hfsplus: unable to find HFS+ superblock [ 55.037174][ T5039] Zero length message leads to an empty skb [ 55.113171][ T5049] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 55.749561][ T5065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 56.638765][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.640431][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.804933][ T5095] binder: 5094:5095 tried to acquire reference to desc 0, got 1 instead [ 56.806663][ T5095] binder_alloc: 5094: binder_alloc_buf, no vma [ 56.808141][ T5095] binder: cannot allocate buffer: vma cleared, target dead or dying [ 56.808176][ T5095] binder: 5094:5095 transaction async to 5094:0 failed 7/29189/-3, size 0-24 line 3230 [ 56.811377][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.101336][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.102840][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.753287][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 62.936509][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.938087][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.939291][ T14] usb 1-1: Product: syz [ 62.939928][ T14] usb 1-1: Manufacturer: syz [ 62.940642][ T14] usb 1-1: SerialNumber: syz [ 62.945764][ T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.952724][ T14] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 62.957911][ T14] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 63.089397][ T5234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.093867][ T5234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.905126][ T5252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.299'. [ 64.177034][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.178544][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.495355][ T112] cfg80211: failed to load regulatory.db [ 64.496862][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498006][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.701936][ T5262] trusted_key: encrypted_key: insufficient parameters specified [ 64.959034][ T5281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.960287][ T5281] IPv6: NLM_F_CREATE should be set when creating new route [ 65.741988][ T112] usb 1-1: USB disconnect, device number 5 [ 65.791369][ T5307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.321'. [ 65.849949][ T5315] syz.1.325 uses obsolete (PF_INET,SOCK_PACKET) [ 68.689031][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 68.689051][ T27] audit: type=1326 audit(324.653:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.695497][ T27] audit: type=1326 audit(324.653:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.796530][ T27] audit: type=1326 audit(324.653:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.896252][ T27] audit: type=1326 audit(324.653:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.915361][ T27] audit: type=1326 audit(324.663:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.941108][ T27] audit: type=1326 audit(324.663:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.956360][ T27] audit: type=1326 audit(324.663:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 68.972231][ T27] audit: type=1326 audit(324.663:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 69.405351][ T27] audit: type=1326 audit(324.663:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 69.408769][ T27] audit: type=1326 audit(324.663:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 69.434340][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 69.492733][ T5402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.507687][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 69.522566][ T5411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.525354][ T5411] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.527921][ T5411] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 69.551954][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 69.566383][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 70.491091][ T5451] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 70.492562][ T5451] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 70.494295][ T5451] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.372'. [ 72.013277][ T4330] Bluetooth: hci4: command 0x0405 tx timeout [ 72.543116][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.557610][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.679807][ T5531] capability: warning: `syz.0.404' uses deprecated v2 capabilities in a way that may be insecure [ 72.764248][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.765833][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.117927][ T5545] Bluetooth: MGMT ver 1.22 [ 76.814561][ T4327] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 76.816018][ T4327] Bluetooth: hci2: Injecting HCI hardware error event [ 76.817621][ T4330] Bluetooth: hci2: hardware error 0x00 [ 78.731845][ T5710] 8021q: VLANs not supported on ip6gre0 [ 78.911331][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.913004][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.916279][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.917663][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.121471][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.125115][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.133525][ T4330] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 79.337357][ T5751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.339429][ T5751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.130092][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.131724][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.444099][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 83.950471][ T5900] binder: 5899:5900 ioctl c018620c 0 returned -14 [ 84.217201][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.222969][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.184717][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.186100][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.553316][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.554759][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.908876][ T6032] netlink: 'syz.1.592': attribute type 6 has an invalid length. [ 87.910138][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 88.064271][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.066504][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.485021][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.500052][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.769911][ T6040] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.771383][ T6040] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.772688][ T6040] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.774184][ T6040] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.174221][ T6105] loop2: detected capacity change from 0 to 7 [ 90.177657][ T4312] loop2: [ 90.178173][ T4312] loop2: partition table partially beyond EOD, truncated [ 90.494308][ T6105] loop2: [ 90.494815][ T6105] loop2: partition table partially beyond EOD, truncated [ 92.043850][ T6142] netlink: 168 bytes leftover after parsing attributes in process `syz.4.634'. [ 92.094060][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.100080][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.534245][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 93.044204][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 93.086862][ T6175] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.647'. [ 93.091773][ T6173] Illegal XDP return value 4294967294 on prog (id 30) dev N/A, expect packet loss! [ 93.679031][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.680351][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.501478][ T6202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.667410][ T6225] af_packet: tpacket_rcv: packet too big, clamped from 3974 to 3944. macoff=96 [ 96.481274][ T6287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.688'. [ 96.590527][ T6295] VFS: Mount too revealing [ 96.902256][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.904687][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.219796][ T6320] netlink: 148 bytes leftover after parsing attributes in process `syz.3.703'. [ 97.287902][ T4388] kernel write not supported for file [eventfd] (pid: 4388 comm: kworker/1:5) [ 97.693770][ T4330] Bluetooth: hci4: command 0x0411 tx timeout [ 97.971677][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.974564][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.072901][ T6394] input: syz1 as /devices/virtual/input/input4 [ 103.197544][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 103.774527][ T6471] 9pnet_fd: Insufficient options for proto=fd [ 103.842555][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.845049][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.039794][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.042128][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.388053][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 104.391121][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.414443][ T6498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.042520][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.045039][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.194011][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 105.547651][ T6557] overlayfs: failed to clone lowerpath [ 105.573206][ T6561] autofs4:pid:6561:autofs_fill_super: pipe file descriptor does not contain proper ops [ 105.964664][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 105.966468][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.046688][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.040834][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 109.727692][ T6727] overlayfs: overlapping lowerdir path [ 109.907823][ T6730] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.909314][ T6730] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 109.910558][ T6730] overlayfs: missing 'lowerdir' [ 110.150669][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 110.150678][ T27] audit: type=1326 audit(366.123:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.157917][ T27] audit: type=1326 audit(366.133:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.168853][ T27] audit: type=1326 audit(366.143:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.179797][ T27] audit: type=1326 audit(366.143:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.192051][ T27] audit: type=1326 audit(366.143:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.205565][ T27] audit: type=1326 audit(366.143:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.216728][ T27] audit: type=1326 audit(366.143:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.226518][ T27] audit: type=1326 audit(366.143:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.237501][ T27] audit: type=1326 audit(366.143:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 110.240576][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.243201][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.247302][ T27] audit: type=1326 audit(366.143:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb095b9e8 code=0x7ffc0000 [ 111.069522][ T6773] netlink: 'syz.1.875': attribute type 25 has an invalid length. [ 111.070862][ T6773] netlink: 184 bytes leftover after parsing attributes in process `syz.1.875'. [ 111.159620][ T6779] block device autoloading is deprecated and will be removed. [ 111.199534][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.201086][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.660819][ T6793] loop8: detected capacity change from 0 to 1 [ 111.664162][ T4312] Dev loop8: unable to read RDB block 1 [ 111.665063][ T4312] loop8: unable to read partition table [ 111.665964][ T4312] loop8: partition table beyond EOD, truncated [ 111.672021][ T6793] Dev loop8: unable to read RDB block 1 [ 111.672930][ T6793] loop8: unable to read partition table [ 111.675427][ T6793] loop8: partition table beyond EOD, truncated [ 111.676546][ T6793] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 112.837165][ T6825] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 113.004317][ T5373] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.014446][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.016749][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.645712][ T6849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.905'. [ 113.647293][ T6849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.905'. [ 114.212767][ T6862] fuse: Unknown parameter 'fd0x0000000000000004' [ 114.308692][ T6867] netlink: 'syz.1.913': attribute type 32 has an invalid length. [ 114.761437][ T6882] 9pnet_fd: Insufficient options for proto=fd [ 114.764788][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 114.876921][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 114.893367][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.951019][ T6893] loop9: detected capacity change from 0 to 7 [ 114.953629][ T4312] Dev loop9: unable to read RDB block 7 [ 114.954531][ T4312] loop9: AHDI p1 p2 [ 114.955219][ T4312] loop9: partition table partially beyond EOD, truncated [ 114.957549][ T4312] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 114.975351][ T6893] Dev loop9: unable to read RDB block 7 [ 114.976284][ T6893] loop9: AHDI p1 p2 [ 114.976957][ T6893] loop9: partition table partially beyond EOD, truncated [ 114.978086][ T6893] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 115.011006][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 115.018204][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 115.986141][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.988560][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.081011][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.082828][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.402098][ T6929] xt_CT: No such helper "pptp" [ 116.489076][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 116.489085][ T27] audit: type=1326 audit(372.463:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.493023][ T27] audit: type=1326 audit(372.463:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.497839][ T27] audit: type=1326 audit(372.463:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.508943][ T27] audit: type=1326 audit(372.463:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.512138][ T27] audit: type=1326 audit(372.463:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.515669][ T27] audit: type=1326 audit(372.463:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.519424][ T27] audit: type=1326 audit(372.473:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.523108][ T27] audit: type=1326 audit(372.473:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.526980][ T27] audit: type=1326 audit(372.473:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 116.545372][ T27] audit: type=1326 audit(372.523:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x7ffc0000 [ 117.746985][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.749914][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.296709][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.300485][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.814659][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.817079][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.852334][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 121.452955][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.455849][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.969716][ T7233] netlink: 'syz.4.1045': attribute type 83 has an invalid length. [ 124.481515][ T7280] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1064'. [ 125.505018][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 125.506696][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 125.514480][ T7314] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.516102][ T7314] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.517488][ T7314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.518977][ T7314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.934417][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.937542][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.973837][ T14] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 125.977712][ T14] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 125.979171][ T14] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 127.087066][ T7366] binder: 7365:7366 tried to acquire reference to desc 0, got 1 instead [ 127.089758][ T7366] binder: 7365:7366 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.092572][ T7366] binder: 7366 RLIMIT_NICE not set [ 127.093879][ T7366] binder: undelivered transaction 15, put_user failed [ 127.095115][ T7366] binder: 7365:7366 ioctl c0306201 20000680 returned -14 [ 127.096628][ T4547] binder: undelivered TRANSACTION_COMPLETE [ 128.516540][ T7387] trusted_key: encrypted_key: insufficient parameters specified [ 128.955361][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'. [ 128.984828][ T7411] loop8: detected capacity change from 0 to 8 [ 128.987165][ T4312] Dev loop8: unable to read RDB block 8 [ 128.988173][ T4312] loop8: unable to read partition table [ 128.989231][ T4312] loop8: partition table beyond EOD, truncated [ 128.999447][ T7411] Dev loop8: unable to read RDB block 8 [ 129.000987][ T7411] loop8: unable to read partition table [ 129.002085][ T7411] loop8: partition table beyond EOD, truncated [ 129.006224][ T7411] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 129.601957][ T7439] syz.3.1129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.360673][ T7452] overlayfs: failed to clone upperpath [ 130.440222][ T27] kauditd_printk_skb: 130 callbacks suppressed [ 130.440231][ T27] audit: type=1326 audit(386.413:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.444578][ T27] audit: type=1326 audit(386.423:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.450261][ T27] audit: type=1326 audit(386.423:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.458847][ T27] audit: type=1326 audit(386.423:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.465532][ T27] audit: type=1326 audit(386.423:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.476272][ T27] audit: type=1326 audit(386.423:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=46 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.479614][ T27] audit: type=1326 audit(386.423:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.484634][ T27] audit: type=1326 audit(386.423:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.488894][ T27] audit: type=1326 audit(386.423:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 130.493221][ T27] audit: type=1326 audit(386.423:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.3.1138" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb075b9e8 code=0x7ffc0000 [ 131.320791][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 131.322648][ T7470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.415666][ T7477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.508787][ T7480] ptrace attach of "./syz-executor exec"[4318] was attempted by "./syz-executor exec"[7480] [ 131.907754][ T4330] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 132.179237][ T7489] netlink: 'syz.0.1150': attribute type 10 has an invalid length. [ 132.223335][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.227824][ T7489] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.195952][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.553460][ T7527] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 133.882330][ T7527] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.934048][ T4330] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 135.935510][ T4330] Bluetooth: hci1: Injecting HCI hardware error event [ 135.937741][ T4327] Bluetooth: hci1: hardware error 0x00 [ 136.919885][ T7624] device syzkaller1 entered promiscuous mode [ 137.763305][ T7660] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 137.924706][ T4337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.926764][ T4337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.928523][ T4337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.929962][ T4337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.931637][ T4337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.932796][ T4337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.409469][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 138.462363][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.466024][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.468088][ T7677] device bridge_slave_0 entered promiscuous mode [ 138.470498][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.471704][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.475450][ T7677] device bridge_slave_1 entered promiscuous mode [ 138.485080][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.488358][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.493989][ T4327] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.501518][ T7677] team0: Port device team_slave_0 added [ 138.503350][ T7677] team0: Port device team_slave_1 added [ 138.510345][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.511437][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.518237][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.521140][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.522217][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.526724][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.856687][ T7677] device hsr_slave_0 entered promiscuous mode [ 138.893664][ T7677] device hsr_slave_1 entered promiscuous mode [ 138.913657][ T7677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.914915][ T7677] Cannot create hsr debugfs directory [ 139.033030][ T7677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.395335][ T7677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.425804][ T7677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.484546][ T7677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.542513][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.547873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.549624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.555175][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.558228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.559985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.561602][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.562757][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.565895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.569615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.571285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.572661][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.573927][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.577595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.581346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.586909][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.589903][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.591302][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.593407][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.595000][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.597978][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.599531][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.602477][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.608346][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.612049][ T7677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.671915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.674146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.678067][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.756771][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.758495][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.767043][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.768587][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.771016][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.772537][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.777893][ T7677] device veth0_vlan entered promiscuous mode [ 139.782410][ T7677] device veth1_vlan entered promiscuous mode [ 139.793823][ T7677] device veth0_macvtap entered promiscuous mode [ 139.796099][ T7677] device veth1_macvtap entered promiscuous mode [ 139.800592][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.802367][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.804590][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.806084][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.807519][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.809066][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.810481][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.811959][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.815048][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.817678][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.824115][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.825476][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.827084][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.828485][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.829871][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.832046][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.834881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.836328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.837708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.840385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.842077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.845424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.847211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.848834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.935222][ T7677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.936903][ T7677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.938293][ T7677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.939637][ T7677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.941678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.013321][ T4327] Bluetooth: hci5: command 0x0409 tx timeout [ 140.022563][ T4673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.024957][ T4673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.028677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.050357][ T4619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.051733][ T4619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.055113][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.447939][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1242'. [ 141.867378][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 141.867491][ T27] audit: type=1326 audit(397.843:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 141.892872][ T27] audit: type=1326 audit(397.843:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.5.1263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 142.095820][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 142.122385][ T7817] overlayfs: unrecognized mount option "smackfshat=tmpfs" or missing value [ 142.127145][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1266'. [ 142.829289][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.830887][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.122971][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.125405][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.131226][ T7845] device bridge0 entered promiscuous mode [ 143.669872][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 144.193294][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 144.985020][ T4327] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 144.987492][ T4327] Bluetooth: hci4: Injecting HCI hardware error event [ 145.002806][ T4330] Bluetooth: hci4: hardware error 0x00 [ 146.377934][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 147.613461][ T4330] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 150.242376][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1342'. [ 150.245990][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1342'. [ 150.722454][ T8029] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1349'. [ 151.620321][ T8066] loop2: detected capacity change from 0 to 7 [ 151.621978][ T8066] Dev loop2: unable to read RDB block 7 [ 151.622929][ T8066] loop2: AHDI p1 p2 p3 [ 151.623614][ T8066] loop2: partition table partially beyond EOD, truncated [ 151.625060][ T8066] loop2: p1 start 1818582900 is beyond EOD, truncated [ 151.626307][ T8066] loop2: p3 start 335544320 is beyond EOD, truncated [ 151.708676][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.710152][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.885550][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ac9aa294: rx timeout, send abort [ 152.888174][ C1] vcan0: j1939_tp_rxtimer: 0x000000000abda893: rx timeout, send abort [ 152.889363][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ac9aa294: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.891510][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000abda893: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.796942][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.893640][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.066188][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 155.159702][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'. [ 155.186778][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.135776][ T8213] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1417'. [ 156.137275][ T8213] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1417'. [ 156.251540][ T27] audit: type=1326 audit(412.223:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.258552][ T27] audit: type=1326 audit(412.223:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.261896][ T27] audit: type=1326 audit(412.233:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.267135][ T27] audit: type=1326 audit(412.233:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.270691][ T27] audit: type=1326 audit(412.233:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.288429][ T27] audit: type=1326 audit(412.263:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.292153][ T27] audit: type=1326 audit(412.263:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.298503][ T27] audit: type=1326 audit(412.263:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.4.1424" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 156.651724][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.658273][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.751669][ T8251] ЊЊЊЊЊЊ: renamed from vlan0 [ 157.317375][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.318983][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.685229][ T8276] netlink: 'syz.3.1443': attribute type 3 has an invalid length. [ 157.898821][ T8306] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 158.876387][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 158.876415][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 159.161838][ T8325] netlink: 'syz.1.1463': attribute type 3 has an invalid length. [ 159.262649][ T8337] binder: 8335:8337 tried to acquire reference to desc 0, got 1 instead [ 159.264924][ T8337] binder: 8335:8337 got transaction with invalid data ptr [ 159.271883][ T8337] binder: 8335:8337 transaction async to 8335:0 failed 20/29201/-14, size 0-24 line 3333 [ 159.290060][ T8345] sch_fq: defrate 5 ignored. [ 159.316539][ T5649] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.318229][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 160.319727][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 160.672244][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1499'. [ 161.895328][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1520'. [ 163.029353][ T27] audit: type=1326 audit(419.003:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.0.1529" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9355b9e8 code=0x0 [ 163.346096][ T8511] netlink: 'syz.5.1534': attribute type 4 has an invalid length. [ 165.130147][ T4327] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 166.412776][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.415625][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.992160][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.995256][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.070782][ T27] audit: type=1326 audit(424.043:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.077368][ T27] audit: type=1326 audit(424.043:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.082834][ T27] audit: type=1326 audit(424.053:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa6359dd4 code=0x7ffc0000 [ 168.095173][ T27] audit: type=1326 audit(424.053:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.102475][ T27] audit: type=1326 audit(424.053:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.107488][ T27] audit: type=1326 audit(424.073:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.115861][ T8687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.117601][ T27] audit: type=1326 audit(424.073:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.120944][ T27] audit: type=1326 audit(424.073:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.124682][ T27] audit: type=1326 audit(424.073:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 168.128274][ T27] audit: type=1326 audit(424.073:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.5.1605" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x7ffc0000 [ 169.064326][ T8797] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1653'. [ 170.615723][ T8826] input: syz0 as /devices/virtual/input/input7 [ 172.731312][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.732536][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.739764][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.742854][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.745573][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.747515][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.750923][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.752940][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.758383][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.760689][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.765095][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.767291][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.769527][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.771971][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.777386][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.780831][ T4388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.788455][ T4388] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [С“ЦНZФцwЧ§[baџ–щ|\rnР)AМ#6”oвЏє?•№a IќИфуs„ж5hVѕ3ёЎ(;щђ [ 172.788455][ T4388] убƒPд$zЩЗ‡X$ЉЗр˜w[Sжь–РRьбeбzx—оuёS rЛœЯlсь[Е5l'˜ZCР] on [ 172.879671][ T8851] fido_id[8851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.539428][ T8859] sched: RT throttling activated [ 174.736038][ T8860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.738535][ T8862] ceph: No mds server is up or the cluster is laggy [ 174.743910][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 174.747099][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.749017][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.754638][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.755915][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.759252][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 174.783613][ T8864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.907822][ T8860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.668930][ T8860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.826625][ T8860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.035794][ T8860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.038923][ T8860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.041863][ T8860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.044812][ T8860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.476363][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.477850][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.622861][ T8909] dlm: no local IP address has been set [ 176.638449][ T8909] dlm: cannot start dlm midcomms -107 [ 176.962136][ T8896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.991740][ T8896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.289394][ T8896] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.290826][ T8896] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.292206][ T8896] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.295826][ T8896] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.714682][ T8888] device tunl0 entered promiscuous mode [ 177.716896][ T8888] netlink: 'syz.1.1683': attribute type 4 has an invalid length. [ 177.718097][ T8888] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1683'. [ 177.726733][ T8912] netlink: 'syz.3.1689': attribute type 4 has an invalid length. [ 178.225834][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 178.435693][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1695'. [ 178.515698][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 178.531110][ T8952] device hsr_slave_0 left promiscuous mode [ 178.599367][ T8952] device hsr_slave_1 left promiscuous mode [ 178.739516][ T8963] device syzkaller0 entered promiscuous mode [ 178.810712][ T8974] 9pnet_virtio: no channels available for device syz [ 178.988344][ T8978] netlink: 'syz.5.1702': attribute type 30 has an invalid length. [ 178.991186][ T8978] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.992578][ T8978] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.994025][ T8978] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.995276][ T8978] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.029986][ T8981] 9pnet_virtio: no channels available for device syz [ 179.083727][ T8978] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.085203][ T8978] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.086488][ T8978] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.087830][ T8978] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.446827][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.448355][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.596948][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 180.596959][ T27] audit: type=1326 audit(436.573:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.601014][ T27] audit: type=1326 audit(436.573:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.614144][ T27] audit: type=1326 audit(436.573:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.617235][ T27] audit: type=1326 audit(436.573:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.626181][ T27] audit: type=1326 audit(436.573:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.629175][ T27] audit: type=1326 audit(436.573:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.637489][ T27] audit: type=1326 audit(436.573:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.640721][ T27] audit: type=1326 audit(436.573:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.647327][ T27] audit: type=1326 audit(436.573:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 180.650750][ T27] audit: type=1326 audit(436.573:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb935781c code=0x7ffc0000 [ 181.321501][ T9058] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 181.322726][ T9058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.390920][ T9058] vhci_hcd vhci_hcd.0: Device attached [ 181.436862][ T9059] vhci_hcd: connection closed [ 181.439560][ T4876] vhci_hcd: stop threads [ 181.442021][ T4876] vhci_hcd: release socket [ 181.442875][ T4876] vhci_hcd: disconnect device [ 182.077115][ T9073] tmpfs: Unknown parameter 'quota' [ 182.306316][ T9080] 9pnet_virtio: no channels available for device syz [ 182.376714][ T51] block nbd5: Attempted send on invalid socket [ 182.377915][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.380030][ T51] block nbd5: Attempted send on invalid socket [ 182.381007][ T51] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.382579][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 182.388381][ T51] block nbd5: Attempted send on invalid socket [ 182.389386][ T51] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.392260][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 182.400182][ T51] block nbd5: Attempted send on invalid socket [ 182.401184][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.402827][ T51] block nbd5: Attempted send on invalid socket [ 182.403940][ T51] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.405673][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 182.411828][ T51] block nbd5: Attempted send on invalid socket [ 182.412788][ T51] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.414500][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 182.419956][ T51] block nbd5: Attempted send on invalid socket [ 182.420955][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.422972][ T51] block nbd5: Attempted send on invalid socket [ 182.424088][ T51] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.425764][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 182.429492][ T51] block nbd5: Attempted send on invalid socket [ 182.430515][ T51] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.434390][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 182.436173][ T78] block nbd5: Attempted send on invalid socket [ 182.437185][ T78] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.439555][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 182.441302][ T9083] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 182.442800][ T9083] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 182.909510][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.913068][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.818957][ T9139] 9pnet_virtio: no channels available for device syz [ 183.887217][ T9141] 9pnet_fd: Insufficient options for proto=fd [ 184.018414][ T9148] device syzkaller0 entered promiscuous mode [ 184.107682][ T9151] lo speed is unknown, defaulting to 1000 [ 184.108875][ T9151] lo speed is unknown, defaulting to 1000 [ 184.114920][ T9151] lo speed is unknown, defaulting to 1000 [ 184.123728][ T9151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.132509][ T9151] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.164588][ T9151] lo speed is unknown, defaulting to 1000 [ 184.167718][ T9151] lo speed is unknown, defaulting to 1000 [ 184.170027][ T9151] lo speed is unknown, defaulting to 1000 [ 184.172197][ T9151] lo speed is unknown, defaulting to 1000 [ 184.174420][ T9151] lo speed is unknown, defaulting to 1000 [ 184.176609][ T9151] lo speed is unknown, defaulting to 1000 [ 184.179890][ T9151] lo speed is unknown, defaulting to 1000 [ 184.537332][ T9160] ptrace attach of "./syz-executor exec"[4319] was attempted by " [ 185.250430][ T9162] binder: 9161:9162 tried to acquire reference to desc 0, got 1 instead [ 185.282041][ T9162] binder: 9161:9162 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 185.289038][ T9162] binder: 9162 RLIMIT_NICE not set [ 185.294403][ T9162] binder: 9162 RLIMIT_NICE not set [ 185.295333][ T9162] binder: 9161:9162 got reply transaction with bad transaction stack, transaction 25 has target 9161:9162 [ 185.297278][ T9162] binder: 9161:9162 transaction reply to 0:0 failed 26/29201/-71, size 0-0 line 2961 [ 185.329736][ T4367] binder: release 9161:9162 transaction 25 out, still active [ 185.330977][ T4367] binder: undelivered TRANSACTION_COMPLETE [ 185.331969][ T4367] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.351309][ T7879] binder: release 9161:9162 transaction 25 in, still active [ 185.352560][ T7879] binder: send failed reply for transaction 25, target dead [ 186.252887][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.255567][ T9209] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 186.821875][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 186.825613][ T9222] device bridge_slave_1 left promiscuous mode [ 186.826666][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.866153][ T9222] device bridge_slave_0 left promiscuous mode [ 186.867284][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.099534][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 187.101032][ T9225] device bridge_slave_1 left promiscuous mode [ 187.102230][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.169066][ T9225] device bridge_slave_0 left promiscuous mode [ 187.170162][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.184227][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 187.373718][ T14] usb 1-1: no suitable firmware found! [ 187.374691][ T14] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 187.376957][ T112] usb 1-1: ath9k_htc: USB layer deinitialized [ 187.378596][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.379539][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.493565][ T9231] netlink: 'syz.4.1798': attribute type 13 has an invalid length. [ 187.523370][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.553321][ T9231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.277002][ T9253] 9pnet: Unknown protocol version 9p2000.uџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџnl80211 [ 189.303759][ T4368] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.483827][ T4368] usb 1-1: Using ep0 maxpacket: 8 [ 189.488345][ T4368] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.492263][ T4368] usb 1-1: New USB device found, idVendor=04d8, idProduct=00e3, bcdDevice= 0.00 [ 189.496460][ T4368] usb 1-1: New USB device strings: Mfr=31, Product=0, SerialNumber=0 [ 189.497762][ T4368] usb 1-1: Manufacturer: syz [ 189.500335][ T4368] usb 1-1: config 0 descriptor?? [ 189.556963][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.564482][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.290238][ T27] kauditd_printk_skb: 6445 callbacks suppressed [ 191.290246][ T27] audit: type=1326 audit(447.263:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.299854][ T27] audit: type=1326 audit(447.273:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.309722][ T27] audit: type=1326 audit(447.283:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.313114][ T27] audit: type=1326 audit(447.283:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.333294][ T27] audit: type=1326 audit(447.283:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.336501][ T27] audit: type=1326 audit(447.283:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.359960][ T27] audit: type=1326 audit(447.283:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.363604][ T27] audit: type=1326 audit(447.283:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.366900][ T27] audit: type=1326 audit(447.283:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.370080][ T27] audit: type=1326 audit(447.283:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.5.1833" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa70e481c code=0x7ffc0000 [ 191.786854][ T4368] usbhid 1-1:0.0: can't add hid device: -71 [ 191.787885][ T4368] usbhid: probe of 1-1:0.0 failed with error -71 [ 191.795774][ T4368] usb 1-1: USB disconnect, device number 6 [ 191.936018][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 196.223968][ T9450] 9pnet_virtio: no channels available for device syz [ 197.557434][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 198.024753][ T9491] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 198.275176][ T27] kauditd_printk_skb: 4281 callbacks suppressed [ 198.275185][ T27] audit: type=1326 audit(454.253:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.281177][ T27] audit: type=1326 audit(454.253:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.290592][ T27] audit: type=1326 audit(454.263:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.296933][ T27] audit: type=1326 audit(454.263:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.302983][ T27] audit: type=1326 audit(454.263:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.321069][ T27] audit: type=1326 audit(454.263:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.331183][ T27] audit: type=1326 audit(454.263:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.338117][ T27] audit: type=1326 audit(454.273:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8559dd4 code=0x7ffc0000 [ 198.351867][ T27] audit: type=1326 audit(454.273:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb855d54c code=0x7ffc0000 [ 198.360758][ T27] audit: type=1326 audit(454.273:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb855b9e8 code=0x7ffc0000 [ 198.586174][ T9503] lo speed is unknown, defaulting to 1000 [ 198.762085][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 199.625875][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1912'. [ 199.639998][ T9539] device vlan0 entered promiscuous mode [ 199.806097][ T4327] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 200.112070][ T9580] netlink: 'syz.3.1924': attribute type 10 has an invalid length. [ 200.142919][ T9580] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.329225][ T9621] device bond_slave_0 entered promiscuous mode [ 201.330383][ T9621] device bond_slave_1 entered promiscuous mode [ 201.331377][ T9621] device team_slave_0 entered promiscuous mode [ 201.333191][ T9621] device team_slave_1 entered promiscuous mode [ 201.359269][ T9621] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 201.374348][ T9621] device bond_slave_0 left promiscuous mode [ 201.375388][ T9621] device bond_slave_1 left promiscuous mode [ 201.376424][ T9621] device team_slave_0 left promiscuous mode [ 201.377359][ T9621] device team_slave_1 left promiscuous mode [ 201.590199][ T9616] binder: 9615:9616 tried to acquire reference to desc 0, got 1 instead [ 202.307797][ T9647] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 203.860031][ T9699] device syzkaller1 entered promiscuous mode [ 203.938592][ T9703] cgroup: Name too long [ 204.016194][ T9705] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1967'. [ 204.176635][ T9713] lo speed is unknown, defaulting to 1000 [ 205.128553][ T4330] Bluetooth: hci5: hardware error 0x0b [ 205.187088][ T9724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.189147][ T9724] bond0: (slave bond2): Enslaving as an active interface with an up link [ 205.380971][ T9742] tipc: Started in network mode [ 205.381920][ T9742] tipc: Node identity aa8ab883518c, cluster identity 4711 [ 205.383667][ T9742] tipc: Enabled bearer , priority 0 [ 205.385199][ T9742] device syzkaller0 entered promiscuous mode [ 205.417733][ T9745] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1982'. [ 205.427427][ T9742] tipc: Resetting bearer [ 205.431129][ T9741] tipc: Resetting bearer [ 205.690290][ T9741] tipc: Disabling bearer [ 206.001291][ T9760] batman_adv: batadv0: Adding interface: gretap1 [ 206.002333][ T9760] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.006120][ T9760] batman_adv: batadv0: Interface activated: gretap1 [ 206.066143][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 206.651289][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.652775][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.980551][ T9804] netlink: 'syz.3.2006': attribute type 13 has an invalid length. [ 207.373406][ T4330] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 207.660636][ T9824] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2015'. [ 207.726120][ T9824] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2015'. [ 208.748342][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.751135][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.957817][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 209.957827][ T27] audit: type=1326 audit(465.933:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.5.2018" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa635b9e8 code=0x0 [ 211.589048][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.592541][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.649860][ T9876] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2033'. [ 211.923473][ T9890] lo speed is unknown, defaulting to 1000 [ 212.147492][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 212.381243][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2043'. [ 212.537192][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2042'. [ 212.538811][ T9906] device wlan0 entered promiscuous mode [ 213.013178][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.016430][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.323584][ T7879] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.506455][ T7879] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.508315][ T7879] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.509786][ T7879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.511100][ T7879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.522269][ T9914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.729546][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.730931][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.779496][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.781049][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.960477][ T9959] 9pnet_fd: Insufficient options for proto=fd [ 215.043112][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 215.418611][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 215.603783][T10003] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 215.604866][T10003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.606677][T10003] vhci_hcd vhci_hcd.0: Device attached [ 215.652697][T10004] vhci_hcd: connection closed [ 215.656375][ T4447] vhci_hcd: stop threads [ 215.657746][ T4447] vhci_hcd: release socket [ 215.658390][ T4447] vhci_hcd: disconnect device [ 216.078166][ T7879] usb 1-1: USB disconnect, device number 7 [ 216.127490][T10010] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2085'. [ 216.376829][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 216.655350][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2094'. [ 217.217742][T10054] "syz.4.2099" (10054) uses obsolete ecb(arc4) skcipher [ 217.469574][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 217.600538][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.638447][T10071] bond0: (slave rose0): Enslaving as an active interface with an up link [ 217.639883][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 217.751140][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 218.191573][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 218.198070][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 218.311198][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2117'. [ 218.489421][T10146] binder: 10144:10146 ioctl c018620c 20000040 returned -1 [ 218.538737][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2124'. [ 218.686980][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 218.888159][T10192] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 218.889318][T10192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.891165][T10192] vhci_hcd vhci_hcd.0: Device attached [ 218.934310][T10198] tipc: Enabling of bearer rejected, failed to enable media [ 219.153353][ T1965] usb 12-1: new low-speed USB device number 2 using vhci_hcd [ 219.323431][T10208] tipc: Started in network mode [ 219.325445][T10208] tipc: Node identity ac14140f, cluster identity 4711 [ 219.329273][T10208] tipc: New replicast peer: 255.255.255.255 [ 219.342706][T10208] tipc: Enabled bearer , priority 10 [ 219.345647][T10208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2139'. [ 219.385397][T10193] vhci_hcd: connection reset by peer [ 219.386512][ T5333] vhci_hcd: stop threads [ 219.387263][ T5333] vhci_hcd: release socket [ 219.389079][ T5333] vhci_hcd: disconnect device [ 220.454780][ T4368] tipc: Node number set to 2886997007 [ 220.531860][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2144'. [ 221.802945][T10247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 221.882750][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 222.077369][T10277] 9pnet_fd: Insufficient options for proto=fd [ 222.160878][T10283] lo speed is unknown, defaulting to 1000 [ 222.208177][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2166'. [ 222.421755][T10291] ip6_tunnel: non-ECT from fc00:0001:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 222.620631][T10300] 9pnet_virtio: no channels available for device syz [ 222.626521][T10298] lo speed is unknown, defaulting to 1000 [ 222.724802][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 222.987909][T10315] lo speed is unknown, defaulting to 1000 [ 223.222618][T10334] device syzkaller0 entered promiscuous mode [ 223.384179][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 223.432446][T10342] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 223.646348][ T27] audit: type=1326 audit(479.623:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.649679][ T27] audit: type=1326 audit(479.623:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.655228][ T27] audit: type=1326 audit(479.623:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.667873][ T27] audit: type=1326 audit(479.623:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.678989][ T27] audit: type=1326 audit(479.623:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.687947][ T27] audit: type=1326 audit(479.623:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.698311][ T27] audit: type=1326 audit(479.623:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.705985][ T27] audit: type=1326 audit(479.623:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.716017][ T27] audit: type=1326 audit(479.623:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.730592][ T27] audit: type=1326 audit(479.623:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10347 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff942f981c code=0x7ffc0000 [ 223.984923][T10365] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 224.045213][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 224.253607][ T1965] vhci_hcd: vhci_device speed not set [ 224.295590][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 224.566551][T10411] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 225.348318][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 225.873984][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 226.030006][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.031489][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.543171][T10478] device syzkaller0 entered promiscuous mode [ 226.623828][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 226.865286][T10496] netlink: 'syz.0.2241': attribute type 10 has an invalid length. [ 226.939422][T10503] device syzkaller0 entered promiscuous mode [ 227.106385][T10507] lo speed is unknown, defaulting to 1000 [ 227.242098][T10517] overlayfs: failed to clone upperpath [ 227.247539][T10517] overlayfs: failed to clone upperpath [ 227.325437][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2252'. [ 227.898069][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2265'. [ 227.988475][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'. [ 228.597937][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2280'. [ 228.650379][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 228.930558][T10648] device syzkaller0 entered promiscuous mode [ 229.054153][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2293'. [ 229.121362][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'. [ 229.295866][T10679] device syzkaller0 entered promiscuous mode [ 229.418900][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2307'. [ 229.828190][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 229.890299][T10762] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 230.044451][T10786] device vlan2 entered promiscuous mode [ 230.045376][T10786] device bridge0 entered promiscuous mode [ 230.071931][T10796] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2336'. [ 230.175787][T10807] netlink: 'syz.1.2340': attribute type 24 has an invalid length. [ 230.392669][T10843] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 230.402135][T10843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.414927][T10843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.416288][T10843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.417647][T10843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.418998][T10843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.422384][T10843] bond3: (slave geneve2): making interface the new active one [ 230.427634][T10843] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 230.429721][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 230.767511][T10897] device syzkaller0 entered promiscuous mode [ 230.770355][T10897] ------------[ cut here ]------------ [ 230.771337][T10897] WARNING: CPU: 0 PID: 10897 at include/linux/skbuff.h:2844 em_nbyte_match+0x294/0x350 [ 230.772839][T10897] Modules linked in: [ 230.773480][T10897] CPU: 0 PID: 10897 Comm: syz.0.2362 Not tainted syzkaller #0 [ 230.774598][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 230.775947][T10897] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 230.777124][T10897] pc : em_nbyte_match+0x294/0x350 [ 230.777969][T10897] lr : em_nbyte_match+0x294/0x350 [ 230.778754][T10897] sp : ffff800022957000 [ 230.779399][T10897] x29: ffff800022957000 x28: 0000000000000001 x27: 000000000000ffff [ 230.780757][T10897] x26: 1fffe0002148648e x25: 1fffe000196c8980 x24: dfff800000000000 [ 230.782006][T10897] x23: 000000000000ffff x22: ffff00010a432476 x21: ffff0000cb644c02 [ 230.783275][T10897] x20: ffff00010a4323c0 x19: ffff0000cb644c00 x18: 0000000000000000 [ 230.784535][T10897] x17: ffff800018184000 x16: ffff8000082e8d70 x15: 0000000000000002 [ 230.785783][T10897] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000080000 [ 230.786957][T10897] x11: 00000000000006e4 x10: ffff80002178a000 x9 : ffff80000ffcbb6c [ 230.788178][T10897] x8 : 00000000000006e5 x7 : 0000000000000000 x6 : 000000000000003f [ 230.789371][T10897] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000020 [ 230.790544][T10897] x2 : 0000000000000000 x1 : 000000000000ffff x0 : 000000000000ffff [ 230.791845][T10897] Call trace: [ 230.792313][T10897] em_nbyte_match+0x294/0x350 [ 230.792994][T10897] __tcf_em_tree_match+0x164/0x5bc [ 230.793813][T10897] basic_classify+0x138/0x30c [ 230.794493][T10897] tcf_classify+0x1b8/0x9c8 [ 230.795183][T10897] multiq_enqueue+0x100/0x404 [ 230.795857][T10897] dev_qdisc_enqueue+0x5c/0x38c [ 230.796531][T10897] __dev_queue_xmit+0xad0/0x309c [ 230.797358][T10897] dev_queue_xmit+0x24/0x34 [ 230.798035][T10897] packet_sendmsg+0x2f6c/0x3fac [ 230.798735][T10897] ____sys_sendmsg+0x5b8/0x918 [ 230.799462][T10897] __sys_sendmsg+0x25c/0x320 [ 230.800111][T10897] __arm64_sys_sendmsg+0x80/0x94 [ 230.800807][T10897] invoke_syscall+0x98/0x2bc [ 230.801513][T10897] el0_svc_common+0x138/0x258 [ 230.802245][T10897] do_el0_svc+0x58/0x13c [ 230.802932][T10897] el0_svc+0x58/0x138 [ 230.803557][T10897] el0t_64_sync_handler+0x84/0xf0 [ 230.804369][T10897] el0t_64_sync+0x18c/0x190 [ 230.805056][T10897] irq event stamp: 2827 [ 230.805699][T10897] hardirqs last enabled at (2825): [] el0_svc_common+0x9c/0x258 [ 230.807155][T10897] hardirqs last disabled at (2827): [] el1_dbg+0x24/0x80 [ 230.808449][T10897] softirqs last enabled at (2820): [] local_bh_enable+0x10/0x34 [ 230.809931][T10897] softirqs last disabled at (2826): [] local_bh_disable+0x10/0x34 [ 230.811265][T10897] ---[ end trace 0000000000000000 ]---