last executing test programs: 1.459499982s ago: executing program 3 (id=289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.448808112s ago: executing program 4 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x65dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 1.398310555s ago: executing program 3 (id=292): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.346364587s ago: executing program 3 (id=295): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.27577284s ago: executing program 4 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}}, 0x0) 1.088807189s ago: executing program 3 (id=301): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff00f}]}, 0x10) 1.06762019s ago: executing program 4 (id=302): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x8, &(0x7f0000001100)={[{@clear_cache}, {@compress}, {@ssd_spread}, {@rescan_uuid_tree}, {@skip_balance}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) 996.608883ms ago: executing program 3 (id=303): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb0}}, 0x0) 938.260666ms ago: executing program 0 (id=305): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26d4, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 913.101788ms ago: executing program 3 (id=307): r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001240)={0x6, 0x2, 0x10, "186a3f4e22e2b284e8dec44b29aadd28b3700fba026367b70bacda8ce82bd75e", 0x56595559}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x9f, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 879.401859ms ago: executing program 1 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x65dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 834.840971ms ago: executing program 2 (id=310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) 811.181222ms ago: executing program 2 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xe, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 748.736955ms ago: executing program 0 (id=312): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 677.555979ms ago: executing program 1 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}}, 0x0) 558.537854ms ago: executing program 4 (id=314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) 557.482844ms ago: executing program 1 (id=315): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) listen(0xffffffffffffffff, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 526.878475ms ago: executing program 2 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 447.598049ms ago: executing program 0 (id=317): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb0}}, 0x0) 387.997242ms ago: executing program 0 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 329.428125ms ago: executing program 4 (id=319): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e", 0x9}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 329.174705ms ago: executing program 1 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f00000049c0)=[@decrefs], 0x0, 0x0, 0x0}) 291.788467ms ago: executing program 1 (id=321): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 283.573737ms ago: executing program 4 (id=322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) 276.467587ms ago: executing program 2 (id=323): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26d4, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 226.34883ms ago: executing program 0 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70fd2c, 0x65dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x9, 0x10000, 0x0, {0x7, 0x0, 0x2, 0x4, 0x6, 0x8}, {0xb4, 0x1, 0x4, 0x9, 0x8}, 0x4, 0x3, 0x982}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 102.373586ms ago: executing program 2 (id=325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 58.020648ms ago: executing program 2 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x6c}}, 0x0) 57.226438ms ago: executing program 0 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xe, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=328): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xb0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 29.296005][ T4316] cgroup: Unknown subsys name 'net' [ 29.521275][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.800460][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.531300][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.535361][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.537945][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.538152][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.539439][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.541223][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.542060][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.543209][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.544874][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.546177][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.546787][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.548199][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.549566][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.550601][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.551754][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.553041][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.554439][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.557556][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.559670][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.559807][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.561793][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.562517][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.565151][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.566133][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.566738][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.570036][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.586669][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.590675][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.592384][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.593647][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.702643][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.724272][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.726895][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.742460][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.761341][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.762692][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.764337][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.767527][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.769056][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.770685][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.796826][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.799599][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.804850][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.806138][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.807931][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.812228][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.813437][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.815013][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.817049][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.818205][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.820699][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.826158][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.827362][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.829282][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.832121][ T4339] team0: Port device team_slave_0 added [ 30.833456][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.834686][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.836179][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.841609][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.842977][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.844665][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.846467][ T4339] team0: Port device team_slave_1 added [ 30.855027][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.862300][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.865006][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.868943][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.871178][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.875367][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.881149][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.888534][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.890006][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.894239][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.906326][ T4333] team0: Port device team_slave_0 added [ 30.907771][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.910742][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.915230][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.918273][ T4329] team0: Port device team_slave_0 added [ 30.924581][ T4333] team0: Port device team_slave_1 added [ 30.931090][ T4329] team0: Port device team_slave_1 added [ 30.932990][ T4328] team0: Port device team_slave_0 added [ 30.939224][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.940523][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.944859][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.951337][ T4328] team0: Port device team_slave_1 added [ 30.954647][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.955903][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.957965][ T4338] device bridge_slave_0 entered promiscuous mode [ 30.961273][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.962503][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.967106][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.978478][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.981029][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.982869][ T4338] device bridge_slave_1 entered promiscuous mode [ 30.984853][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.986033][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.990761][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.995134][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.996253][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.001133][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.006455][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.007628][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.012682][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.049757][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.098959][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.139019][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.140213][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.144756][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.149891][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.152611][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.200360][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.248729][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.288656][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.289997][ T4333] Cannot create hsr debugfs directory [ 31.292776][ T4338] team0: Port device team_slave_0 added [ 31.294749][ T4338] team0: Port device team_slave_1 added [ 31.339578][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.378802][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.418668][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.419978][ T4329] Cannot create hsr debugfs directory [ 31.480196][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.538830][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.588610][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.589975][ T4328] Cannot create hsr debugfs directory [ 31.591584][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.592897][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.597499][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.603771][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.604992][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.613020][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.699610][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.738769][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.788702][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.790197][ T4338] Cannot create hsr debugfs directory [ 31.870790][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.919141][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.981888][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.029558][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.079553][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.130029][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.179707][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.233571][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.284009][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.329248][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.363232][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.401978][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.465520][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.500268][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.532475][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.568959][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 32.575619][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.620442][ T4338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.649006][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 32.649133][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 32.650038][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 32.651121][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 32.659956][ T4338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.699599][ T4338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.765200][ T4338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.828105][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.847265][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.854923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.857276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.860154][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.867427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.869536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.871313][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.872637][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.880034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.881625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.883434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.885316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.886453][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.895851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.899541][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.904765][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.911469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.913261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.914870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.916659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.919718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.921543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.930179][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.940768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.942508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.943960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.945679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.947283][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.948645][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.953693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.955662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.957434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.961362][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.964950][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.966229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.968033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.970149][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.971420][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.972996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.974722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.976786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.978490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.983159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.984920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.986528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.994308][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.996863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.998505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.000291][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.001613][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.003375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.005068][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.006689][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.007964][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.010077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.011696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.015061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.016726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.018232][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.019649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.030043][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.032796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.034536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.036197][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.037471][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.040296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.042027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.044025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.045738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.047261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.049304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.050947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.052595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.054193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.055832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.057656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.062945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.066205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.069831][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.079715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.081668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.083213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.084726][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.086829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.097726][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.101174][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.103859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.105589][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.107571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.110411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.115518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.117087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.125112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.126944][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.128516][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.131593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.133240][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.137027][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.144731][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.146608][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.150303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.152105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.153528][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.154764][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.156373][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.173462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.175161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.176768][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.178112][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.192950][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.195004][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.198266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.200330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.202064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.203639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.205560][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.213804][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.219150][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.224001][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.225340][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.234795][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.237355][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.239182][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.244028][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.252068][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.253908][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.267394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.269630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.271438][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.277893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.279689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.281310][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.282679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.292949][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.294705][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.296372][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.297984][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.306286][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.314237][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.315492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.317205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.323084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.324791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.326442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.328084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.336697][ T4339] device veth0_vlan entered promiscuous mode [ 33.343231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.344682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.350786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.352478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.354520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.355918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.363707][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.365834][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.367605][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.373115][ T4333] device veth0_vlan entered promiscuous mode [ 33.378265][ T4339] device veth1_vlan entered promiscuous mode [ 33.382760][ T4333] device veth1_vlan entered promiscuous mode [ 33.395590][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.397332][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.400042][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.401669][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.404139][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.411853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.414603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.416327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.417970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.421738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.424342][ T4339] device veth0_macvtap entered promiscuous mode [ 33.426654][ T4329] device veth0_vlan entered promiscuous mode [ 33.429751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.431209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.432616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.438318][ T4339] device veth1_macvtap entered promiscuous mode [ 33.442908][ T4329] device veth1_vlan entered promiscuous mode [ 33.445890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.447522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.450891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.452132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.457614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.459422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.461470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.462931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.465079][ T4328] device veth0_vlan entered promiscuous mode [ 33.471757][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.476042][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.477393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.483206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.484861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.486571][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.488262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.491830][ T4333] device veth0_macvtap entered promiscuous mode [ 33.494272][ T4333] device veth1_macvtap entered promiscuous mode [ 33.498232][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.502817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.504336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.505803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.507521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.516654][ T4328] device veth1_vlan entered promiscuous mode [ 33.522001][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.523796][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.526305][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.532345][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.534051][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.535767][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.537417][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.540790][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.543678][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545250][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.546770][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548318][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.554379][ T4329] device veth0_macvtap entered promiscuous mode [ 33.556878][ T4329] device veth1_macvtap entered promiscuous mode [ 33.561713][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.563673][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.565881][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.567275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.570949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.572562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.579447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.581376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.586466][ T4328] device veth0_macvtap entered promiscuous mode [ 33.594051][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.595690][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.597635][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599597][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.601919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.603748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.605290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.608266][ T4328] device veth1_macvtap entered promiscuous mode [ 33.622619][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.624580][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626352][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.628265][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.632523][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.637545][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.640990][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.642700][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.644706][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.646537][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.648421][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.651619][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.652925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.654506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.656151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.657977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.660813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.662387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.664093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.666766][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.669237][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.670835][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.672530][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.674709][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.687244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.690808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.693778][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.695753][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.697450][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.700183][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.701791][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.703532][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.705792][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.713392][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714879][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716582][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.718161][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.721166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.723069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.729977][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.731590][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.733253][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.734827][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.758224][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.763043][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.763742][ T4338] device veth0_vlan entered promiscuous mode [ 33.773024][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.774554][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.776266][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.777830][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.777905][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.779650][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.783063][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.784690][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.791502][ T4338] device veth1_vlan entered promiscuous mode [ 33.796743][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.821989][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.823431][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.833339][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.835473][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.837982][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.842210][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.843552][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.844954][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.845637][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.849683][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.877896][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.880459][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.880736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.883454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.885185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.890520][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.892024][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.893579][ T4338] device veth0_macvtap entered promiscuous mode [ 33.901261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.903492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.923245][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.924780][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.926138][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.942467][ T4338] device veth1_macvtap entered promiscuous mode [ 33.980638][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.982455][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.984119][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.985821][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.987485][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.004180][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.006995][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.013856][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.016518][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.021589][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.023497][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.025280][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.042904][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.044779][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.046678][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.048238][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.053906][ T4420] binder: 4419:4420 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 34.056689][ T4420] binder: 4419:4420 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 34.063342][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.066070][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.070090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.071701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.073430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.075203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.101796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.107643][ T4425] tipc: Enabling of bearer rejected, failed to enable media [ 34.112319][ T4418] device syzkaller0 entered promiscuous mode [ 34.121440][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.123015][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124525][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.126022][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.140866][ T4429] loop5: detected capacity change from 0 to 7 [ 34.144229][ T4322] Dev loop5: unable to read RDB block 7 [ 34.145328][ T4322] loop5: AHDI p1 p2 p3 [ 34.146107][ T4322] loop5: partition table partially beyond EOD, truncated [ 34.148080][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 34.149988][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 34.152792][ T4429] Dev loop5: unable to read RDB block 7 [ 34.154066][ T4429] loop5: AHDI p1 p2 p3 [ 34.154787][ T4429] loop5: partition table partially beyond EOD, truncated [ 34.156107][ T4429] loop5: p1 start 1818582900 is beyond EOD, truncated [ 34.157272][ T4429] loop5: p3 start 335544320 is beyond EOD, truncated [ 34.374930][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.376354][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.378142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.395254][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.396618][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.398158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.673024][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 34.728728][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 34.729920][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 34.730062][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 34.730989][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 34.804399][ T4464] binder: 4463:4464 ioctl 4018620d 0 returned -22 [ 34.806069][ T4464] binder: 4463:4464 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 34.815775][ T4462] binder: 4461:4462 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 34.821603][ T4464] binder: 4463:4464 got transaction to invalid handle, 1 [ 34.825256][ T4464] binder: 4464:4463 cannot find target node [ 34.826490][ T4464] binder: 4463:4464 transaction call to 0:0 failed 5/29201/-22, size 72-24 line 3062 [ 34.828400][ T4464] binder: 4463:4464 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 34.851124][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.953523][ T4471] loop5: detected capacity change from 0 to 7 [ 34.955451][ T4322] Dev loop5: unable to read RDB block 7 [ 34.956512][ T4322] loop5: AHDI p1 p2 p3 [ 34.957256][ T4322] loop5: partition table partially beyond EOD, truncated [ 34.974935][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 34.976203][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 34.988824][ T4471] Dev loop5: unable to read RDB block 7 [ 34.989804][ T4471] loop5: AHDI p1 p2 p3 [ 34.990536][ T4471] loop5: partition table partially beyond EOD, truncated [ 34.991843][ T4471] loop5: p1 start 1818582900 is beyond EOD, truncated [ 34.993151][ T4471] loop5: p3 start 335544320 is beyond EOD, truncated [ 35.047119][ T4457] loop0: detected capacity change from 0 to 32768 [ 35.071567][ T4462] syz.4.5 (4462): drop_caches: 2 [ 35.110208][ T4457] overlayfs: './file0' not a directory [ 35.186579][ T4485] tipc: Enabling of bearer rejected, failed to enable media [ 35.310577][ T27] audit: type=1326 audit(35.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.314750][ T27] audit: type=1326 audit(35.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.334993][ T27] audit: type=1326 audit(35.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.349797][ T27] audit: type=1326 audit(35.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.364075][ T27] audit: type=1326 audit(35.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.387488][ T4512] binder: 4510:4512 ioctl 4018620d 0 returned -22 [ 35.388323][ T27] audit: type=1326 audit(35.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.393837][ T4512] binder: 4510:4512 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 35.397745][ T4499] Zero length message leads to an empty skb [ 35.404762][ T27] audit: type=1326 audit(35.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.3.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb9779368 code=0x7ffc0000 [ 35.409439][ T4409] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.415704][ T4512] binder: 4510:4512 got transaction to invalid handle, 1 [ 35.416942][ T4512] binder: 4512:4510 cannot find target node [ 35.417952][ T4512] binder: 4510:4512 transaction call to 0:0 failed 8/29201/-22, size 72-24 line 3062 [ 35.422939][ T4512] binder: 4510:4512 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 35.457633][ T4517] loop5: detected capacity change from 0 to 7 [ 35.458963][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.480501][ T4517] Dev loop5: unable to read RDB block 7 [ 35.481550][ T4517] loop5: AHDI p1 p2 p3 [ 35.482284][ T4517] loop5: partition table partially beyond EOD, truncated [ 35.489360][ T4517] loop5: p1 start 1818582900 is beyond EOD, truncated [ 35.490635][ T4517] loop5: p3 start 335544320 is beyond EOD, truncated [ 35.509499][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.511244][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.552241][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.554698][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.588651][ T4409] usb 1-1: Using ep0 maxpacket: 16 [ 35.591999][ T4409] usb 1-1: config 0 has no interfaces? [ 35.593013][ T4409] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 35.594578][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.635219][ T4409] usb 1-1: config 0 descriptor?? [ 35.644348][ T4537] tipc: Started in network mode [ 35.645272][ T4537] tipc: Node identity 662325911502, cluster identity 4711 [ 35.646588][ T4537] tipc: Enabled bearer , priority 0 [ 35.648382][ T4537] device syzkaller0 entered promiscuous mode [ 35.656069][ T4537] tipc: Resetting bearer [ 35.658449][ T4536] tipc: Resetting bearer [ 35.974286][ T7] usb 1-1: USB disconnect, device number 2 [ 35.976294][ T4536] tipc: Disabling bearer [ 36.522829][ T4559] device syzkaller0 entered promiscuous mode [ 36.558184][ T4559] tipc: Started in network mode [ 36.562766][ T4559] tipc: Node identity fe9fe2039902, cluster identity 4711 [ 36.564928][ T4559] tipc: Enabled bearer , priority 0 [ 36.572745][ T4558] tipc: Resetting bearer [ 36.629925][ T4558] tipc: Disabling bearer [ 36.738651][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 36.808864][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 36.818851][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.820038][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 36.821143][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 36.840362][ T4570] tipc: Enabling of bearer rejected, failed to enable media [ 37.164427][ T4586] binder: 4584:4586 tried to acquire reference to desc 0, got 1 instead [ 37.171498][ T4586] binder: 4584:4586 transaction call to 4584:0 failed 13/29201/-14, size 0-24 line 3350 [ 37.289423][ T4586] syz.1.51 (4586): drop_caches: 2 [ 37.292176][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.317938][ T4594] binder: 4593:4594 ioctl 4018620d 0 returned -22 [ 37.322056][ T4594] binder: 4594:4593 cannot find target node [ 37.323061][ T4594] binder: 4593:4594 transaction call to 0:0 failed 16/29201/-22, size 72-24 line 3062 [ 37.354994][ T4598] loop5: detected capacity change from 0 to 7 [ 37.357091][ T4598] Dev loop5: unable to read RDB block 7 [ 37.358056][ T4598] loop5: AHDI p1 p2 p3 [ 37.359284][ T4598] loop5: partition table partially beyond EOD, truncated [ 37.360908][ T4598] loop5: p1 start 1818582900 is beyond EOD, truncated [ 37.362107][ T4598] loop5: p3 start 335544320 is beyond EOD, truncated [ 37.658111][ T4621] tipc: Enabling of bearer rejected, failed to enable media [ 38.165105][ T4645] syz.1.64 (4645): drop_caches: 2 [ 38.199934][ T4649] binder: BINDER_SET_CONTEXT_MGR already set [ 38.201704][ T4649] binder: 4648:4649 ioctl 4018620d 20004a80 returned -16 [ 38.282505][ T4655] loop5: detected capacity change from 0 to 7 [ 38.284491][ T4322] Dev loop5: unable to read RDB block 7 [ 38.285661][ T4322] loop5: AHDI p1 p2 p3 [ 38.286358][ T4322] loop5: partition table partially beyond EOD, truncated [ 38.287779][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 38.289858][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 38.291830][ T4655] Dev loop5: unable to read RDB block 7 [ 38.292871][ T4655] loop5: AHDI p1 p2 p3 [ 38.293721][ T4655] loop5: partition table partially beyond EOD, truncated [ 38.295797][ T4655] loop5: p1 start 1818582900 is beyond EOD, truncated [ 38.297138][ T4655] loop5: p3 start 335544320 is beyond EOD, truncated [ 38.348913][ T4380] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.498693][ T4380] usb 1-1: device descriptor read/64, error -71 [ 38.513044][ T4662] tipc: Enabling of bearer rejected, failed to enable media [ 38.770901][ T4380] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.773448][ T4690] syz.3.75 (4690): drop_caches: 2 [ 38.799298][ T4692] binder: BINDER_SET_CONTEXT_MGR already set [ 38.800466][ T4692] binder: 4691:4692 ioctl 4018620d 20004a80 returned -16 [ 38.809461][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 38.856670][ T4701] loop5: detected capacity change from 0 to 7 [ 38.860337][ T27] audit: type=1807 audit(38.850:9): action=measure UNKNOWN=# res=0 [ 38.862152][ T27] audit: type=1802 audit(38.850:10): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.79" res=0 errno=0 [ 38.865688][ T4696] ima: policy update failed [ 38.866614][ T27] audit: type=1802 audit(38.850:11): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.79" res=0 errno=0 [ 38.879101][ T4701] Dev loop5: unable to read RDB block 7 [ 38.880110][ T4701] loop5: AHDI p1 p2 p3 [ 38.880874][ T4701] loop5: partition table partially beyond EOD, truncated [ 38.882492][ T4701] loop5: p1 start 1818582900 is beyond EOD, truncated [ 38.883747][ T4701] loop5: p3 start 335544320 is beyond EOD, truncated [ 38.889476][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 38.890589][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 38.891791][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 38.893001][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 38.918670][ T4380] usb 1-1: device descriptor read/64, error -71 [ 38.926968][ T4711] tipc: Enabled bearer , priority 0 [ 38.944715][ T4710] tipc: Disabling bearer [ 39.038765][ T4380] usb usb1-port1: attempt power cycle [ 39.042163][ T4720] tipc: Enabling of bearer rejected, failed to enable media [ 39.227256][ T4736] tipc: Started in network mode [ 39.228408][ T4736] tipc: Node identity 82b912ec7bfd, cluster identity 4711 [ 39.233362][ T4736] tipc: Enabled bearer , priority 0 [ 39.235153][ T4736] device syzkaller0 entered promiscuous mode [ 39.249618][ T4736] tipc: Resetting bearer [ 39.252353][ T4735] tipc: Resetting bearer [ 39.283525][ T4740] binder_user_error: 10 callbacks suppressed [ 39.283534][ T4740] binder: 4739:4740 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 39.285299][ T4742] binder: BINDER_SET_CONTEXT_MGR already set [ 39.287697][ T4742] binder: 4741:4742 ioctl 4018620d 20004a80 returned -16 [ 39.293196][ T4742] binder: 4741:4742 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 39.296389][ T4740] syz.2.88 (4740): drop_caches: 2 [ 39.300311][ T4735] tipc: Disabling bearer [ 39.448800][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.487357][ T4380] usb 1-1: device descriptor read/8, error -71 [ 39.495738][ T4753] loop5: detected capacity change from 0 to 7 [ 39.497645][ T4322] Dev loop5: unable to read RDB block 7 [ 39.498763][ T4322] loop5: AHDI p1 p2 p3 [ 39.502204][ T4322] loop5: partition table partially beyond EOD, truncated [ 39.509607][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 39.511289][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 39.674973][ T4747] loop1: detected capacity change from 0 to 131072 [ 39.683142][ T4747] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 39.683455][ T4753] Dev loop5: unable to read RDB block 7 [ 39.684728][ T4747] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.687336][ T4753] loop5: AHDI p1 p2 p3 [ 39.688137][ T4753] loop5: partition table partially beyond EOD, truncated [ 39.691420][ T4747] F2FS-fs (loop1): invalid crc value [ 39.695046][ T4753] loop5: p1 start 1818582900 is beyond EOD, truncated [ 39.703153][ T4753] loop5: p3 start 335544320 is beyond EOD, truncated [ 39.737022][ T4763] tipc: Enabled bearer , priority 0 [ 39.740186][ T4762] tipc: Disabling bearer [ 39.757479][ T4747] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.760983][ T4380] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.774052][ T4747] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.775518][ T4747] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 39.790094][ T4380] usb 1-1: device descriptor read/8, error -71 [ 39.794291][ T4769] device syzkaller0 entered promiscuous mode [ 39.803335][ T4771] tipc: Enabling of bearer rejected, failed to enable media [ 39.909251][ T4380] usb usb1-port1: unable to enumerate USB device [ 39.950743][ T4784] binder: 4783:4784 ioctl c0306201 0 returned -14 [ 39.955190][ T4784] binder: 4783:4784 got transaction to invalid handle, 1 [ 39.956466][ T4784] binder_debug: 5 callbacks suppressed [ 39.956479][ T4784] binder: 4784:4783 cannot find target node [ 39.958460][ T4784] binder: 4783:4784 transaction call to 0:0 failed 34/29201/-22, size 72-24 line 3062 [ 39.961684][ T4784] binder: 4783:4784 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 39.963601][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.019735][ T4790] binder: 4787:4790 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 40.036826][ T4790] syz.4.102 (4790): drop_caches: 2 [ 40.045363][ T4792] tipc: Started in network mode [ 40.046257][ T4792] tipc: Node identity 428c1d5cf5d2, cluster identity 4711 [ 40.047858][ T4792] tipc: Enabled bearer , priority 0 [ 40.049875][ T4792] device syzkaller0 entered promiscuous mode [ 40.066424][ T4792] tipc: Resetting bearer [ 40.079202][ T4791] tipc: Resetting bearer [ 40.131593][ T4791] tipc: Disabling bearer [ 40.191321][ T4817] loop5: detected capacity change from 0 to 7 [ 40.198437][ T4817] Dev loop5: unable to read RDB block 7 [ 40.201992][ T4817] loop5: AHDI p1 p2 p3 [ 40.202699][ T4817] loop5: partition table partially beyond EOD, truncated [ 40.214247][ T4817] loop5: p1 start 1818582900 is beyond EOD, truncated [ 40.215582][ T4817] loop5: p3 start 335544320 is beyond EOD, truncated [ 40.254850][ T4824] device syzkaller0 entered promiscuous mode [ 40.296730][ T4827] binder: 4826:4827 ioctl c0306201 0 returned -14 [ 40.312901][ T4827] binder: 4826:4827 got transaction to invalid handle, 1 [ 40.314154][ T4827] binder: 4827:4826 cannot find target node [ 40.317989][ T4827] binder: 4826:4827 transaction call to 0:0 failed 39/29201/-22, size 72-24 line 3062 [ 40.324852][ T4827] binder: 4826:4827 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 40.331555][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.465280][ T4831] tipc: Enabled bearer , priority 0 [ 40.473243][ T4829] tipc: Disabling bearer [ 40.690978][ T4839] tipc: Enabling of bearer rejected, failed to enable media [ 40.710158][ T4838] binder: 4836:4838 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 40.716049][ T4838] syz.1.116 (4838): drop_caches: 2 [ 41.138630][ T4859] binder: 4858:4859 ioctl c0306201 0 returned -14 [ 41.141227][ T4859] binder: 4858:4859 got transaction to invalid handle, 1 [ 41.142507][ T4859] binder: 4859:4858 cannot find target node [ 41.145588][ T4859] binder: 4858:4859 transaction call to 0:0 failed 44/29201/-22, size 72-24 line 3062 [ 41.147511][ T4859] binder: 4858:4859 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 41.149613][ T1516] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.162324][ T4856] tipc: Enabled bearer , priority 0 [ 41.163987][ T4856] device syzkaller0 entered promiscuous mode [ 41.169337][ T4863] loop5: detected capacity change from 0 to 7 [ 41.176639][ T4863] Dev loop5: unable to read RDB block 7 [ 41.177708][ T4863] loop5: AHDI p1 p2 p3 [ 41.178481][ T4863] loop5: partition table partially beyond EOD, truncated [ 41.189573][ T4856] tipc: Resetting bearer [ 41.193307][ T4863] loop5: p1 start 1818582900 is beyond EOD, truncated [ 41.194579][ T4863] loop5: p3 start 335544320 is beyond EOD, truncated [ 41.196267][ T4855] tipc: Resetting bearer [ 41.250660][ T4855] tipc: Disabling bearer [ 41.342837][ T4868] tipc: Started in network mode [ 41.343821][ T4868] tipc: Node identity 56e623ea3d62, cluster identity 4711 [ 41.345089][ T4868] tipc: Enabled bearer , priority 0 [ 41.346589][ T4861] device syzkaller0 entered promiscuous mode [ 41.371104][ T4879] binder: 4878:4879 ioctl 4018620d 0 returned -22 [ 41.373881][ T4879] binder: 4879:4878 cannot find target node [ 41.377362][ T4879] syz.3.128 (4879): drop_caches: 2 [ 41.397597][ T4866] device syzkaller0 entered promiscuous mode [ 41.461086][ T4867] tipc: Disabling bearer [ 41.485897][ T4892] tmpfs: Unknown parameter 'noswap' [ 41.521401][ T4890] tipc: Enabling of bearer rejected, failed to enable media [ 41.541069][ T4899] loop5: detected capacity change from 0 to 7 [ 41.542762][ T4322] Dev loop5: unable to read RDB block 7 [ 41.543769][ T4322] loop5: AHDI p1 p2 p3 [ 41.544519][ T4322] loop5: partition table partially beyond EOD, truncated [ 41.548822][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 41.550129][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 41.552169][ T4899] Dev loop5: unable to read RDB block 7 [ 41.553104][ T4899] loop5: AHDI p1 p2 p3 [ 41.553847][ T4899] loop5: partition table partially beyond EOD, truncated [ 41.557776][ T4899] loop5: p1 start 1818582900 is beyond EOD, truncated [ 41.565870][ T4899] loop5: p3 start 335544320 is beyond EOD, truncated [ 41.656451][ T4910] binder: 4909:4910 ioctl 4018620d 0 returned -22 [ 41.662189][ T4910] syz.2.140 (4910): drop_caches: 2 [ 41.700315][ T4905] tipc: Enabled bearer , priority 0 [ 41.701944][ T4912] device syzkaller0 entered promiscuous mode [ 41.708343][ T4905] tipc: Resetting bearer [ 41.722467][ T4904] tipc: Resetting bearer [ 41.761041][ T4904] tipc: Disabling bearer [ 41.818687][ T4380] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.842231][ T4914] device syzkaller0 entered promiscuous mode [ 41.844071][ T4925] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 41.867685][ T4334] Bluetooth: Wrong link type (-71) [ 41.917110][ T4933] tipc: Enabled bearer , priority 0 [ 41.941514][ T4937] loop5: detected capacity change from 0 to 7 [ 41.944822][ T4937] Dev loop5: unable to read RDB block 7 [ 41.945866][ T4937] loop5: AHDI p1 p2 p3 [ 41.946664][ T4937] loop5: partition table partially beyond EOD, truncated [ 41.948934][ T4937] loop5: p1 start 1818582900 is beyond EOD, truncated [ 41.950393][ T4937] loop5: p3 start 335544320 is beyond EOD, truncated [ 41.993243][ T4941] binder: 4940:4941 ioctl 4018620d 0 returned -22 [ 42.000227][ T4380] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 42.001858][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.002378][ T4941] syz.2.152 (4941): drop_caches: 2 [ 42.004419][ T4380] usb 1-1: config 0 descriptor?? [ 42.007814][ T4380] cp210x 1-1:0.0: cp210x converter detected [ 42.022062][ T4932] tipc: Disabling bearer [ 42.033185][ T4939] device syzkaller0 entered promiscuous mode [ 42.035080][ T4943] tipc: Enabling of bearer rejected, failed to enable media [ 42.123394][ T4952] tipc: Enabled bearer , priority 0 [ 42.125116][ T4952] device syzkaller0 entered promiscuous mode [ 42.133589][ T4952] tipc: Resetting bearer [ 42.135724][ T4951] tipc: Resetting bearer [ 42.169479][ T4951] tipc: Disabling bearer [ 42.209381][ T4380] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 42.210828][ T4380] cp210x 1-1:0.0: querying part number failed [ 42.214594][ T4380] usb 1-1: cp210x converter now attached to ttyUSB0 [ 42.361554][ T4965] device syzkaller0 entered promiscuous mode [ 42.413870][ T1516] usb 1-1: USB disconnect, device number 7 [ 42.425730][ T1516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 42.427422][ T1516] cp210x 1-1:0.0: device disconnected [ 42.433459][ T4971] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 42.455948][ T4974] loop5: detected capacity change from 0 to 7 [ 42.460494][ T4975] binder: BINDER_SET_CONTEXT_MGR already set [ 42.461604][ T4975] binder: 4973:4975 ioctl 4018620d 20000040 returned -16 [ 42.461694][ T4974] Dev loop5: unable to read RDB block 7 [ 42.463797][ T4974] loop5: AHDI p1 p2 p3 [ 42.464904][ T4974] loop5: partition table partially beyond EOD, truncated [ 42.466142][ T4974] loop5: p1 start 1818582900 is beyond EOD, truncated [ 42.467257][ T4974] loop5: p3 start 335544320 is beyond EOD, truncated [ 42.476595][ T4975] syz.2.164 (4975): drop_caches: 2 [ 42.487651][ T4977] tipc: Enabled bearer , priority 0 [ 42.559745][ T4976] tipc: Disabling bearer [ 42.563587][ T4984] tipc: Enabling of bearer rejected, failed to enable media [ 42.565407][ T4981] device syzkaller0 entered promiscuous mode [ 42.648225][ T4996] tipc: Enabled bearer , priority 0 [ 42.652629][ T4996] device syzkaller0 entered promiscuous mode [ 42.658232][ T4996] tipc: Resetting bearer [ 42.660635][ T4995] tipc: Resetting bearer [ 42.688057][ T4995] tipc: Disabling bearer [ 42.831948][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.833957][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.881150][ T5014] binder: BINDER_SET_CONTEXT_MGR already set [ 42.884679][ T5014] binder: 5013:5014 ioctl 4018620d 20000040 returned -16 [ 42.896994][ T5014] syz.2.178 (5014): drop_caches: 2 [ 43.007796][ T5023] loop5: detected capacity change from 0 to 7 [ 43.017068][ T4322] Dev loop5: unable to read RDB block 7 [ 43.018157][ T4322] loop5: AHDI p1 p2 p3 [ 43.019604][ T4322] loop5: partition table partially beyond EOD, truncated [ 43.022254][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 43.024930][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 43.034119][ T5023] Dev loop5: unable to read RDB block 7 [ 43.035563][ T5023] loop5: AHDI p1 p2 p3 [ 43.036338][ T5023] loop5: partition table partially beyond EOD, truncated [ 43.044847][ T5023] loop5: p1 start 1818582900 is beyond EOD, truncated [ 43.055573][ T5023] loop5: p3 start 335544320 is beyond EOD, truncated [ 43.192436][ T5030] device syzkaller0 entered promiscuous mode [ 43.283862][ T5033] tipc: Enabled bearer , priority 0 [ 43.401673][ T5031] tipc: Disabling bearer [ 43.413945][ T5039] tipc: Enabled bearer , priority 0 [ 43.499698][ T5037] tipc: Disabling bearer [ 43.506188][ T5041] tipc: Enabled bearer , priority 0 [ 43.507886][ T5041] device syzkaller0 entered promiscuous mode [ 43.519011][ T5041] tipc: Resetting bearer [ 43.602115][ T5040] tipc: Resetting bearer [ 43.615952][ T5047] binder: BINDER_SET_CONTEXT_MGR already set [ 43.617103][ T5047] binder: 5046:5047 ioctl 4018620d 20000040 returned -16 [ 43.621924][ T5047] syz.2.190 (5047): drop_caches: 2 [ 43.639735][ T5040] tipc: Disabling bearer [ 43.773137][ T5066] loop5: detected capacity change from 0 to 7 [ 43.778792][ T5066] Dev loop5: unable to read RDB block 7 [ 43.780003][ T5066] loop5: AHDI p1 p2 p3 [ 43.781327][ T5066] loop5: partition table partially beyond EOD, truncated [ 43.782695][ T5066] loop5: p1 start 1818582900 is beyond EOD, truncated [ 43.783871][ T5066] loop5: p3 start 335544320 is beyond EOD, truncated [ 43.848497][ T5070] device syzkaller0 entered promiscuous mode [ 43.925588][ T5074] tipc: Enabled bearer , priority 0 [ 43.990526][ T5084] binder: 5083:5084 ioctl c0306201 0 returned -14 [ 43.995720][ T5084] syz.2.203 (5084): drop_caches: 2 [ 44.167421][ T5095] loop0: detected capacity change from 0 to 1024 [ 44.355854][ T5073] tipc: Disabling bearer [ 44.357771][ T5095] EXT4-fs (loop0): Unsupported encryption level 255 [ 44.372592][ T5091] tipc: Enabled bearer , priority 0 [ 44.459831][ T5077] tipc: Disabling bearer [ 44.467782][ T5099] tipc: Enabled bearer , priority 0 [ 44.473310][ T5099] device syzkaller0 entered promiscuous mode [ 44.480340][ T5099] tipc: Resetting bearer [ 44.482264][ T5098] tipc: Resetting bearer [ 44.525795][ T5108] loop5: detected capacity change from 0 to 7 [ 44.527539][ T5108] Dev loop5: unable to read RDB block 7 [ 44.531297][ T5108] loop5: AHDI p1 p2 p3 [ 44.532260][ T5108] loop5: partition table partially beyond EOD, truncated [ 44.533653][ T5108] loop5: p1 start 1818582900 is beyond EOD, truncated [ 44.539438][ T5098] tipc: Disabling bearer [ 44.543795][ T5108] loop5: p3 start 335544320 is beyond EOD, truncated [ 44.578189][ T5112] binder_user_error: 19 callbacks suppressed [ 44.578197][ T5112] binder: tried to use weak ref as strong ref [ 44.591057][ T5112] binder: 5111:5112 Acquire 1 refcount change on invalid ref 0 ret -22 [ 44.594200][ T5112] binder: 5111:5112 got transaction to invalid handle, 1 [ 44.661390][ T5118] loop1: detected capacity change from 0 to 1024 [ 45.052837][ T5132] device syzkaller0 entered promiscuous mode [ 45.103165][ T5137] binder: 5136:5137 ioctl c0306201 0 returned -14 [ 45.119984][ T5137] binder: BINDER_SET_CONTEXT_MGR already set [ 45.121129][ T5137] binder: 5136:5137 ioctl 4018620d 20000040 returned -16 [ 45.122856][ T5137] binder: 5136:5137 Acquire 1 refcount change on invalid ref 0 ret -22 [ 45.124347][ T5137] binder: 5136:5137 got transaction to invalid handle, 1 [ 45.125603][ T5137] binder_debug: 32 callbacks suppressed [ 45.125611][ T5137] binder: 5137:5136 cannot find target node [ 45.127823][ T5137] binder: 5136:5137 transaction call to 0:0 failed 89/29201/-22, size 0-24 line 3062 [ 45.136220][ T5137] syz.0.216 (5137): drop_caches: 2 [ 45.138078][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.158830][ T5141] tipc: Enabled bearer , priority 0 [ 45.301769][ T5138] tipc: Disabling bearer [ 45.330372][ T5152] tipc: Enabled bearer , priority 0 [ 45.336864][ T5156] binder: tried to use weak ref as strong ref [ 45.339235][ T5156] binder: 5153:5156 Acquire 1 refcount change on invalid ref 0 ret -22 [ 45.341129][ T5156] binder: 5153:5156 got transaction to invalid handle, 1 [ 45.342437][ T5156] binder: 5156:5153 cannot find target node [ 45.343389][ T5156] binder: 5153:5156 transaction call to 0:0 failed 92/29201/-22, size 72-24 line 3062 [ 45.345488][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.387651][ T5158] loop5: detected capacity change from 0 to 7 [ 45.411516][ T5158] Dev loop5: unable to read RDB block 7 [ 45.412561][ T5158] loop5: AHDI p1 p2 p3 [ 45.413318][ T5158] loop5: partition table partially beyond EOD, truncated [ 45.414603][ T5158] loop5: p1 start 1818582900 is beyond EOD, truncated [ 45.415729][ T5158] loop5: p3 start 335544320 is beyond EOD, truncated [ 45.451954][ T5151] tipc: Disabling bearer [ 45.463987][ T5160] device syzkaller0 entered promiscuous mode [ 45.492186][ T5170] binder: 5169:5170 ioctl c0306201 0 returned -14 [ 45.495625][ T5170] binder: 5169:5170 got transaction to invalid handle, 1 [ 45.496881][ T5170] binder: 5170:5169 cannot find target node [ 45.498148][ T5170] binder: 5169:5170 transaction call to 0:0 failed 96/29201/-22, size 0-24 line 3062 [ 45.512892][ T5170] syz.3.228 (5170): drop_caches: 2 [ 45.528197][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.620223][ T5172] device syzkaller0 entered promiscuous mode [ 45.638418][ T5191] binder: tried to use weak ref as strong ref [ 45.640137][ T5191] binder: 5191:5189 cannot find target node [ 45.682443][ T5193] device syzkaller0 entered promiscuous mode [ 45.724278][ T5198] loop5: detected capacity change from 0 to 7 [ 45.726064][ T5198] Dev loop5: unable to read RDB block 7 [ 45.726984][ T5198] loop5: AHDI p1 p2 p3 [ 45.727821][ T5198] loop5: partition table partially beyond EOD, truncated [ 45.734666][ T5201] loop1: detected capacity change from 0 to 2048 [ 45.734818][ T5198] loop5: p1 start 1818582900 is beyond EOD, truncated [ 45.736356][ T5201] ======================================================= [ 45.736356][ T5201] WARNING: The mand mount option has been deprecated and [ 45.736356][ T5201] and is ignored by this kernel. Remove the mand [ 45.736356][ T5201] option from the mount to silence this warning. [ 45.736356][ T5201] ======================================================= [ 45.740526][ T5198] loop5: p3 start 335544320 is beyond EOD, truncated [ 45.872428][ T5209] syz.0.241 (5209): drop_caches: 2 [ 46.271328][ T5221] binder: 5219:5221 ioctl 4018620d 0 returned -22 [ 46.326908][ T5229] device syzkaller0 entered promiscuous mode [ 46.668814][ T5217] tipc: Enabling of bearer rejected, failed to enable media [ 46.814668][ T5241] syz.4.252 (5241): drop_caches: 2 [ 46.837093][ T5239] device syzkaller0 entered promiscuous mode [ 46.842055][ T5243] loop5: detected capacity change from 0 to 7 [ 46.844070][ T4322] Dev loop5: unable to read RDB block 7 [ 46.845007][ T4322] loop5: AHDI p1 p2 p3 [ 46.845720][ T4322] loop5: partition table partially beyond EOD, truncated [ 46.847401][ T4322] loop5: p1 start 1818582900 is beyond EOD, truncated [ 46.848488][ T4322] loop5: p3 start 335544320 is beyond EOD, truncated [ 46.852904][ T5243] Dev loop5: unable to read RDB block 7 [ 46.854100][ T5243] loop5: AHDI p1 p2 p3 [ 46.854818][ T5243] loop5: partition table partially beyond EOD, truncated [ 46.856194][ T5243] loop5: p1 start 1818582900 is beyond EOD, truncated [ 46.857333][ T5243] loop5: p3 start 335544320 is beyond EOD, truncated [ 46.924691][ T5249] device syzkaller0 entered promiscuous mode [ 46.960515][ T5255] binder: 5254:5255 ioctl 4018620d 0 returned -22 [ 47.115256][ T5271] device syzkaller0 entered promiscuous mode [ 47.144826][ T5276] syz.4.264 (5276): drop_caches: 2 [ 47.196985][ T5283] loop5: detected capacity change from 0 to 7 [ 47.206069][ T5283] Dev loop5: unable to read RDB block 7 [ 47.207250][ T5283] loop5: AHDI p1 p2 p3 [ 47.207978][ T5283] loop5: partition table partially beyond EOD, truncated [ 47.212665][ T5283] loop5: p1 start 1818582900 is beyond EOD, truncated [ 47.214113][ T5283] loop5: p3 start 335544320 is beyond EOD, truncated [ 47.265643][ T5277] tipc: Enabling of bearer rejected, failed to enable media [ 47.298149][ T5294] device syzkaller0 entered promiscuous mode [ 47.384161][ T5299] binder: 5298:5299 ioctl 4018620d 0 returned -22 [ 47.723051][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 47.725163][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 47.727699][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 47.729346][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 47.757448][ T5314] syz.3.276 (5314): drop_caches: 2 [ 47.780179][ T5316] device syzkaller0 entered promiscuous mode [ 47.817287][ T5318] loop5: detected capacity change from 0 to 7 [ 47.821967][ T5318] Dev loop5: unable to read RDB block 7 [ 47.822932][ T5318] loop5: AHDI p1 p2 p3 [ 47.825380][ T5320] loop4: detected capacity change from 0 to 256 [ 47.826716][ T5318] loop5: partition table partially beyond EOD, truncated [ 47.828160][ T5318] loop5: p1 start 1818582900 is beyond EOD, truncated [ 47.835233][ T5318] loop5: p3 start 335544320 is beyond EOD, truncated [ 47.989266][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 47.991208][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 48.015411][ T5333] device syzkaller0 entered promiscuous mode [ 48.189245][ T5347] binder: 5346:5347 ioctl c0306201 0 returned -14 [ 48.206305][ T5344] tipc: Enabling of bearer rejected, failed to enable media [ 48.491859][ T5305] ceph: No mds server is up or the cluster is laggy [ 48.499605][ T4375] libceph: connect (1)[c::]:6789 error -101 [ 48.503251][ T4375] libceph: mon0 (1)[c::]:6789 connect error [ 48.515861][ T5353] device syzkaller0 entered promiscuous mode [ 48.559799][ T5355] syz.3.289 (5355): drop_caches: 2 [ 48.591275][ T5362] loop5: detected capacity change from 0 to 7 [ 48.594135][ T5362] Dev loop5: unable to read RDB block 7 [ 48.595291][ T5362] loop5: AHDI p1 p2 p3 [ 48.596048][ T5362] loop5: partition table partially beyond EOD, truncated [ 48.601314][ T5362] loop5: p1 start 1818582900 is beyond EOD, truncated [ 48.602843][ T5362] loop5: p3 start 335544320 is beyond EOD, truncated [ 48.662456][ T5366] device syzkaller0 entered promiscuous mode [ 48.699630][ T5372] binder: 5371:5372 ioctl c0306201 0 returned -14 [ 48.710398][ T5368] device syzkaller0 entered promiscuous mode [ 48.897197][ T5376] device syzkaller0 entered promiscuous mode [ 48.995267][ T5392] binder: BINDER_SET_CONTEXT_MGR already set [ 48.997282][ T5392] binder: 5391:5392 ioctl 4018620d 20000040 returned -16 [ 49.010565][ T5392] syz.1.304 (5392): drop_caches: 2 [ 49.041302][ T5383] tipc: Enabling of bearer rejected, failed to enable media [ 49.081292][ T5401] Dev loop5: unable to read RDB block 7 [ 49.082414][ T5401] loop5: AHDI p1 p2 p3 [ 49.083183][ T5401] loop5: partition table partially beyond EOD, truncated [ 49.084673][ T5401] loop5: p1 start 1818582900 is beyond EOD, truncated [ 49.086057][ T5401] loop5: p3 start 335544320 is beyond EOD, truncated [ 49.108825][ T5400] device syzkaller0 entered promiscuous mode [ 49.126181][ T5405] binder: 5404:5405 ioctl c0306201 0 returned -14 [ 49.177459][ T5388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.302 (5388) [ 49.186185][ T5388] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.188071][ T5388] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 49.190123][ T5388] BTRFS info (device loop4): force clearing of disk cache [ 49.191720][ T5388] BTRFS info (device loop4): use zlib compression, level 3 [ 49.193125][ T5388] BTRFS info (device loop4): enabling ssd optimizations [ 49.194386][ T5388] BTRFS info (device loop4): using spread ssd allocation scheme [ 49.195811][ T5388] BTRFS info (device loop4): using free space tree [ 49.237930][ T5424] device syzkaller0 entered promiscuous mode [ 49.266119][ T5388] BTRFS info (device loop4): rebuilding free space tree [ 49.278156][ T5388] BTRFS info (device loop4): checking UUID tree [ 49.306006][ T5388] BTRFS info (device loop4): balance: start -d -m [ 49.318472][ T5388] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 49.334836][ T5428] device syzkaller0 entered promiscuous mode [ 49.348447][ T5388] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 49.372020][ T5388] BTRFS info (device loop4): found 10 extents, stage: move data extents [ 49.380646][ T5388] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 49.388428][ T5388] BTRFS info (device loop4): balance: ended with status: 0 [ 49.426329][ T4338] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.540199][ T5443] device syzkaller0 entered promiscuous mode [ 49.637188][ T5452] set_capacity_and_notify: 2 callbacks suppressed [ 49.637197][ T5452] loop5: detected capacity change from 0 to 7 [ 49.643450][ T5452] Dev loop5: unable to read RDB block 7 [ 49.644647][ T5452] loop5: AHDI p1 p2 p3 [ 49.645428][ T5452] loop5: partition table partially beyond EOD, truncated [ 49.653120][ T5452] loop5: p1 start 1818582900 is beyond EOD, truncated [ 49.654501][ T5452] loop5: p3 start 335544320 is beyond EOD, truncated [ 49.661049][ T5456] binder_user_error: 27 callbacks suppressed [ 49.661059][ T5456] binder: 5454:5456 got transaction to invalid handle, 1 [ 49.663828][ T5455] binder: tried to use weak ref as strong ref [ 49.664977][ T5455] binder: 5453:5455 Acquire 1 refcount change on invalid ref 0 ret -22 [ 49.666237][ T5456] binder: 5454:5456 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 49.671327][ T5455] binder: 5453:5455 got transaction to invalid handle, 1 [ 49.687892][ T5455] syz.0.318 (5455): drop_caches: 2 [ 49.759252][ T5471] device syzkaller0 entered promiscuous mode [ 49.921160][ T5461] tipc: Enabling of bearer rejected, failed to enable media [ 49.956683][ T5482] device syzkaller0 entered promiscuous mode [ 49.979834][ C0] ------------[ cut here ]------------ [ 49.980937][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 49.982825][ C0] WARNING: CPU: 0 PID: 5457 at net/mac80211/rate.c:385 __rate_control_send_low+0x5a0/0x7a4 [ 49.984537][ C0] Modules linked in: [ 49.985199][ C0] CPU: 0 PID: 5457 Comm: syz.4.322 Not tainted syzkaller #0 [ 49.986369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.988052][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.989493][ C0] pc : __rate_control_send_low+0x5a0/0x7a4 [ 49.990604][ C0] lr : __rate_control_send_low+0x5a0/0x7a4 [ 49.991717][ C0] sp : ffff800008007630 [ 49.992514][ C0] x29: ffff800008007690 x28: dfff800000000000 x27: ffff0000c4ac3370 [ 49.994088][ C0] x26: 000000000000000c x25: 000000000000000c x24: dfff800000000000 [ 49.995623][ C0] x23: 0000000000000040 x22: ffff0000c4ac3378 x21: ffff0000f422b528 [ 49.997178][ C0] x20: ffff0000c4ac0e80 x19: 0000000000000fff x18: 1fffe00033e6997e [ 49.998746][ C0] x17: 6d5f65746172206e x16: ffff800011bb65f8 x15: 62202c6666666666 [ 50.000237][ C0] x14: 0000000000000001 x13: 1fffe00033e699a3 x12: 0000000000000000 [ 50.001729][ C0] x11: ff00800008195f68 x10: 0000000000000000 x9 : 7f3532e6fb88e700 [ 50.003251][ C0] x8 : 7f3532e6fb88e700 x7 : 0000000000000001 x6 : 0000000000000001 [ 50.004765][ C0] x5 : ffff8000080070b8 x4 : ffff8000154a4e80 x3 : ffff800008541118 [ 50.006261][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 50.007778][ C0] Call trace: [ 50.008381][ C0] __rate_control_send_low+0x5a0/0x7a4 [ 50.009323][ C0] rate_control_send_low+0x168/0x688 [ 50.010301][ C0] rate_control_get_rate+0x1a0/0x4c8 [ 50.011240][ C0] ieee80211_beacon_get_finish+0x2f4/0x5d0 [ 50.012319][ C0] ieee80211_beacon_get_ap+0xd58/0x1140 [ 50.013376][ C0] __ieee80211_beacon_get+0xe50/0x12fc [ 50.014404][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 50.015406][ C0] mac80211_hwsim_beacon_tx+0x1e4/0x8fc [ 50.016484][ C0] __iterate_interfaces+0x200/0x47c [ 50.017443][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 50.018786][ C0] mac80211_hwsim_beacon+0xc8/0x1b0 [ 50.019772][ C0] __hrtimer_run_queues+0x444/0xc58 [ 50.020781][ C0] hrtimer_run_softirq+0x164/0x408 [ 50.021750][ C0] handle_softirqs+0x318/0xc90 [ 50.022651][ C0] __do_softirq+0x14/0x20 [ 50.023477][ C0] ____do_softirq+0x14/0x20 [ 50.024321][ C0] call_on_irq_stack+0x30/0x48 [ 50.025210][ C0] do_softirq_own_stack+0x20/0x2c [ 50.026121][ C0] __irq_exit_rcu+0x23c/0x430 [ 50.026977][ C0] irq_exit_rcu+0x14/0x84 [ 50.027772][ C0] el1_interrupt+0x38/0x54 [ 50.028589][ C0] el1h_64_irq_handler+0x18/0x24 [ 50.029522][ C0] el1h_64_irq+0x64/0x68 [ 50.030318][ C0] finish_lock_switch+0xb8/0x1c8 [ 50.031245][ C0] finish_task_switch+0x120/0x658 [ 50.032173][ C0] __schedule+0xdb8/0x1a6c [ 50.033040][ C0] schedule+0xc4/0x170 [ 50.033838][ C0] do_nanosleep+0x168/0x4d8 [ 50.034737][ C0] hrtimer_nanosleep+0x154/0x2b4 [ 50.035640][ C0] common_nsleep+0xa0/0xb8 [ 50.036469][ C0] __arm64_sys_clock_nanosleep+0x344/0x384 [ 50.037503][ C0] invoke_syscall+0x98/0x290 [ 50.038373][ C0] el0_svc_common+0x13c/0x258 [ 50.039249][ C0] do_el0_svc+0x5c/0x134 [ 50.040055][ C0] el0_svc+0x58/0x128 [ 50.040798][ C0] el0t_64_sync_handler+0x84/0xf0 [ 50.041778][ C0] el0t_64_sync+0x18c/0x190 [ 50.042645][ C0] irq event stamp: 6885 [ 50.043428][ C0] hardirqs last enabled at (6884): [] __up_console_sem+0xb4/0xfc [ 50.045158][ C0] hardirqs last disabled at (6885): [] el1_dbg+0x24/0x80 [ 50.046710][ C0] softirqs last enabled at (6806): [] local_bh_enable+0x10/0x34 [ 50.048385][ C0] softirqs last disabled at (6833): [] __do_softirq+0x14/0x20 [ 50.049988][ C0] ---[ end trace 0000000000000000 ]---