last executing test programs: 1m11.825824233s ago: executing program 4 (id=386): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000001, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 1m11.822883253s ago: executing program 4 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000046cc7000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m11.767086264s ago: executing program 4 (id=388): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000580)=@generic={0x3, 0x7, 0x3}) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x40a, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000, 0x0, 0x0) 1m11.670100315s ago: executing program 4 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x4) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001880)={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x8, {0x3, 0x0, 0xd1, 0x9}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xc265}]}, 0x20) write$cgroup_subtree(r2, &(0x7f0000001900)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0xfe33) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r4, 0x1000000, 0x0) 1m10.32644505s ago: executing program 4 (id=411): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) munlockall() 1m10.2830357s ago: executing program 4 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 54.570238407s ago: executing program 32 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 6.373916538s ago: executing program 3 (id=732): setresuid(0x0, 0xee01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7ffffffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.33401327s ago: executing program 3 (id=736): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002280)={0x28, r2, 0xad, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x20000000) 5.33368845s ago: executing program 3 (id=737): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe4) setresuid(r0, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) socket$inet_icmp(0x2, 0x2, 0x1) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) capset(&(0x7f0000000500)={0x20080522}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.740915279s ago: executing program 3 (id=748): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0xfffffc8b}) 2.66975802s ago: executing program 3 (id=750): socket$kcm(0x11, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x200020, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.621457481s ago: executing program 3 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2a, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd"], 0x1c}}, 0x4040080) 2.162012646s ago: executing program 0 (id=756): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FIONREAD(r0, 0x541b, 0x0) 2.161785066s ago: executing program 0 (id=757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r2) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x40000080) 1.998913378s ago: executing program 1 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x24, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x4, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc051}, 0x4040) 1.910073059s ago: executing program 1 (id=761): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt(r0, 0x111, 0x5, 0x0, 0x0) 1.909841459s ago: executing program 1 (id=762): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000540)=[@increfs, @dead_binder_done], 0x0, 0x0, &(0x7f0000000700)}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 1.328029545s ago: executing program 2 (id=764): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000400)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.238166356s ago: executing program 0 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25260000000c00018008000100", @ANYBLOB], 0x20}}, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r5) ptrace(0x10, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd, 0x1800}, {0x1, 0xffc0, 0x1000}], 0x2) read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x5ae) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.217983576s ago: executing program 5 (id=768): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 1.038783358s ago: executing program 5 (id=769): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x40, 0x5c, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x24008080) 793.843471ms ago: executing program 1 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c1f2400244000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 777.972032ms ago: executing program 5 (id=771): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) io_setup(0x6, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 743.247712ms ago: executing program 2 (id=772): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @none}}}, 0xa) 669.689363ms ago: executing program 2 (id=773): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 647.189913ms ago: executing program 2 (id=774): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 606.079283ms ago: executing program 2 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) 481.938755ms ago: executing program 5 (id=776): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 481.691935ms ago: executing program 5 (id=777): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) 481.181455ms ago: executing program 1 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0x6, 0x0, 0xcb, 0x10001}, 0x1, 0x8, [{0x7f, 0xffff, 0x9, 0x0, 0x2e17d95a, 0x3}]}, [{0xffffffff, 0x790f, 0x3, 0x7, 0x7, 0x8}, {0x5, 0x7, 0x87fc0a4, 0x6, 0x6, 0x1}, {0x6, 0x93c3, 0x2, 0xf, 0x8, 0x5}, {0x1, 0x5, 0x1200, 0x7fff, 0x5, 0xd8}, {0x0, 0x7, 0x683f, 0x6, 0xf, 0x7}, {0x75cd, 0x20, 0x2, 0x2, 0x60cd, 0x10000}, {0x40, 0x14, 0x5, 0x8, 0x404, 0x3}, {0x2000000, 0x5, 0x73b, 0x1b5, 0x5, 0xfff}, {0x80, 0x80000001, 0x0, 0x5, 0x8, 0x3}, {0x800, 0x7, 0x0, 0x19, 0x288c, 0xfff}, {0xb, 0x5, 0x6, 0x1, 0x8, 0x6}, {0x0, 0x5, 0xffffffff, 0x6, 0xd, 0x5}, {0x0, 0x8, 0x3, 0x2, 0x7, 0x66bdaf68}, {0x0, 0x0, 0x7, 0x5, 0xc}, {0x8f9, 0xc22, 0x1, 0x7, 0x1, 0x7}, {0x7, 0x3ff, 0x4, 0x7, 0x7fff, 0x4}, {0x4, 0x40, 0x4, 0x3, 0xffffff2e, 0x10001}, {0x8, 0x4, 0x1, 0x1, 0x9, 0x7fff}, {0xb, 0x6, 0x0, 0x7, 0x6, 0x80000001}, {0x200, 0x9, 0x81, 0x9, 0xd42, 0x1}, {0x31100000, 0x5, 0x8, 0x7ff, 0x1, 0xc}, {0x3, 0xc, 0xf3c, 0x1, 0x9, 0x8}, {0x4, 0x9, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x8, 0xffffff6d, 0x9, 0x2, 0x7}, {0x4, 0x9, 0x7ff, 0x1ff, 0x0, 0xfff}, {0xb, 0x5, 0x1, 0x0, 0x5, 0x9}, {0x1, 0x8, 0x2, 0x2, 0x9, 0xffff}, {0x9, 0xffffffff, 0x9, 0x4, 0x1, 0x100}, {0xf, 0x8000, 0xffffffff, 0x0, 0x0, 0x519}, {0x0, 0x8, 0x5, 0x9, 0x1, 0x3}, {0x3, 0x6, 0x7df8, 0x8, 0xc, 0x2}, {0x9e, 0x33, 0x9, 0x0, 0xae1, 0x7fffffff}, {0x800, 0x4, 0x9, 0x3, 0xa8, 0x3c50}, {0x9, 0x3, 0x1, 0xff, 0x264e682a, 0xffffffff}, {0xd, 0x2, 0x607d, 0x9, 0xcf8}, {0x8, 0x9, 0xe, 0x6, 0x4, 0x6}, {0x6, 0x6, 0x4fb, 0x4, 0xe, 0xd87}, {0x3, 0x8, 0x401, 0x2e58, 0xfffffff8, 0x9}, {0x8, 0x2, 0x5a, 0xf76, 0x40, 0x5}, {0x8, 0x4, 0x4000, 0x7, 0x3, 0x1}, {0x9, 0x3, 0x1, 0x401, 0x101, 0x5}, {0xfffffffc, 0x10001, 0x2, 0x3, 0xa, 0x3}, {0x73, 0x9, 0x7, 0x1, 0x5, 0xfff}, {0x7fffffff, 0x1000, 0x4, 0x6, 0x8, 0x5}, {0x0, 0x7, 0xd, 0x2f, 0x80000000, 0x5}, {0xfffffff8, 0x8, 0x1, 0x1, 0x8, 0xfffffff1}, {0x0, 0x5, 0x200, 0x5, 0x706e, 0x8}, {0x9, 0x7, 0x8001, 0x4, 0x1, 0x5}, {0x8, 0x8000, 0x0, 0x0, 0x10000, 0x7fff}, {0x3, 0x80000001, 0x400, 0x8d9, 0x6, 0x1}, {0x7, 0x4, 0xd, 0x6, 0x6, 0x4}, {0x10, 0xe7a, 0x4, 0x9, 0xf, 0x1ff}, {0x38000000, 0x6, 0x2, 0x95, 0x8f0, 0x8}, {0xffffffa2, 0x4, 0x8001, 0x4, 0xffffffff, 0x1000}, {0x0, 0xffffffff, 0x84fa, 0x8, 0x3, 0x4}, {0xcf3b, 0xfffffb27, 0x81, 0xb, 0x418, 0x9}, {0x7, 0x7ff, 0x400, 0x5c, 0x1df9, 0x3}, {0xfffff243, 0x80000001, 0x8, 0xc85, 0x8, 0x1b9ff9ed}, {0x4, 0x4, 0x4, 0x0, 0x6, 0x1b7}, {0x4, 0x3, 0x6, 0x5, 0x7, 0x100}, {0x2, 0x8, 0x5, 0xbabb, 0x7, 0xc6}, {0x4, 0x0, 0x9, 0x6a2, 0x8, 0x7}, {0x8, 0x7f, 0x7fffffff, 0xfb, 0x3, 0x3}, {0xf1, 0xa, 0x5, 0x1, 0x1ff, 0xa33}, {0x4, 0x2, 0x9, 0x0, 0x5, 0x200}, {0x7, 0x1, 0x4, 0x4, 0x7, 0x9}, {0xff, 0x3, 0xffff, 0x1c, 0x4477, 0x9}, {0x3, 0x9, 0x0, 0x8001, 0x9, 0x3}, {0x10001, 0xa, 0x12, 0x2de, 0x7, 0xa50}, {0x2, 0xfffffffd, 0x1, 0x7, 0x2}, {0x2, 0x8, 0x80, 0x4a8, 0x7edd, 0x70}, {0x6, 0xfffffff0, 0x6fb, 0xb, 0x0, 0xffff}, {0x1, 0x6, 0x98b, 0x8, 0x13, 0x2}, {0x5, 0x8, 0x81, 0x5, 0x0, 0x10}, {0x4, 0x8, 0x3df2, 0x45b, 0xad0, 0x4}, {0x9, 0x1, 0x8, 0x0, 0x5, 0x5}, {0x3, 0x7, 0x15, 0x0, 0x4, 0xfe4400}, {0x6, 0x1e, 0x5, 0x200, 0x8, 0x80000001}, {0x1, 0x7fffffff, 0x4, 0x7, 0x4, 0x4763}, {0xaa, 0x7, 0x0, 0x5, 0x80, 0x80}, {0x5, 0x7, 0x5ddf, 0xd898, 0x5, 0x8}, {0x8, 0x9, 0xfffffffe, 0x2, 0x200, 0xe45}, {0x1000, 0x5, 0x4, 0x0, 0x6, 0x3}, {0x619, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x1000, 0x400, 0x5, 0x2, 0x3, 0x7}, {0x8, 0x6, 0x3, 0x401, 0x8, 0x4}, {0x4, 0xffffffff, 0x10000, 0xff, 0x5, 0xfffffff7}, {0x7f, 0x2, 0x8000, 0x1, 0xdb82, 0x80000000}, {0x9b, 0x8, 0xd, 0x80000001, 0xd, 0xffff}, {0x8, 0xa8e5, 0x9, 0x5, 0x401, 0x7f}, {0x7, 0xe0, 0x565, 0x6, 0x9, 0x4}, {0x1000, 0x0, 0x4, 0x3, 0x80000000, 0xfffffff9}, {0x6, 0x0, 0x1, 0x1, 0x2, 0x5}, {0x7, 0xfffffffd, 0x200, 0xfffffffc, 0x7, 0x4}, {0xe6, 0x3, 0xfffffff7, 0xdee3, 0x4, 0xf}, {0x9, 0x8, 0x7fff, 0xd0, 0xfff, 0x2}, {0x1000, 0xd499, 0x0, 0x9, 0x6, 0x3}, {0x3, 0x7, 0x10000, 0x2, 0x8, 0xf6ed}, {0x3ff, 0x7, 0xff, 0x101, 0xfff, 0x7}, {0x8, 0x9, 0xf8d, 0xffff90eb, 0x5, 0x5}, {0x4, 0x2f2, 0x1, 0x7, 0x5, 0xfff}, {0x8, 0x2, 0x9, 0x2, 0x6, 0x7}, {0x0, 0xffffffff, 0x4, 0x5, 0x9, 0x100}, {0x3, 0x0, 0x8, 0x0, 0x1, 0xe75}, {0x3, 0xe, 0x4, 0x20080000, 0x3, 0xd77}, {0x0, 0x7, 0x0, 0x3, 0x7, 0x2}, {0xfffeffff, 0x7ff, 0x7, 0x101, 0x5, 0xffffffff}, {0x2, 0x4, 0x7, 0x0, 0x6, 0xffffffff}, {0xe770000, 0x10000, 0x1dd32c73, 0x6, 0x2, 0x2}, {0x1, 0x7, 0x1, 0x8, 0x0, 0x101}, {0x9, 0xffffff48, 0x3, 0x4, 0x6, 0xfffffa4e}, {0x9, 0xfae9, 0xd, 0x3, 0x8, 0x5}, {0x2d, 0x2fe5, 0x1, 0x8, 0x9}, {0x0, 0x8, 0x2, 0x91, 0x7, 0xfffffffa}, {0xba1, 0x5, 0x2, 0x5, 0x1, 0x6}, {0x142c58fd, 0x4, 0x400, 0x5, 0x8}, {0x1000, 0x6, 0x1, 0x100, 0x92a, 0x8001}, {0x80, 0x40000, 0x8bb, 0x1, 0x8, 0x4ffa}, {0x101, 0x9, 0x6, 0xfffffff0, 0x9, 0x2b80}, {0x8, 0x7, 0x4, 0x429e00b4, 0x6, 0xfffff000}, {0x3, 0x18, 0x1000, 0x7, 0x6}, {0x4f2, 0x1, 0x8, 0x100, 0x9, 0x1}, {0x8, 0x6, 0xce, 0x7, 0x0, 0x80}, {0x2, 0x7ff, 0x0, 0x3, 0xf, 0x7ff}, {0x2, 0xffffffa8, 0x8, 0x7f, 0x8, 0x6}, {0x0, 0xcc74, 0x7, 0x4064, 0x8, 0x6}, {0x7fffffff, 0x6, 0x0, 0x5, 0x4, 0xace}, {0xb9a8, 0x10, 0x7f, 0x100, 0xffffffff, 0x6}], [{0x1}, {0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x8bb3e40030c8e8ca}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0xb}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x5}, {0x3}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0xd}, {0x4, 0x7a917901219bea22}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x3}, {}, {}, {0x3}, {0xf7088fa7cf494390}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x4bc8c2ab18838025}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 468.614925ms ago: executing program 5 (id=779): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 436.610525ms ago: executing program 2 (id=780): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0x18, 0x7, "42acf1f461331a"}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="ea0e06"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 362.040106ms ago: executing program 0 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x240048a0}, 0x6004000) 361.878656ms ago: executing program 0 (id=782): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 37.48045ms ago: executing program 1 (id=783): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002c000701fcffffff0000010001"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts. [ 28.630819][ T4312] cgroup: Unknown subsys name 'net' [ 28.852488][ T4312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.142782][ T4312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.902553][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.904471][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.905726][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.907821][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.908964][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.915415][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.917032][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.918653][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.920412][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.922373][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.923866][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.925220][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.925276][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.926808][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.927945][ T4339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.929399][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.931046][ T4339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.932770][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.934593][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.934693][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.937185][ T4340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.937190][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.939809][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.941731][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.945876][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.949166][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.954996][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.956422][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.968781][ T4328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.971017][ T4328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.101865][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.113107][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.115236][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.137435][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.162428][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.163695][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.165365][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.167306][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.170627][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.171956][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.173389][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.178701][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.182083][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.183692][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.188212][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.189442][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.191291][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.203094][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.204272][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.205924][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.214389][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.222703][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.223925][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.225515][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.227026][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.228226][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.229737][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.234332][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.237080][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.243124][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.244284][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.245851][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.252470][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.258049][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.259289][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.261663][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.276290][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277920][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.279174][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.282735][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.285257][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.287757][ T4324] team0: Port device team_slave_0 added [ 30.289790][ T4331] team0: Port device team_slave_0 added [ 30.292494][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294836][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.299025][ T4324] team0: Port device team_slave_1 added [ 30.302503][ T4331] team0: Port device team_slave_1 added [ 30.318603][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.320088][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.324537][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.327773][ T4333] team0: Port device team_slave_0 added [ 30.332255][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.335898][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.336978][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.343131][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.345848][ T4333] team0: Port device team_slave_1 added [ 30.347835][ T4325] team0: Port device team_slave_0 added [ 30.349736][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.351512][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.352805][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.356992][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.365866][ T4325] team0: Port device team_slave_1 added [ 30.369021][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.370876][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.375165][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.387298][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.388529][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.393483][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.396639][ T4335] team0: Port device team_slave_0 added [ 30.403100][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.404368][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.408701][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.411186][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.412310][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.416837][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.419019][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.422633][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.426618][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.431571][ T4335] team0: Port device team_slave_1 added [ 30.471108][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.522462][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.621149][ T4324] device hsr_slave_0 entered promiscuous mode [ 30.660062][ T4324] device hsr_slave_1 entered promiscuous mode [ 30.709973][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.711216][ T4324] Cannot create hsr debugfs directory [ 30.721833][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.723001][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.726979][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.783335][ T4333] device hsr_slave_0 entered promiscuous mode [ 30.820105][ T4333] device hsr_slave_1 entered promiscuous mode [ 30.869958][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.871312][ T4333] Cannot create hsr debugfs directory [ 30.875306][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.876480][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.882889][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.941148][ T4325] device hsr_slave_0 entered promiscuous mode [ 30.980102][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.030032][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.031306][ T4325] Cannot create hsr debugfs directory [ 31.100990][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.140140][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.182262][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.183669][ T4335] Cannot create hsr debugfs directory [ 31.264393][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.326723][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.366232][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.404954][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.467231][ T4324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.501465][ T4324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.541106][ T4324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.579352][ T4324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.633411][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.661926][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.691918][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.733512][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.792150][ T4325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.853795][ T4325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.893621][ T4325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.935659][ T4325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.985861][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.000200][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 32.001401][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 32.002555][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 32.003555][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 32.004546][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 32.007864][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.034468][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.095795][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.141033][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.193991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.196116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.202139][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.214897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.216905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.218448][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.219678][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.221580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.223389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.224901][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.226092][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.227461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.231327][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.233417][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.237193][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.238999][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.250803][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.252370][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.253991][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.264784][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.268652][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.279175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.280835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.282253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.283850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.286503][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.298249][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.302726][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.304894][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.306332][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.307821][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.313101][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.318067][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.321453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.323045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.324600][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.325762][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.327190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.334420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.336125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.337658][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.338941][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.341063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.349246][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.359758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.363027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.364631][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.365742][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.367480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.369015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.372021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.375513][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.383656][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.385319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.386948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.388483][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.389667][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.392210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.393874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.395434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.396856][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.398414][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.399844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.402817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.404465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.405938][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.407077][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.408603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.412148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.413895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.415580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.428031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.430556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.432255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.433775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.435398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.436935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.438505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.440286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.441709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.443316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.444985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.447508][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.452910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.454711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.456348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.458281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.459690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.462319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.468650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.473142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.474709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.476219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.477704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.483388][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.498312][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.499691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.501257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.502606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.504498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.506153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.507887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.513683][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.515523][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.519364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.521738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.523358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.524844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.537760][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.539637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.541381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.543011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.545045][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.546196][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.547577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.549066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.560666][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.561920][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.565340][ T4331] device veth0_vlan entered promiscuous mode [ 32.568953][ T4331] device veth1_vlan entered promiscuous mode [ 32.575118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.576733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.578303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.579790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.582221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.590235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.592140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.594109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.595718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.615541][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.618271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.620619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.622402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.624179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.625872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.627427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.628751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.636880][ T4335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.638664][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.643321][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.644988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.647483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.649089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.653451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.660760][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.662538][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.666934][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.668542][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.672463][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.673807][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.676672][ T4331] device veth0_macvtap entered promiscuous mode [ 32.682185][ T4331] device veth1_macvtap entered promiscuous mode [ 32.685064][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.705154][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.706906][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.708496][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.713016][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.716013][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.717655][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.721209][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.723715][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.725365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.727016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.728523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.731185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.736300][ T4324] device veth0_vlan entered promiscuous mode [ 32.743421][ T4324] device veth1_vlan entered promiscuous mode [ 32.749618][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.751388][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.752812][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.757520][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.761032][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762533][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.764003][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.765332][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.774347][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.775838][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.776997][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.778564][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.783687][ T4324] device veth0_macvtap entered promiscuous mode [ 32.786818][ T4324] device veth1_macvtap entered promiscuous mode [ 32.791780][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.797701][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.799411][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.801812][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.803463][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.805031][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.806496][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.815784][ T4325] device veth0_vlan entered promiscuous mode [ 32.818816][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.820214][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.827493][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.829218][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.832033][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.838405][ T4325] device veth1_vlan entered promiscuous mode [ 32.844976][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.846643][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.848234][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.849685][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.853345][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.862887][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.864979][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.867215][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.868473][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.872878][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.874444][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.888647][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.893573][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.895178][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.897942][ T4325] device veth0_macvtap entered promiscuous mode [ 32.903096][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.904606][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.906001][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.907770][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.909109][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.918595][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.920623][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.921903][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.926376][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.927998][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.929503][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.932248][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.934935][ T4333] device veth0_vlan entered promiscuous mode [ 32.940675][ T4325] device veth1_macvtap entered promiscuous mode [ 32.945554][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.946955][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.949687][ T4333] device veth1_vlan entered promiscuous mode [ 32.954157][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.955915][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.957462][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.959203][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.963676][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.965060][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.966696][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.968201][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.969649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.973402][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.985796][ T4333] device veth0_macvtap entered promiscuous mode [ 32.988790][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.990357][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.991770][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.993810][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.013217][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.014993][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.016706][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.018479][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.022756][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.024703][ T4333] device veth1_macvtap entered promiscuous mode [ 33.028045][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.029693][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.032052][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.037482][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.038811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.041860][ T4325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.043354][ T4325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.044781][ T4325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.046293][ T4325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.053855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.057447][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.059214][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.062149][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.063872][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.065491][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.067099][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.069422][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.101306][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.110152][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.118349][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.120142][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.134068][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.135898][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.137485][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.139252][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.146024][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.147886][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.150497][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.152431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.154147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.155700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.157284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.164769][ T4335] device veth0_vlan entered promiscuous mode [ 33.168393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.171430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.182744][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.184097][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.185667][ T4335] device veth1_vlan entered promiscuous mode [ 33.189491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.194578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.206726][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.208312][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.220074][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.221624][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223724][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.225069][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.229787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.243273][ T4405] loop0: detected capacity change from 0 to 32768 [ 33.279365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.287903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.311497][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.312748][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.317967][ T4405] XFS (loop0): Mounting V5 Filesystem [ 33.319693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.341912][ T4405] XFS (loop0): Ending clean mount [ 33.372611][ T4335] device veth0_macvtap entered promiscuous mode [ 33.375297][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.376632][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.378464][ T4335] device veth1_macvtap entered promiscuous mode [ 33.387147][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.388914][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.392038][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.405775][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.407572][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.409135][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.422274][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.424199][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.737707][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.739529][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.746035][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.753876][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.757776][ T4419] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 33.759114][ T4419] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.759233][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.759597][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.774017][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.774043][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.775206][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.775228][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.775235][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.775241][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.775246][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.775251][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.775256][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.775261][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.775856][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.776177][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.776533][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.776754][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.794449][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794491][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794503][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794514][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.900448][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.900993][ T4421] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 33.901921][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.918813][ T4331] XFS (loop0): Unmounting Filesystem [ 33.983575][ T4421] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 33.985184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.998136][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.999448][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.007997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.057841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 34.059185][ T4424] loop2: detected capacity change from 0 to 40427 [ 34.080864][ T4424] F2FS-fs (loop2): invalid crc value [ 34.082068][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 34.083099][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 34.084141][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 34.085186][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 34.086240][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 34.088663][ T4424] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.123087][ T4428] device hsr0 entered promiscuous mode [ 34.128092][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.144266][ T4424] F2FS-fs (loop2): Start checkpoint disabled! [ 34.166191][ T4424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 34.180631][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 34.198522][ T4431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8'. [ 34.202305][ T4431] loop3: detected capacity change from 0 to 64 [ 34.654424][ T4440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.655854][ T4440] IPv6: NLM_F_CREATE should be set when creating new route [ 34.657744][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.668876][ T4440] Zero length message leads to an empty skb [ 34.740473][ T679] kworker/u4:4: attempt to access beyond end of device [ 34.740473][ T679] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.842782][ T4434] loop1: detected capacity change from 0 to 40427 [ 34.853168][ T4434] F2FS-fs (loop1): invalid crc value [ 34.858869][ T4434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.870790][ T4434] F2FS-fs (loop1): Start checkpoint disabled! [ 34.877836][ T4445] device hsr0 entered promiscuous mode [ 34.894571][ T4434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 34.996035][ T4444] loop3: detected capacity change from 0 to 32768 [ 34.999040][ T4444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.10 (4444) [ 35.005436][ T4444] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 35.007248][ T4444] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 35.009092][ T4444] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 35.010981][ T4444] BTRFS info (device loop3): use zstd compression, level 3 [ 35.012190][ T4444] BTRFS info (device loop3): using free space tree [ 35.267966][ T4469] block device autoloading is deprecated and will be removed. [ 35.305333][ T4444] BTRFS info (device loop3): enabling ssd optimizations [ 35.314940][ T4451] loop2: detected capacity change from 0 to 512 [ 35.336588][ T4353] kworker/u4:5: attempt to access beyond end of device [ 35.336588][ T4353] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.353755][ T4451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.411648][ T4324] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 35.462688][ T4441] device hsr0 left promiscuous mode [ 35.469378][ T4317] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (4317) [ 35.664062][ T4451] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.12: iget: checksum invalid [ 35.787855][ T4493] loop1: detected capacity change from 0 to 40427 [ 35.801614][ T4493] F2FS-fs (loop1): invalid crc value [ 35.807674][ T4493] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.823844][ T4493] F2FS-fs (loop1): Start checkpoint disabled! [ 35.843440][ T4493] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 35.898044][ T4491] loop0: detected capacity change from 0 to 40427 [ 35.925969][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 35.927413][ T4491] F2FS-fs (loop0): invalid crc value [ 35.940853][ T4491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.954329][ T4491] F2FS-fs (loop0): Start checkpoint disabled! [ 35.959303][ T4491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 35.961923][ T4487] loop3: detected capacity change from 0 to 65536 [ 35.972366][ T4501] loop2: detected capacity change from 0 to 512 [ 35.973739][ T4501] EXT4-fs: Ignoring removed orlov option [ 36.200273][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 36.201608][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 36.202872][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 36.204184][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 36.205417][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 36.260875][ T4487] XFS (loop3): Mounting V5 Filesystem [ 36.342379][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.366946][ T4487] XFS (loop3): Ending clean mount [ 36.381121][ T4487] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x15c/0x234, xfs_agf block 0x1 [ 36.651217][ T4487] XFS (loop3): Unmount and run xfs_repair [ 36.652101][ T4487] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 36.653320][ T4487] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 36.654787][ T4487] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 36.656251][ T4487] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 36.657801][ T4487] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 36.659247][ T4487] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 36.667706][ T4417] kworker/u4:6: attempt to access beyond end of device [ 36.667706][ T4417] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.701116][ T4487] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 36.702539][ T4487] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 36.704280][ T4487] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 36.705677][ T4487] XFS (loop3): metadata I/O error in "xfs_read_agf+0x250/0x5fc" at daddr 0x1 len 1 error 74 [ 36.707512][ T4487] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x580/0xaec (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 36.710386][ T4487] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 36.710900][ T4353] kworker/u4:5: attempt to access beyond end of device [ 36.710900][ T4353] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 36.775044][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 36.899243][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.931226][ T4523] fs-verity: sha512 using implementation "sha512-ce" [ 36.973442][ T4324] XFS (loop3): Unmounting Filesystem [ 36.974603][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 37.032996][ T4531] FAULT_INJECTION: forcing a failure. [ 37.032996][ T4531] name failslab, interval 1, probability 0, space 0, times 1 [ 37.035240][ T4531] CPU: 1 PID: 4531 Comm: syz.4.24 Not tainted syzkaller #0 [ 37.036503][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 37.038306][ T4531] Call trace: [ 37.038858][ T4531] dump_backtrace+0x1c0/0x1ec [ 37.039705][ T4531] show_stack+0x2c/0x3c [ 37.040482][ T4531] __dump_stack+0x30/0x40 [ 37.041203][ T4531] dump_stack_lvl+0xf4/0x15c [ 37.042062][ T4531] dump_stack+0x1c/0x5c [ 37.042820][ T4531] should_fail_ex+0x3c0/0x518 [ 37.043600][ T4531] __should_failslab+0xc0/0x120 [ 37.044475][ T4531] should_failslab+0x10/0x28 [ 37.045218][ T4531] kmem_cache_alloc_node+0x8c/0x33c [ 37.046071][ T4531] __alloc_skb+0x128/0x714 [ 37.046746][ T4531] netlink_sendmsg+0x52c/0x9c0 [ 37.047433][ T4531] ____sys_sendmsg+0x5c8/0x938 [ 37.048207][ T4531] __sys_sendmsg+0x288/0x374 [ 37.048901][ T4531] __arm64_sys_sendmsg+0x80/0x94 [ 37.049697][ T4531] invoke_syscall+0x98/0x2b4 [ 37.050496][ T4531] el0_svc_common+0x138/0x258 [ 37.051369][ T4531] do_el0_svc+0x58/0x130 [ 37.052153][ T4531] el0_svc+0x58/0x128 [ 37.052797][ T4531] el0t_64_sync_handler+0x84/0xf0 [ 37.053669][ T4531] el0t_64_sync+0x18c/0x190 [ 37.077315][ T4534] exfat: Deprecated parameter 'utf8' [ 37.079106][ T4534] exfat: Deprecated parameter 'namecase' [ 37.081200][ T4534] exfat: Deprecated parameter 'namecase' [ 37.082162][ T4534] exfat: Deprecated parameter 'namecase' [ 37.098571][ T4534] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 37.404291][ T4552] netlink: 'syz.4.30': attribute type 29 has an invalid length. [ 37.405681][ T4552] netlink: 'syz.4.30': attribute type 29 has an invalid length. [ 37.430349][ T4552] netlink: 'syz.4.30': attribute type 29 has an invalid length. [ 37.486307][ T4521] F2FS-fs (loop1): invalid crc value [ 37.522494][ T4521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.538143][ T4521] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 37.552679][ T4521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 37.576415][ T4568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35'. [ 37.681307][ T4568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35'. [ 38.241042][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 38.242094][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 38.243070][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 38.244098][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 38.245175][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 38.859774][ T4662] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 38.863836][ T4662] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 38.866088][ T4662] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 38.896514][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 38.997072][ T4671] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 39.167101][ T4689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'. [ 39.171811][ T4689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'. [ 39.269265][ T4697] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 39.674592][ T4566] Set syz1 is full, maxelem 65536 reached [ 39.746781][ T4748] syz.2.117 (4748): /proc/4738/oom_adj is deprecated, please use /proc/4738/oom_score_adj instead. [ 39.816585][ T4750] device syzkaller0 entered promiscuous mode [ 39.818978][ T4752] tipc: Started in network mode [ 39.820122][ T4752] tipc: Node identity 4, cluster identity 4711 [ 39.821161][ T4752] tipc: Node number set to 4 [ 39.875004][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.878078][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.903921][ T4761] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 40.082666][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.084318][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.274752][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.276311][ T4779] bond0: option lp_interval: invalid value (18446744073709551612) [ 40.277711][ T4779] bond0: option lp_interval: allowed values 1 - 2147483647 [ 40.320381][ T4334] Bluetooth: hci1: command 0x206e tx timeout [ 40.332445][ T4783] netlink: 'syz.1.133': attribute type 8 has an invalid length. [ 40.364651][ T4328] Bluetooth: hci1: Malformed HCI Event [ 40.402300][ T4790] netlink: 'syz.1.136': attribute type 3 has an invalid length. [ 40.787146][ T4809] device syzkaller0 entered promiscuous mode [ 40.865917][ T4816] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 41.117445][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.121306][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.418006][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.421179][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.425526][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.428312][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.668271][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.671583][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.195320][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 42.196907][ T4863] netlink: 'syz.1.166': attribute type 20 has an invalid length. [ 42.201191][ T4863] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.202867][ T4863] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.204447][ T4863] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.205942][ T4863] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.400655][ T4328] Bluetooth: hci1: command 0x206e tx timeout [ 42.934437][ T4878] binfmt_misc: register: failed to install interpreter file ./file0 [ 42.977609][ T4880] binder: 4879:4880 tried to acquire reference to desc 0, got 1 instead [ 43.034136][ T4888] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 43.045146][ T4888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.053436][ T4888] bond1: (slave geneve2): making interface the new active one [ 43.056201][ T4888] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 43.057742][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 44.046763][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 44.542413][ T4984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 44.608863][ C1] vcan0: j1939_tp_rxtimer: 0x0000000097d3b200: rx timeout, send abort [ 44.883782][ T5004] device syzkaller0 entered promiscuous mode [ 44.897575][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.902851][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.109105][ C1] vcan0: j1939_tp_rxtimer: 0x0000000037c951f7: rx timeout, send abort [ 45.110711][ C1] vcan0: j1939_tp_rxtimer: 0x0000000097d3b200: abort rx timeout. Force session deactivation [ 45.305072][ T5021] netlink: 'syz.3.232': attribute type 33 has an invalid length. [ 45.306717][ T5021] netlink: 152 bytes leftover after parsing attributes in process `syz.3.232'. [ 45.378637][ T5027] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 45.603911][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.610094][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.610611][ C1] vcan0: j1939_tp_rxtimer: 0x0000000037c951f7: abort rx timeout. Force session deactivation [ 46.528991][ T5053] netlink: 'syz.2.244': attribute type 5 has an invalid length. [ 46.535695][ T5053] netlink: 972 bytes leftover after parsing attributes in process `syz.2.244'. [ 46.775758][ T5071] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 46.826225][ T5071] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.828997][ T5071] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 46.872287][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.873832][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.891281][ T5080] bond1: (slave gretap1): making interface the new active one [ 46.894179][ T5080] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 47.519665][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.525769][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.588644][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 47.665958][ T5095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.255'. [ 47.909320][ T5103] netlink: 6 bytes leftover after parsing attributes in process `syz.4.259'. [ 48.312893][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 48.314637][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 48.444605][ T5136] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 48.472454][ T5136] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 48.539355][ T5137] binder: 5128:5137 tried to acquire reference to desc 0, got 1 instead [ 48.563208][ T5137] binder: 5128:5137 ioctl c0306201 0 returned -14 [ 49.041262][ T5178] input: syz0 as /devices/virtual/input/input4 [ 49.834840][ T5190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 49.838212][ T5190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 50.505122][ T27] audit: type=1326 audit(50.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.508989][ T27] audit: type=1326 audit(50.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.519899][ T27] audit: type=1326 audit(50.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.523673][ T27] audit: type=1326 audit(50.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.527282][ T27] audit: type=1326 audit(50.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.569968][ T27] audit: type=1326 audit(50.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.573670][ T27] audit: type=1326 audit(50.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.1.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x7ffc0000 [ 50.645960][ T679] tipc: Subscription rejected, illegal request [ 50.764680][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.766145][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.901531][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 50.903936][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 51.157549][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.168221][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.492616][ T27] audit: type=1326 audit(51.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa55789e8 code=0x0 [ 52.109236][ T5300] device syzkaller0 entered promiscuous mode [ 52.411586][ T27] audit: type=1326 audit(52.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff905789e8 code=0x7fc00000 [ 52.452350][ T5319] device syzkaller1 entered promiscuous mode [ 53.137680][ T27] audit: type=1326 audit(53.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9057248c code=0x7fc00000 [ 53.875571][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 54.022353][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 54.468933][ T5378] usb usb1: usbfs: process 5378 (syz.0.362) did not claim interface 63 before use [ 54.590962][ T5392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 55.406304][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 55.412978][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 55.781188][ T5464] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.400'. [ 55.899823][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 55.942158][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 55.954590][ T5473] netlink: 'syz.2.404': attribute type 18 has an invalid length. [ 55.956288][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 56.065114][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 56.065132][ T27] audit: type=1326 audit(56.050:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5483 comm="syz.0.408" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d789e8 code=0x0 [ 56.972184][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.976216][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.481575][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482784][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.601659][ T24] cfg80211: failed to load regulatory.db [ 72.461495][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.463562][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.465464][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.467243][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.468850][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.471654][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.480031][ T4328] Bluetooth: hci5: command 0x0409 tx timeout [ 76.559979][ T4334] Bluetooth: hci5: command 0x041b tx timeout [ 78.158303][ T5562] netlink: 'syz.1.428': attribute type 5 has an invalid length. [ 78.159677][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 78.294255][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.307431][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.317257][ T5597] set_capacity_and_notify: 4 callbacks suppressed [ 78.317267][ T5597] loop2: detected capacity change from 0 to 7 [ 78.327643][ T5597] Dev loop2: unable to read RDB block 7 [ 78.329263][ T5597] loop2: unable to read partition table [ 78.334723][ T5597] loop2: partition table beyond EOD, truncated [ 78.335803][ T5597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.440167][ T5583] chnl_net:caif_netlink_parms(): no params data found [ 78.452924][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.454483][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.491749][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.493039][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.506628][ T5583] device bridge_slave_0 entered promiscuous mode [ 78.575921][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.577162][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.579053][ T5583] device bridge_slave_1 entered promiscuous mode [ 78.600393][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.604028][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.605713][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 78.624893][ T5583] team0: Port device team_slave_0 added [ 78.627096][ T5583] team0: Port device team_slave_1 added [ 78.640029][ T4334] Bluetooth: hci5: command 0x040f tx timeout [ 78.646999][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.648388][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.657203][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.659811][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.663231][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.675698][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.677323][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.682424][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.791833][ T5583] device hsr_slave_0 entered promiscuous mode [ 78.840161][ T5583] device hsr_slave_1 entered promiscuous mode [ 78.880583][ T5583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.882009][ T5583] Cannot create hsr debugfs directory [ 79.104574][ T5629] binder: 5628:5629 ioctl c0306201 0 returned -14 [ 79.164954][ T4417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.342126][ T4417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.345112][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 79.358716][ T5583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.383522][ T5637] binder: BINDER_SET_CONTEXT_MGR already set [ 79.384785][ T5637] binder: 5630:5637 ioctl 4018620d 20000040 returned -16 [ 79.386769][ T5637] binder: 5630:5637 got transaction to invalid handle, 1 [ 79.388377][ T5637] binder: 5637:5630 cannot find target node [ 79.389449][ T5637] binder: 5630:5637 transaction call to 0:0 failed 13/29201/-22, size 12288-0 line 3045 [ 79.401679][ T5583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.491348][ T4417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.494784][ T5583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.541350][ T5583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.583164][ T5649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'. [ 79.641232][ T4417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.794197][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.798146][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.799887][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.810037][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.823413][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.825553][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.828624][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.829844][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.834094][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.852815][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.855437][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.857320][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.858644][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.868606][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.873250][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.877573][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.886627][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.895204][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.898515][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.903937][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.907890][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.912220][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.925706][ T5583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.928019][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.929835][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.931850][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.000672][ T4417] tipc: Left network mode [ 80.117342][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.232862][ T5657] vhci_hcd: invalid port number 96 [ 80.233710][ T5657] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 80.297549][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.298982][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.304804][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.720101][ T4334] Bluetooth: hci5: command 0x0419 tx timeout [ 80.869156][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.870943][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.974723][ T5583] device veth0_vlan entered promiscuous mode [ 80.978028][ T5583] device veth1_vlan entered promiscuous mode [ 80.989419][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.991184][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.992769][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.994760][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.005949][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.054880][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.057504][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.223778][ T5726] netlink: 68 bytes leftover after parsing attributes in process `syz.0.467'. [ 81.415870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.428468][ T5583] device veth0_macvtap entered promiscuous mode [ 81.450242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.459562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.462857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.504988][ T5583] device veth1_macvtap entered promiscuous mode [ 81.523956][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.525964][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.527511][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.529274][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.535006][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.537010][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.539161][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.543815][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.545498][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.547263][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.550801][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.553329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.554963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.556614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.597672][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.599339][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.605930][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.607769][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.609514][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.618250][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.626503][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.628356][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.630872][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.632637][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.635607][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.637534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.639302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.689343][ T5583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.696170][ T5583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.697744][ T5583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.699156][ T5583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047784][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.049191][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.060113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.096956][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.098174][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.099465][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.499501][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.503367][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.522046][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.523522][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.531148][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.536501][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.544815][ T4417] device bridge_slave_1 left promiscuous mode [ 82.549100][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.611733][ T4417] device bridge_slave_0 left promiscuous mode [ 82.612867][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.753544][ T4417] device veth1_macvtap left promiscuous mode [ 82.754711][ T4417] device veth0_macvtap left promiscuous mode [ 82.755672][ T4417] device veth1_vlan left promiscuous mode [ 82.756675][ T4417] device veth0_vlan left promiscuous mode [ 83.746681][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.749000][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.771947][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 84.931559][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 85.101402][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.293265][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.832041][ T4417] bond0 (unregistering): Released all slaves [ 87.707643][ T5846] dlm: non-version read from control device 0 [ 89.439643][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.445933][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.642479][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.644090][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.730609][ T5904] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.797020][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.799606][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.304463][ T5947] syz.1.511: vmalloc error: size 18446744073699065859, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 91.308107][ T5947] CPU: 1 PID: 5947 Comm: syz.1.511 Not tainted syzkaller #0 [ 91.309438][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.311107][ T5947] Call trace: [ 91.311677][ T5947] dump_backtrace+0x1c0/0x1ec [ 91.312496][ T5947] show_stack+0x2c/0x3c [ 91.313253][ T5947] __dump_stack+0x30/0x40 [ 91.314025][ T5947] dump_stack_lvl+0xf4/0x15c [ 91.314763][ T5947] dump_stack+0x1c/0x5c [ 91.315503][ T5947] warn_alloc+0x214/0x328 [ 91.316236][ T5947] __vmalloc_node_range+0x118/0xe3c [ 91.317134][ T5947] vmalloc+0x9c/0xd4 [ 91.317777][ T5947] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 91.318683][ T5947] dvb_demux_do_ioctl+0x3fc/0x4d8 [ 91.319488][ T5947] dvb_usercopy+0x240/0x45c [ 91.320163][ T5947] dvb_demux_ioctl+0x3c/0x54 [ 91.320888][ T5947] __arm64_sys_ioctl+0x14c/0x1c8 [ 91.321767][ T5947] invoke_syscall+0x98/0x2b4 [ 91.322620][ T5947] el0_svc_common+0x138/0x258 [ 91.323477][ T5947] do_el0_svc+0x58/0x130 [ 91.324280][ T5947] el0_svc+0x58/0x128 [ 91.324981][ T5947] el0t_64_sync_handler+0x84/0xf0 [ 91.325849][ T5947] el0t_64_sync+0x18c/0x190 [ 91.327059][ T5947] Mem-Info: [ 91.327614][ T5947] active_anon:20245 inactive_anon:0 isolated_anon:0 [ 91.327614][ T5947] active_file:14714 inactive_file:2099 isolated_file:0 [ 91.327614][ T5947] unevictable:768 dirty:108 writeback:0 [ 91.327614][ T5947] slab_reclaimable:18968 slab_unreclaimable:96252 [ 91.327614][ T5947] mapped:32242 shmem:14439 pagetables:653 [ 91.327614][ T5947] sec_pagetables:0 bounce:0 [ 91.327614][ T5947] kernel_misc_reclaimable:0 [ 91.327614][ T5947] free:1419141 free_pcp:3453 free_cma:7360 [ 91.337555][ T5947] Node 0 active_anon:80980kB inactive_anon:0kB active_file:58856kB inactive_file:8396kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:128968kB dirty:432kB writeback:0kB shmem:57756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8596kB pagetables:2612kB sec_pagetables:0kB all_unreclaimable? no [ 91.343784][ T5947] Node 0 DMA free:3076864kB boost:0kB min:20656kB low:25820kB high:30984kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 91.348733][ T5947] lowmem_reserve[]: 0 0 3552 3552 3552 [ 91.349655][ T5947] Node 0 Normal free:2599700kB boost:0kB min:24396kB low:30492kB high:36588kB reserved_highatomic:0KB active_anon:80980kB inactive_anon:0kB active_file:58856kB inactive_file:8396kB unevictable:3072kB writepending:432kB present:5242880kB managed:3641540kB mlocked:0kB bounce:0kB free_pcp:13812kB local_pcp:11236kB free_cma:0kB [ 91.355508][ T5947] lowmem_reserve[]: 0 0 0 0 0 [ 91.356373][ T5947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 91.359382][ T5947] Node 0 Normal: 1*4kB (M) 62*8kB (ME) 58*16kB (ME) 142*32kB (UME) 207*64kB (UME) 96*128kB (UME) 28*256kB (UME) 20*512kB (UM) 9*1024kB (UE) 5*2048kB (UME) 618*4096kB (M) = 2599700kB [ 91.364211][ T5947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.366063][ T5947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 91.367684][ T5947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 91.369296][ T5947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 91.371483][ T5947] 31252 total pagecache pages [ 91.372323][ T5947] 0 pages in swap cache [ 91.373058][ T5947] Free swap = 124740kB [ 91.373709][ T5947] Total swap = 124996kB [ 91.374428][ T5947] 2097152 pages RAM [ 91.375017][ T5947] 0 pages HighMem/MovableOnly [ 91.375931][ T5947] 416719 pages reserved [ 91.376852][ T5947] 8192 pages cma reserved [ 91.377652][ T5947] 0 pages hwpoisoned [ 92.642945][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.644532][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.148134][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.150559][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.038294][ T5943] netlink: 14 bytes leftover after parsing attributes in process `syz.3.510'. [ 102.395756][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 102.432110][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 102.466276][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.485894][ T5990] bond2: (slave bond0): making interface the new active one [ 102.508359][ T5990] bond2: (slave bond0): Enslaving as an active interface with an up link [ 102.523500][ T6001] netlink: 'syz.0.519': attribute type 4 has an invalid length. [ 102.524904][ T6001] netlink: 152 bytes leftover after parsing attributes in process `syz.0.519'. [ 102.529323][ T6001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.638422][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.651442][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.347066][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.349633][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.884094][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 104.072592][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.075345][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.618666][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.621541][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.671563][ T6106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.555'. [ 105.245588][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.247597][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.741951][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.743519][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.746765][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.748496][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.818231][ T6132] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.560'. [ 106.037184][ T6134] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 106.047896][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.050016][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.085820][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.087409][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.089012][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.090291][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.094541][ T6134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.105108][ T6136] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 106.187398][ T6146] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 107.123534][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.125129][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.656750][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.657523][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 107.658267][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.765920][ T6193] netlink: 'syz.2.581': attribute type 13 has an invalid length. [ 108.767343][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 108.779298][ T6193] netlink: 277 bytes leftover after parsing attributes in process `syz.2.581'. [ 108.928962][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.932883][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.969179][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.972870][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.741468][ T6244] Cannot find del_set index 1 as target [ 110.626349][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.629304][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.196078][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.197668][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.278095][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 111.935528][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.946613][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.232993][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 113.384177][ T6279] Set syz1 is full, maxelem 65536 reached [ 114.089289][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.090983][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.193587][ T4334] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 114.193644][ T4334] Bluetooth: hci0: Malformed LE Event: 0x02 [ 114.774449][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.655'. [ 114.937653][ T6417] xt_hashlimit: size too large, truncated to 1048576 [ 115.854949][ T6465] netlink: 'syz.5.664': attribute type 1 has an invalid length. [ 116.055086][ T6475] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 116.112139][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.669'. [ 116.569646][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 116.824327][ T6522] binder: 6521:6522 tried to acquire reference to desc 0, got 1 instead [ 116.831109][ T6522] binder: 6521:6522 got transaction with invalid data ptr [ 116.832282][ T6522] binder: 6521:6522 transaction call to 6521:0 failed 21/29201/-14, size 0-12288 line 3333 [ 116.834284][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.876017][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.877777][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.299954][ T6563] fuse: root generation should be zero [ 117.674022][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.675624][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.678906][ T6579] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 117.757203][ T6586] netlink: 484 bytes leftover after parsing attributes in process `syz.5.697'. [ 117.798975][ T24] libceph: connect (1)[c::]:6789 error -101 [ 117.800464][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 117.807678][ T24] libceph: connect (1)[c::]:6789 error -101 [ 117.808767][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 117.816750][ T6567] ceph: No mds server is up or the cluster is laggy [ 118.111464][ T6602] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.703'. [ 118.267365][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.269689][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.284582][ T6617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.710'. [ 118.385469][ T6622] sctp: [Deprecated]: syz.1.712 (pid 6622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.385469][ T6622] Use struct sctp_sack_info instead [ 119.282563][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.287806][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.959213][ T6656] binder: 6655:6656 tried to acquire reference to desc 0, got 1 instead [ 119.962724][ T6656] binder: 6655:6656 got transaction with invalid parent offset or type [ 119.963990][ T6656] binder: 6656:6655 failed to fixup parent [ 119.965025][ T6656] binder: 6655:6656 transaction call to 6655:0 failed 26/29201/-22, size 88-24 line 3540 [ 119.966961][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.433188][ T6666] tipc: Failed to obtain node identity [ 120.434262][ T6666] tipc: Enabling of bearer rejected, failed to enable media [ 121.939852][ C0] sched: RT throttling activated [ 123.208817][ T6706] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.210405][ T6706] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 123.749416][ T6711] device syzkaller1 entered promiscuous mode [ 124.160255][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.161844][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.357773][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.359331][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.904671][ T6756] tipc: Failed to remove unknown binding: 66,0,0/0:2919467117/2919467119 [ 124.906371][ T6756] tipc: Failed to remove unknown binding: 66,0,0/0:2919467117/2919467118 [ 124.954952][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.963240][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.691307][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.693776][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.721885][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.766'. [ 125.934124][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935221][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.622389][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.623925][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.643853][ T6808] device syzkaller0 left promiscuous mode [ 127.005197][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.784'. [ 127.044271][ T6823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 127.045922][ T6823] ------------[ cut here ]------------ [ 127.046815][ T6823] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 127.049167][ T6823] WARNING: CPU: 0 PID: 6823 at net/sched/cls_u32.c:853 u32_change+0x1698/0x1f18 [ 127.050668][ T6823] Modules linked in: [ 127.051281][ T6823] CPU: 0 PID: 6823 Comm: syz.1.783 Not tainted syzkaller #0 [ 127.052639][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.054267][ T6823] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 127.055511][ T6823] pc : u32_change+0x1698/0x1f18 [ 127.056297][ T6823] lr : u32_change+0x1698/0x1f18 [ 127.057172][ T6823] sp : ffff800022e16be0 [ 127.057813][ T6823] x29: ffff800022e16d40 x28: ffff0000cba5a800 x27: 0000000000000000 [ 127.059178][ T6823] x26: 1fffe0001974b50d x25: ffff0000c3901400 x24: ffff0000cba5b400 [ 127.060554][ T6823] x23: 0000000000000010 x22: ffff7000045c2d8c x21: dfff800000000000 [ 127.061957][ T6823] x20: ffff800022e17400 x19: ffff800017bec000 x18: ffff800011b9bf60 [ 127.063313][ T6823] x17: 1fffe00033ea637e x16: ffff8000082d92bc x15: 0000000040000000 [ 127.064714][ T6823] x14: 0000000000000001 x13: 1fffe00033ea8a30 x12: 0000000000ff0100 [ 127.066234][ T6823] x11: ff0080000a8df3f0 x10: 0000000000000003 x9 : aaa030f7b1698800 [ 127.067603][ T6823] x8 : aaa030f7b1698800 x7 : ffff800008257984 x6 : 0000000000000000 [ 127.068860][ T6823] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 127.070298][ T6823] x2 : 0000000000000006 x1 : ffff800011b9da80 x0 : ffff80018a3bc000 [ 127.071629][ T6823] Call trace: [ 127.072189][ T6823] u32_change+0x1698/0x1f18 [ 127.072988][ T6823] tc_new_tfilter+0xf60/0x1474 [ 127.073791][ T6823] rtnetlink_rcv_msg+0x6d8/0xcdc [ 127.074716][ T6823] netlink_rcv_skb+0x218/0x3e8 [ 127.075541][ T6823] rtnetlink_rcv+0x28/0x38 [ 127.076244][ T6823] netlink_unicast+0x60c/0x814 [ 127.077046][ T6823] netlink_sendmsg+0x6f4/0x9c0 [ 127.077892][ T6823] ____sys_sendmsg+0x5c8/0x938 [ 127.078809][ T6823] __sys_sendmmsg+0x344/0x834 [ 127.079664][ T6823] __arm64_sys_sendmmsg+0xa0/0xbc [ 127.080566][ T6823] invoke_syscall+0x98/0x2b4 [ 127.081393][ T6823] el0_svc_common+0x138/0x258 [ 127.082244][ T6823] do_el0_svc+0x58/0x130 [ 127.083045][ T6823] el0_svc+0x58/0x128 [ 127.083760][ T6823] el0t_64_sync_handler+0x84/0xf0 [ 127.084696][ T6823] el0t_64_sync+0x18c/0x190 [ 127.085460][ T6823] irq event stamp: 620 [ 127.086243][ T6823] hardirqs last enabled at (619): [] finish_lock_switch+0xb0/0x1c4 [ 127.087856][ T6823] hardirqs last disabled at (620): [] el1_dbg+0x24/0x80 [ 127.089284][ T6823] softirqs last enabled at (568): [] local_bh_enable+0x10/0x34 [ 127.090988][ T6823] softirqs last disabled at (562): [] local_bh_disable+0x10/0x34 [ 127.092455][ T6823] ---[ end trace 0000000000000000 ]---