last executing test programs: 2.577594182s ago: executing program 0 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x39}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 2.576537762s ago: executing program 0 (id=864): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x4, 0x6, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.130316669s ago: executing program 1 (id=869): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.07258188s ago: executing program 2 (id=871): r0 = socket$kcm(0xa, 0x2, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10040) futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8501, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000002c0)=0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)='D:', 0x2}], 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 2.017275001s ago: executing program 1 (id=873): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0xb67) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x18, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@subj_user={'subj_user', 0x3d, 'fuse\x00'}}, {@flag='async'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, ']'}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@context={'context', 0x3d, 'root'}}]}}) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2000008, 0x11, r7, 0x10952000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private0, @local, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) 1.881592203s ago: executing program 0 (id=876): timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x2000000, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffc}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1}, 0x40000112) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.833509003s ago: executing program 3 (id=877): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.751427264s ago: executing program 3 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.701153395s ago: executing program 3 (id=879): socket$alg(0x26, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000773100300600"}) unshare(0x2a020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.581649287s ago: executing program 3 (id=880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) ptrace(0x10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x70bd25, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x4010) 1.543979317s ago: executing program 3 (id=881): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r0, &(0x7f00000009c0)={&(0x7f0000000880)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x10) recvfrom$unix(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 1.189409333s ago: executing program 2 (id=882): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/73, 0x49}], 0x1) 1.014342365s ago: executing program 0 (id=883): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 964.641026ms ago: executing program 0 (id=884): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket(0x400000000010, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 898.918797ms ago: executing program 0 (id=886): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="173fa8e4", 0x4}], 0x1, 0x4, 0x40000) 798.927588ms ago: executing program 1 (id=888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 743.680509ms ago: executing program 4 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 718.548719ms ago: executing program 1 (id=890): socket$alg(0x26, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000773100300600"}) unshare(0x2a020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 685.39874ms ago: executing program 4 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) ptrace(0x10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x70bd25, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x4010) 662.69946ms ago: executing program 3 (id=892): r0 = socket$kcm(0xa, 0x2, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10040) futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8501, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x1, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 652.66341ms ago: executing program 1 (id=893): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 565.186681ms ago: executing program 4 (id=894): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 531.061902ms ago: executing program 1 (id=895): timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x2000000, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffc}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1}, 0x40000112) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 515.876782ms ago: executing program 4 (id=896): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 432.162003ms ago: executing program 4 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x1, 0x29}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 430.975114ms ago: executing program 4 (id=898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x10, 0x0, 0xb49, 0x9, 0x8, 0x2000, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) listen(0xffffffffffffffff, 0xfffffffc) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x4}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4090) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0x4e22, 0x1, 'lc\x00', 0x25}, {@multicast1, 0x0, 0x4, 0x0, 0x0, 0x400}}, 0x44) openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f0000000300)=@multiplanar_userptr={0xfffffffd, 0x7, 0x4, 0x1000, 0x3, {0x0, 0xea60}, {0x4, 0x2, 0x6, 0x6, 0x9, 0x9, '/Ul2'}, 0x9, 0x2, {&(0x7f0000000280)=[{0xfffffffa, 0x1ff, {&(0x7f00000000c0)}, 0x7}, {0x5, 0x7071, {&(0x7f0000000140)}, 0x10001}]}, 0x80000000, 0x0, r3}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x9}], 0x1c) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) connect$inet(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 229.606206ms ago: executing program 2 (id=899): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="fa", 0x1}], 0x1}}], 0x1, 0xc081) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000738000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 168.187767ms ago: executing program 2 (id=900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 82.413989ms ago: executing program 2 (id=901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 0s ago: executing program 2 (id=902): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r0, &(0x7f00000009c0)={&(0x7f0000000880)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x10) recvfrom$unix(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 16.154840][ T3967] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 16.201390][ T1878] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 16.209363][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. syzkaller login: [ 34.954529][ T4285] cgroup: Unknown subsys name 'net' [ 35.155275][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.461892][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.516240][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.519235][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.521867][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.524677][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.527168][ T4296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.529453][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.537658][ T4296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.550165][ T4301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.552563][ T4301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.555484][ T4301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.557924][ T4301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.560167][ T4301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.592037][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.595454][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.597792][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.601307][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.603715][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.605822][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.621986][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.625960][ T4296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.628400][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.630760][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.633881][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.636355][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.638547][ T4296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.640917][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.646513][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.655758][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.658215][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.660468][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.814895][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 36.865175][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 36.946876][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.948949][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.952927][ T4299] device bridge_slave_0 entered promiscuous mode [ 36.969847][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 36.973413][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.975382][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.977932][ T4299] device bridge_slave_1 entered promiscuous mode [ 36.997062][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 37.002932][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.004948][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.007405][ T4295] device bridge_slave_0 entered promiscuous mode [ 37.012797][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.014866][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.017446][ T4295] device bridge_slave_1 entered promiscuous mode [ 37.031918][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 37.037432][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.043764][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.086403][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.097825][ T4299] team0: Port device team_slave_0 added [ 37.107494][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.119166][ T4299] team0: Port device team_slave_1 added [ 37.151807][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.153855][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.156379][ T4303] device bridge_slave_0 entered promiscuous mode [ 37.160654][ T4295] team0: Port device team_slave_0 added [ 37.167125][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.169042][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.176550][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.192200][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.194273][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.196882][ T4303] device bridge_slave_1 entered promiscuous mode [ 37.206265][ T4295] team0: Port device team_slave_1 added [ 37.218334][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.220468][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.227663][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.251145][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.253101][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.255610][ T4308] device bridge_slave_0 entered promiscuous mode [ 37.258851][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.261082][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.263694][ T4308] device bridge_slave_1 entered promiscuous mode [ 37.266589][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.268628][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.271442][ T4305] device bridge_slave_0 entered promiscuous mode [ 37.278377][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.280525][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.287409][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.292112][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.294074][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.301533][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.310273][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.312399][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.314975][ T4305] device bridge_slave_1 entered promiscuous mode [ 37.319093][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.353369][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.401496][ T4299] device hsr_slave_0 entered promiscuous mode [ 37.449995][ T4299] device hsr_slave_1 entered promiscuous mode [ 37.491433][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.495974][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.504845][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.527242][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.571290][ T4295] device hsr_slave_0 entered promiscuous mode [ 37.610698][ T4295] device hsr_slave_1 entered promiscuous mode [ 37.649853][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.652118][ T4295] Cannot create hsr debugfs directory [ 37.664558][ T4308] team0: Port device team_slave_0 added [ 37.681008][ T4303] team0: Port device team_slave_0 added [ 37.683929][ T4308] team0: Port device team_slave_1 added [ 37.698701][ T4303] team0: Port device team_slave_1 added [ 37.713395][ T4305] team0: Port device team_slave_0 added [ 37.735301][ T4305] team0: Port device team_slave_1 added [ 37.737451][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.739465][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.746816][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.753183][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.755255][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.762353][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.777607][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.779669][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.786850][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.796646][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.798552][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.806112][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.833920][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.835946][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.843328][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.869239][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.871587][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.878671][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.971365][ T4308] device hsr_slave_0 entered promiscuous mode [ 38.019978][ T4308] device hsr_slave_1 entered promiscuous mode [ 38.059652][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.061829][ T4308] Cannot create hsr debugfs directory [ 38.101221][ T4303] device hsr_slave_0 entered promiscuous mode [ 38.150007][ T4303] device hsr_slave_1 entered promiscuous mode [ 38.209705][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.211853][ T4303] Cannot create hsr debugfs directory [ 38.311406][ T4305] device hsr_slave_0 entered promiscuous mode [ 38.349959][ T4305] device hsr_slave_1 entered promiscuous mode [ 38.389804][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.391909][ T4305] Cannot create hsr debugfs directory [ 38.456035][ T4299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.482349][ T4299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.537417][ T4299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.580327][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 38.581222][ T4299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.582197][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 38.643248][ T4295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.649736][ T4310] Bluetooth: hci3: command 0x0409 tx timeout [ 38.693670][ T4295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.730260][ T4310] Bluetooth: hci4: command 0x0409 tx timeout [ 38.730280][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 38.741527][ T4295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.794109][ T4295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.934348][ T4308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.961709][ T4308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.019152][ T4308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.072055][ T4308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.117560][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.125612][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.132015][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.135585][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.138200][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.143782][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.146542][ T1878] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.148655][ T1878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.171897][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.174434][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.177022][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.180779][ T1878] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.182734][ T1878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.184959][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.187781][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.196689][ T4305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.231471][ T4305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.292043][ T4305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.344469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.347885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.350796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.354827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.357904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.362816][ T4303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.414853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.417799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.421361][ T4305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.466102][ T4303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.512288][ T4303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.555681][ T4303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.603706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.606774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.612763][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.620069][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.647774][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.651087][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.677326][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.696448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.699219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.702733][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.704644][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.716825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.724811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.728008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.731079][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.733323][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.750772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.777577][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.785215][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.798852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.806818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.809046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.812783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.820856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.823426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.825882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.838156][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.841118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.844498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.847359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.850876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.853403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.855984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.860979][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.866367][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.873971][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.878991][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.882029][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.884545][ T1878] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.886433][ T1878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.896224][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.902399][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.905015][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.907685][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.914288][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.916302][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.932153][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.934834][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.937367][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.951682][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.961213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.964119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.966828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.972933][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.975641][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.978127][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.980168][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.991794][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.997843][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.001169][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.004736][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.007800][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.011969][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.026489][ T4308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.029380][ T4308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.045399][ T4299] device veth0_vlan entered promiscuous mode [ 40.054762][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.057329][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.061897][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.064551][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.067917][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.076851][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.080298][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.082951][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.085533][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.088294][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.091885][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.094369][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.096382][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.098692][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.101743][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.104237][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.106243][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.109239][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.113056][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.126201][ T4299] device veth1_vlan entered promiscuous mode [ 40.128921][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.132167][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.134621][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.137131][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.145409][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.147960][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.151412][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.154220][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.156131][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.172653][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.177394][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.185076][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.190558][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.208017][ T4299] device veth0_macvtap entered promiscuous mode [ 40.224277][ T4303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.227176][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.237850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.241510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.243629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.245689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.248309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.252235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.255041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.257635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.261643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.264465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.267154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.270802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.274457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.280395][ T4299] device veth1_macvtap entered promiscuous mode [ 40.288039][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.296868][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.306365][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.314901][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.317758][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.321312][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.325268][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.340439][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.342869][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.345402][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.347472][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.356309][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.359155][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.379077][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.383124][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.385740][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.388338][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.392632][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.395196][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.397870][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.402486][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.412250][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.418186][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.422017][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.435410][ T4299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.437994][ T4299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.450174][ T4299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.452562][ T4299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.498444][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.503079][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.505839][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.508517][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.514430][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.517211][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.519401][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.523041][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.525488][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.530778][ T4295] device veth0_vlan entered promiscuous mode [ 40.566870][ T4295] device veth1_vlan entered promiscuous mode [ 40.593249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.595919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.598472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.601874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.604673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.607152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.621924][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.623073][ T4308] device veth0_vlan entered promiscuous mode [ 40.624212][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.628826][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.637872][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.641341][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.650074][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 40.651793][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 40.660982][ T4308] device veth1_vlan entered promiscuous mode [ 40.673180][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.675395][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.679398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.683496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.685949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.688535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.694970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.697535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.701109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.713932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.716141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.721570][ T4303] device veth0_vlan entered promiscuous mode [ 40.730338][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 40.733636][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.736830][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.745711][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.761015][ T4295] device veth0_macvtap entered promiscuous mode [ 40.768022][ T4303] device veth1_vlan entered promiscuous mode [ 40.778192][ T4295] device veth1_macvtap entered promiscuous mode [ 40.799280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.810131][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 40.810148][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 40.822052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.824730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.827568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.835687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.838476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.842324][ T4308] device veth0_macvtap entered promiscuous mode [ 40.851532][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.854646][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.859017][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.861951][ T4308] device veth1_macvtap entered promiscuous mode [ 40.866195][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.868858][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.873389][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.876146][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.906247][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.909162][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.920578][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.923295][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.931570][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.935713][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.938464][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.952763][ T4303] device veth0_macvtap entered promiscuous mode [ 40.962089][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.965047][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.967649][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.972002][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.975905][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.988147][ T4303] device veth1_macvtap entered promiscuous mode [ 40.998816][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.023475][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.026146][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.028978][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.047608][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.052077][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.056585][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.059135][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.065931][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.068820][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.072312][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.074970][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.090787][ T4379] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6'. [ 41.094757][ T4295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.097132][ T4295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.100744][ T4295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.103106][ T4295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.108637][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.112879][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.115660][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.118485][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.123316][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.130451][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.133288][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.160355][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.163261][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.166027][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.168816][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.178793][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.186113][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.195065][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.210221][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.213117][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.222256][ T4308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.224732][ T4308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.227134][ T4308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.232455][ T4308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.247048][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.250161][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252877][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.255330][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.293259][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.296120][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.327092][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.330779][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.345097][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.347749][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.351972][ T4305] device veth0_vlan entered promiscuous mode [ 41.377977][ T1588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.387178][ T1588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.394944][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.404539][ T4305] device veth1_vlan entered promiscuous mode [ 41.438349][ T1588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.440749][ T1588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.445259][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.447701][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.448028][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.453382][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.458389][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.462021][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.483984][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.486226][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.490774][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.498623][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.501330][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.504260][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.528613][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.534134][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.543447][ T4305] device veth0_macvtap entered promiscuous mode [ 41.555879][ T4305] device veth1_macvtap entered promiscuous mode [ 41.560857][ T1588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.563117][ T1588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.567506][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.571638][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.574159][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.614297][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.617282][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.645459][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.648520][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.651549][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.654326][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.657838][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.673963][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.687641][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.695869][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.699150][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.703280][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.706114][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.708688][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.712977][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.715797][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.718617][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.723465][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.098898][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.102063][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.104811][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.110506][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.136034][ T4305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.138415][ T4305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.141501][ T4305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.143903][ T4305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.148917][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.159441][ T4392] device netdevsim0 entered promiscuous mode [ 42.298451][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.306412][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.329416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.376941][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.379120][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.394454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.491322][ C1] vcan0: j1939_tp_rxtimer: 0x00000000fb607b3a: rx timeout, send abort [ 42.494542][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000fb607b3a: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.533125][ T4404] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 42.662389][ T4404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 42.667940][ T4406] batman_adv: batadv0: Adding interface: dummy0 [ 42.670204][ T4406] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.687637][ T4406] batman_adv: batadv0: Interface activated: dummy0 [ 42.730202][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 42.731975][ T4310] Bluetooth: hci0: command 0x040f tx timeout [ 42.744650][ T4410] batadv0: mtu less than device minimum [ 42.748951][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.754817][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.760557][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.766219][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.771890][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.777529][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.783146][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.788672][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.794346][ T4410] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.814274][ T27] audit: type=1326 audit(42.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.821022][ T27] audit: type=1326 audit(42.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.827224][ T4301] Bluetooth: hci3: command 0x040f tx timeout [ 42.855523][ T27] audit: type=1326 audit(42.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.862231][ T27] audit: type=1326 audit(42.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.869082][ T27] audit: type=1326 audit(42.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.880363][ T27] audit: type=1326 audit(42.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.886347][ T27] audit: type=1326 audit(42.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.892839][ T4310] Bluetooth: hci2: command 0x040f tx timeout [ 42.894554][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 42.906844][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.910664][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.920182][ T27] audit: type=1326 audit(42.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.928737][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 42.937548][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 42.957512][ T27] audit: type=1326 audit(42.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 42.964812][ T27] audit: type=1326 audit(42.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 43.042099][ T4423] 8021q: VLANs not supported on ip6gre0 [ 43.121734][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 43.157769][ T4426] device netdevsim0 entered promiscuous mode [ 43.234674][ T4434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.237497][ T4434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.277789][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.283785][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.466706][ T4443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.490363][ T4443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.549322][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.574484][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.577431][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.585984][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.808366][ T4454] netlink: 9 bytes leftover after parsing attributes in process `syz.4.31'. [ 43.812772][ T4454] device gretap0 entered promiscuous mode [ 43.839307][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 43.848713][ T4456] team0: Port device gretap1 added [ 43.857776][ T4456] team0: Device vlan2 is already an upper device of the team interface [ 43.917563][ T4458] binder: 4457:4458 tried to acquire reference to desc 0, got 1 instead [ 43.927655][ T4458] binder: 4457:4458 got transaction with out-of-order buffer fixup [ 43.935544][ T4458] binder: 4458:4457 failed to fixup parent [ 43.939835][ T4458] binder: 4457:4458 transaction async to 4457:0 failed 5/29201/-22, size 120-24 line 3549 [ 43.947304][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.163794][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 44.180097][ T4468] device netdevsim0 entered promiscuous mode [ 44.215089][ T4472] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 44.243509][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.246114][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.375940][ T4470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.422708][ T4470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.436252][ T4480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.441436][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.594881][ T4483] netlink: 9 bytes leftover after parsing attributes in process `syz.0.44'. [ 44.605518][ T4483] device gretap0 entered promiscuous mode [ 44.746167][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 44.750306][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 44.820213][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 44.821978][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 44.852371][ T4494] binder: 4493:4494 tried to acquire reference to desc 0, got 1 instead [ 44.856208][ T4494] binder: 4493:4494 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.859926][ T4494] binder: 4494 RLIMIT_NICE not set [ 44.861475][ T4494] binder: 4494 RLIMIT_NICE not set [ 44.863628][ T1962] binder: release 4493:4494 transaction 10 out, still active [ 44.865842][ T1962] binder: undelivered TRANSACTION_COMPLETE [ 44.881337][ T1962] binder: release 4493:4494 transaction 10 in, still active [ 44.883513][ T1962] binder: send failed reply for transaction 10, target dead [ 44.900202][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 44.980237][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 44.981980][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 46.613733][ T4517] __nla_validate_parse: 1 callbacks suppressed [ 46.613747][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 46.900318][ T4301] Bluetooth: hci1: command 0x2016 tx timeout [ 47.051989][ T4533] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.056614][ T4533] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 47.060226][ T4310] Bluetooth: hci2: command 0x2016 tx timeout [ 47.897879][ T4543] input: syz1 as /devices/virtual/input/input2 [ 47.996260][ T4545] netlink: 9 bytes leftover after parsing attributes in process `syz.2.66'. [ 48.016528][ T4545] device gretap0 entered promiscuous mode [ 48.093871][ T4549] binder: 4548:4549 tried to acquire reference to desc 0, got 1 instead [ 48.096955][ T4549] binder: 4548:4549 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.124225][ T4549] binder: 4549 RLIMIT_NICE not set [ 48.130389][ T4549] binder: 4549 RLIMIT_NICE not set [ 48.138732][ T4313] binder: release 4548:4549 transaction 15 out, still active [ 48.142182][ T4313] binder: undelivered TRANSACTION_COMPLETE [ 48.172696][ T4313] binder: release 4548:4549 transaction 15 in, still active [ 48.184059][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 48.269287][ T27] kauditd_printk_skb: 3577 callbacks suppressed [ 48.269300][ T27] audit: type=1326 audit(48.240:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.285210][ T27] audit: type=1326 audit(48.240:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.327908][ T27] audit: type=1326 audit(48.250:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.385067][ T27] audit: type=1326 audit(48.250:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.409654][ T27] audit: type=1326 audit(48.250:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.428617][ T27] audit: type=1326 audit(48.250:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.439586][ T27] audit: type=1326 audit(48.250:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.445507][ T27] audit: type=1326 audit(48.250:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.475098][ T27] audit: type=1326 audit(48.250:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.492634][ T27] audit: type=1326 audit(48.270:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8b92881c code=0x7ffc0000 [ 48.575190][ T4566] Zero length message leads to an empty skb [ 48.966115][ T4575] mmap: syz.4.75 (4575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.122457][ T4582] netlink: 9 bytes leftover after parsing attributes in process `syz.1.79'. [ 49.139931][ T4582] device gretap0 entered promiscuous mode [ 49.385039][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 49.387502][ T4589] binder: tried to use weak ref as strong ref [ 49.394113][ T4589] binder: 4588:4589 Acquire 1 refcount change on invalid ref 0 ret -22 [ 49.410214][ T4589] binder: 4588:4589 got transaction to invalid handle, 1 [ 49.412204][ T4589] binder_debug: 1 callbacks suppressed [ 49.412212][ T4589] binder: 4589:4588 cannot find target node [ 49.415389][ T4589] binder: 4588:4589 transaction call to 0:0 failed 18/29201/-22, size 88-24 line 3054 [ 49.514128][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.690775][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 49.693230][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 49.909319][ T4609] netlink: 9 bytes leftover after parsing attributes in process `syz.1.90'. [ 50.055296][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 50.115936][ T4620] binder: tried to use weak ref as strong ref [ 50.117843][ T4620] binder: 4619:4620 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.120655][ T4620] binder: 4619:4620 got transaction to invalid handle, 1 [ 50.122547][ T4620] binder: 4620:4619 cannot find target node [ 50.124146][ T4620] binder: 4619:4620 transaction call to 0:0 failed 21/29201/-22, size 88-24 line 3054 [ 50.127205][ T4313] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.184056][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.186621][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.713752][ T4638] netlink: 9 bytes leftover after parsing attributes in process `syz.1.102'. [ 50.922140][ T4640] siw: device registration error -23 [ 51.625228][ T4660] capability: warning: `syz.4.108' uses 32-bit capabilities (legacy support in use) [ 51.656505][ T4660] ucma_write: process 66 (syz.4.108) changed security contexts after opening file descriptor, this is not allowed. [ 52.223846][ T4685] __nla_validate_parse: 1 callbacks suppressed [ 52.223859][ T4685] netlink: 9 bytes leftover after parsing attributes in process `syz.3.113'. [ 52.229878][ T4685] device gretap0 entered promiscuous mode [ 52.250262][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 52.253060][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 52.521410][ T4693] device bridge0 entered promiscuous mode [ 52.741863][ T4716] siw: device registration error -23 [ 52.988728][ T4728] netlink: 9 bytes leftover after parsing attributes in process `syz.4.127'. [ 53.191490][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.204897][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.270527][ T27] kauditd_printk_skb: 1847 callbacks suppressed [ 53.270539][ T27] audit: type=1326 audit(53.250:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8f35228c code=0x7ffc0000 [ 53.278288][ T27] audit: type=1326 audit(53.250:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff900c981c code=0x7ffc0000 [ 53.305818][ T27] audit: type=1326 audit(53.250:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=449 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 53.322184][ T27] audit: type=1326 audit(53.260:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8f35228c code=0x7ffc0000 [ 53.329331][ T27] audit: type=1326 audit(53.260:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff900c981c code=0x7ffc0000 [ 53.351792][ T27] audit: type=1326 audit(53.260:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=449 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 53.357713][ T27] audit: type=1326 audit(53.270:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8f35228c code=0x7ffc0000 [ 53.374984][ T27] audit: type=1326 audit(53.270:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff900c981c code=0x7ffc0000 [ 53.387826][ T27] audit: type=1326 audit(53.270:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=449 compat=0 ip=0xffff8f35a7a8 code=0x7ffc0000 [ 53.399489][ T27] audit: type=1326 audit(53.280:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8f35228c code=0x7ffc0000 [ 53.784640][ T4778] binder: 4777:4778 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.791153][ T4772] net_ratelimit: 10 callbacks suppressed [ 53.791167][ T4772] Set syz1 is full, maxelem 1038 reached [ 53.791441][ T4778] binder: 4778 RLIMIT_NICE not set [ 53.820192][ T4778] binder: 4777:4778 ioctl c0306201 20000240 returned -11 [ 54.203434][ T4344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.206369][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 54.230067][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 54.359680][ T4344] usb 1-1: device descriptor read/64, error -32 [ 54.659791][ T4344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 54.744841][ T4822] binder: 4821:4822 tried to acquire reference to desc 0, got 1 instead [ 54.763049][ T4822] binder: 4821:4822 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.766743][ T4822] binder: 4822 RLIMIT_NICE not set [ 54.768148][ T4822] binder: 4822 RLIMIT_NICE not set [ 54.773313][ T4824] netlink: 9 bytes leftover after parsing attributes in process `syz.3.154'. [ 54.781607][ T24] binder: release 4821:4822 transaction 29 out, still active [ 54.783715][ T24] binder: undelivered TRANSACTION_COMPLETE [ 54.820686][ T24] binder: release 4821:4822 transaction 29 in, still active [ 54.822861][ T24] binder: send failed reply for transaction 29, target dead [ 54.857425][ T4344] usb 1-1: config 0 has no interfaces? [ 54.887871][ T4344] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 54.893760][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.895963][ T4344] usb 1-1: Product: syz [ 54.897136][ T4344] usb 1-1: Manufacturer: syz [ 54.898541][ T4344] usb 1-1: SerialNumber: syz [ 54.921525][ T4344] usb 1-1: config 0 descriptor?? [ 55.086485][ T4835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.149'. [ 55.224485][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 56.690574][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 56.797672][ T4869] binder: 4868:4869 tried to acquire reference to desc 0, got 1 instead [ 56.806377][ T4869] binder: 4868:4869 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.820327][ T4869] binder: 4869 RLIMIT_NICE not set [ 56.825185][ T4869] binder: 4869 RLIMIT_NICE not set [ 56.828926][ T4869] binder: send failed reply for transaction 34 to 4868:4869 [ 56.837321][ T4869] binder: 4868:4869 ioctl c0306201 20000240 returned -14 [ 56.844246][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 56.845925][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.962584][ T4873] binder: tried to use weak ref as strong ref [ 56.964360][ T4873] binder: 4872:4873 Acquire 1 refcount change on invalid ref 0 ret -22 [ 56.966671][ T4873] binder: 4873:4872 cannot find target node [ 56.968242][ T4873] binder: 4872:4873 transaction call to 0:0 failed 37/29201/-22, size 88-24 line 3054 [ 56.985726][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.129853][ T4301] Bluetooth: hci4: command 0x0405 tx timeout [ 57.548136][ T24] usb 1-1: USB disconnect, device number 3 [ 57.651327][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.655423][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.736286][ T4879] netlink: 9 bytes leftover after parsing attributes in process `syz.1.166'. [ 57.744920][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 57.748924][ T4886] device netdevsim0 entered promiscuous mode [ 57.826825][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 57.908968][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.916963][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.955204][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.957724][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.211327][ T4907] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 58.231853][ T4907] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 58.242943][ T4907] device veth3 entered promiscuous mode [ 58.246463][ T4907] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 58.279617][ T4344] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 58.328334][ T4912] netlink: 9 bytes leftover after parsing attributes in process `syz.3.181'. [ 58.470064][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 58.475723][ T4344] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 58.477996][ T4344] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 58.492512][ T4344] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 58.498884][ T4344] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 58.507954][ T4344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.524952][ T4344] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 58.533115][ T4344] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 58.540311][ T4344] usb 1-1: Product: syz [ 58.543761][ T4344] usb 1-1: Manufacturer: syz [ 58.547399][ T4344] usb 1-1: SerialNumber: syz [ 58.558920][ T4344] usb 1-1: config 0 descriptor?? [ 58.573793][ T4344] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 58.592423][ T4344] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 58.728433][ T27] kauditd_printk_skb: 89 callbacks suppressed [ 58.728446][ T27] audit: type=1326 audit(58.700:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.1.190" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75a7a8 code=0x0 [ 58.744034][ T4934] netlink: 9 bytes leftover after parsing attributes in process `syz.2.192'. [ 59.005786][ T4950] binder_alloc: 4949: binder_alloc_buf, no vma [ 59.008576][ T4950] binder: 4949:4950 ioctl c0306201 20000240 returned -11 [ 59.316701][ T4960] netlink: 9 bytes leftover after parsing attributes in process `syz.4.204'. [ 59.357283][ T7] usb 1-1: USB disconnect, device number 4 [ 59.368273][ T7] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 59.546930][ T4972] binder_alloc: 4971: binder_alloc_buf, no vma [ 59.555855][ T4972] binder: 4971:4972 ioctl c0306201 20000240 returned -11 [ 59.739722][ T4980] sock: sock_timestamping_bind_phc: sock not bind to device [ 59.752804][ T4970] bond0: (slave wlan1): Releasing backup interface [ 59.777074][ T4984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.781406][ T4984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.791104][ T4982] netlink: 9 bytes leftover after parsing attributes in process `syz.2.215'. [ 59.952551][ T4995] input: syz1 as /devices/virtual/input/input5 [ 60.159866][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.163495][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.310575][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.004108][ T7] usb 1-1: config 0 has no interfaces? [ 61.010574][ T7] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 61.013088][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.015224][ T7] usb 1-1: Product: syz [ 61.016311][ T7] usb 1-1: Manufacturer: syz [ 61.020360][ T7] usb 1-1: SerialNumber: syz [ 61.023113][ T7] usb 1-1: config 0 descriptor?? [ 61.355717][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.364045][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.380715][ T5024] capability: warning: `syz.2.232' uses deprecated v2 capabilities in a way that may be insecure [ 61.785387][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 61.984698][ T27] audit: type=1326 audit(61.960:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 61.993074][ T27] audit: type=1326 audit(61.960:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.004059][ T5034] input: syz1 as /devices/virtual/input/input6 [ 62.024371][ T27] audit: type=1326 audit(61.960:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.044382][ T27] audit: type=1326 audit(61.960:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.067928][ T27] audit: type=1326 audit(61.960:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.100545][ T27] audit: type=1326 audit(61.960:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.106752][ T27] audit: type=1326 audit(61.960:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.123733][ T27] audit: type=1326 audit(61.960:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.141317][ T27] audit: type=1326 audit(61.960:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 62.176098][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 62.190698][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.201036][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.786166][ T5049] netlink: 148 bytes leftover after parsing attributes in process `syz.2.241'. [ 62.794517][ T5049] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 62.912722][ T5055] netlink: 64 bytes leftover after parsing attributes in process `syz.4.243'. [ 62.920500][ T5053] device veth3 entered promiscuous mode [ 62.933361][ T5055] tipc: Started in network mode [ 62.938032][ T5055] tipc: Node identity ac14140f, cluster identity 4711 [ 62.947117][ T5055] tipc: New replicast peer: 255.255.255.255 [ 62.957434][ T5055] tipc: Enabled bearer , priority 10 [ 63.012084][ T5057] binder: BINDER_SET_CONTEXT_MGR already set [ 63.015663][ T5057] binder: 5056:5057 ioctl 4018620d 20000040 returned -16 [ 63.019272][ T5057] binder_user_error: 22 callbacks suppressed [ 63.019282][ T5057] binder: 5056:5057 got transaction to invalid handle, 1 [ 63.024641][ T5057] binder_debug: 15 callbacks suppressed [ 63.024652][ T5057] binder: 5057:5056 cannot find target node [ 63.029005][ T5057] binder: 5056:5057 transaction async to 0:0 failed 59/29201/-22, size 120-24 line 3054 [ 63.033511][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.390829][ T4343] usb 1-1: USB disconnect, device number 5 [ 63.527075][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.529660][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.607082][ T5072] binder: BINDER_SET_CONTEXT_MGR already set [ 63.608998][ T5072] binder: 5071:5072 ioctl 4018620d 20000040 returned -16 [ 63.729633][ T27] kauditd_printk_skb: 1787 callbacks suppressed [ 63.729645][ T27] audit: type=1326 audit(63.700:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.749445][ T27] audit: type=1326 audit(63.720:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.767583][ T27] audit: type=1326 audit(63.720:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.780956][ T27] audit: type=1326 audit(63.720:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.792660][ T27] audit: type=1326 audit(63.720:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.800964][ T27] audit: type=1326 audit(63.720:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.813858][ T27] audit: type=1326 audit(63.720:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.820659][ T27] audit: type=1326 audit(63.730:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.826913][ T27] audit: type=1326 audit(63.730:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 63.833197][ T27] audit: type=1326 audit(63.730:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaf6ac81c code=0x7ffc0000 [ 64.091079][ T1962] tipc: Node number set to 2886997007 [ 64.110915][ T5083] input: syz1 as /devices/virtual/input/input7 [ 64.174872][ T5063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.211989][ T5063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.232253][ T5085] binder: BINDER_SET_CONTEXT_MGR already set [ 64.234140][ T5085] binder: 5084:5085 ioctl 4018620d 20000040 returned -16 [ 64.236732][ T5085] binder: 5084:5085 got transaction to invalid handle, 1 [ 64.238942][ T5085] binder: 5085:5084 cannot find target node [ 64.242762][ T5085] binder: 5084:5085 transaction async to 0:0 failed 64/29201/-22, size 120-24 line 3054 [ 64.246302][ T4345] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.491468][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493631][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.653415][ T5063] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.656166][ T5063] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.658642][ T5063] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.661251][ T5063] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.742896][ T5081] device bridge0 entered promiscuous mode [ 64.839442][ T5095] fuse: Unknown parameter 'silent' [ 64.872547][ T5099] binder: 5098:5099 got transaction to invalid handle, 1 [ 64.885159][ T5099] binder: 5099:5098 cannot find target node [ 64.886895][ T5099] binder: 5098:5099 transaction call to 0:0 failed 68/29201/-22, size 88-24 line 3054 [ 64.895632][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.928048][ T5104] binder: BINDER_SET_CONTEXT_MGR already set [ 64.938960][ T5104] binder: 5103:5104 ioctl 4018620d 20000040 returned -16 [ 64.942136][ T5104] binder: 5103:5104 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.949358][ T5104] binder: 5104 RLIMIT_NICE not set [ 64.950902][ T5104] binder: 5103:5104 ioctl c0306201 20000240 returned -11 [ 64.994489][ T5107] input: syz1 as /devices/virtual/input/input8 [ 65.025126][ T5110] binder: BINDER_SET_CONTEXT_MGR already set [ 65.026946][ T5110] binder: 5109:5110 ioctl 4018620d 20000040 returned -16 [ 65.030260][ T5110] binder: 5109:5110 got transaction to invalid handle, 1 [ 65.032339][ T5110] binder: 5110:5109 cannot find target node [ 65.060142][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.267949][ T5121] syz.3.274 uses obsolete (PF_INET,SOCK_PACKET) [ 65.366790][ T5127] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 65.374965][ T5129] binder: 5128:5129 got transaction to invalid handle, 1 [ 65.395734][ T5127] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 65.464784][ T5127] device veth5 entered promiscuous mode [ 65.467716][ T5134] binder: BINDER_SET_CONTEXT_MGR already set [ 65.469895][ T5134] binder: 5133:5134 ioctl 4018620d 20000040 returned -16 [ 65.472530][ T5134] binder: 5133:5134 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.476166][ T5134] binder: 5134 RLIMIT_NICE not set [ 65.477709][ T5134] binder: 5133:5134 ioctl c0306201 20000240 returned -11 [ 65.531115][ T5136] binder: 5135:5136 got transaction to invalid handle, 1 [ 65.581756][ T5140] input: syz1 as /devices/virtual/input/input9 [ 65.813793][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.895046][ T5155] binder: BINDER_SET_CONTEXT_MGR already set [ 65.896799][ T5155] binder: 5153:5155 ioctl 4018620d 20000040 returned -16 [ 65.906936][ T5155] binder: 5153:5155 ioctl c0306201 20000240 returned -11 [ 65.928788][ T5157] device team_slave_0 entered promiscuous mode [ 65.930953][ T5157] device team_slave_1 entered promiscuous mode [ 65.942156][ T5157] device macsec2 entered promiscuous mode [ 65.945008][ T5157] device team0 entered promiscuous mode [ 65.962438][ T5157] device team0 left promiscuous mode [ 65.967731][ T5157] device team_slave_0 left promiscuous mode [ 65.969421][ T5157] device team_slave_1 left promiscuous mode [ 66.087544][ T5166] input: syz1 as /devices/virtual/input/input10 [ 66.178251][ T5171] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 66.207195][ T5171] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 66.218130][ T5171] device veth3 entered promiscuous mode [ 66.456701][ T5181] binder: BINDER_SET_CONTEXT_MGR already set [ 66.468907][ T5181] binder: 5180:5181 ioctl 4018620d 20000040 returned -16 [ 66.474315][ T5183] binder: 5182:5183 ioctl c0306201 20000240 returned -11 [ 66.738050][ T5196] input: syz1 as /devices/virtual/input/input11 [ 67.015129][ T5212] binder: 5211:5212 ioctl c0306201 20000240 returned -11 [ 67.139133][ T5216] binder: BINDER_SET_CONTEXT_MGR already set [ 67.145288][ T5216] binder: 5214:5216 ioctl 4018620d 20000040 returned -16 [ 67.242662][ T5221] binder: BINDER_SET_CONTEXT_MGR already set [ 67.246735][ T5221] binder: 5220:5221 ioctl 4018620d 20000040 returned -16 [ 67.354770][ T5228] input: syz1 as /devices/virtual/input/input12 [ 67.571956][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.578979][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.584706][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.594896][ T5222] device bridge_slave_0 left promiscuous mode [ 67.596816][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.794754][ T5242] binder: 5241:5242 ioctl c0306201 20000240 returned -11 [ 68.056954][ T5222] device bridge_slave_1 left promiscuous mode [ 68.058809][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.121922][ T5222] bond0: (slave bond_slave_0): Releasing backup interface [ 68.166737][ T5222] bond0: (slave bond_slave_1): Releasing backup interface [ 68.231744][ T5222] team0: Port device team_slave_0 removed [ 68.252175][ T5222] team0: Port device team_slave_1 removed [ 68.254372][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.256491][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.270678][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.272705][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.290847][ T5222] bond2: (slave ip6gretap1): Releasing backup interface [ 68.495649][ T5249] binder: BINDER_SET_CONTEXT_MGR already set [ 68.497524][ T5249] binder: 5248:5249 ioctl 4018620d 20000040 returned -16 [ 68.602576][ T5251] binder: BINDER_SET_CONTEXT_MGR already set [ 68.605660][ T5251] binder: 5250:5251 ioctl 4018620d 20000040 returned -16 [ 68.624526][ T5251] binder_user_error: 15 callbacks suppressed [ 68.624538][ T5251] binder: 5250:5251 got transaction to invalid handle, 1 [ 68.634956][ T5251] binder_debug: 29 callbacks suppressed [ 68.634968][ T5251] binder: 5251:5250 cannot find target node [ 68.645333][ T5251] binder: 5250:5251 transaction async to 0:0 failed 116/29201/-22, size 120-24 line 3054 [ 68.654448][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.748348][ T5257] input: syz1 as /devices/virtual/input/input13 [ 68.768016][ T5255] device bridge0 entered promiscuous mode [ 68.891112][ T5265] binder: BINDER_SET_CONTEXT_MGR already set [ 68.892882][ T5265] binder: 5264:5265 ioctl 4018620d 20000040 returned -16 [ 68.919415][ T5265] binder: 5264:5265 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.925268][ T5263] device bond_slave_0 entered promiscuous mode [ 68.927167][ T5263] device bond_slave_1 entered promiscuous mode [ 68.929239][ T5265] binder: 5265 RLIMIT_NICE not set [ 68.931258][ T5265] binder: 5264:5265 ioctl c0306201 20000240 returned -11 [ 68.933702][ T5263] device macsec2 entered promiscuous mode [ 68.935305][ T5263] device bond0 entered promiscuous mode [ 68.951221][ T5263] device bond0 left promiscuous mode [ 68.953184][ T5263] device bond_slave_0 left promiscuous mode [ 68.954939][ T5263] device bond_slave_1 left promiscuous mode [ 69.013910][ T5273] binder: 5272:5273 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 69.019083][ T5273] binder: 5272:5273 got transaction to invalid handle, 1 [ 69.021482][ T5273] binder: 5273:5272 cannot find target node [ 69.023122][ T5273] binder: 5272:5273 transaction call to 0:0 failed 120/29201/-22, size 88-24 line 3054 [ 69.026215][ T4345] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.053007][ T5274] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 69.055414][ T5274] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 69.072083][ T5274] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 69.106987][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 69.117563][ T5276] device netdevsim0 entered promiscuous mode [ 69.156190][ T5280] binder: BINDER_SET_CONTEXT_MGR already set [ 69.158146][ T5280] binder: 5279:5280 ioctl 4018620d 20000040 returned -16 [ 69.161684][ T5280] binder: 5279:5280 got transaction to invalid handle, 1 [ 69.163714][ T5280] binder: 5280:5279 cannot find target node [ 69.174240][ T5280] binder: 5279:5280 transaction async to 0:0 failed 122/29201/-22, size 120-24 line 3054 [ 69.190190][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.307375][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.318153][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.334869][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.337435][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.466656][ T5293] input: syz1 as /devices/virtual/input/input14 [ 69.616179][ T14] cfg80211: failed to load regulatory.db [ 69.800746][ T5299] binder: 5298:5299 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 69.810361][ T5299] binder: 5298:5299 got transaction to invalid handle, 1 [ 69.814905][ T5299] binder: 5299:5298 cannot find target node [ 70.008439][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.011686][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.026744][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 70.057416][ T5310] binder: 5309:5310 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 70.072190][ T5310] binder: 5309:5310 got transaction to invalid handle, 1 [ 70.243524][ T5314] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 70.288821][ T5317] input: syz1 as /devices/virtual/input/input15 [ 70.324649][ T5314] device veth7 entered promiscuous mode [ 71.192569][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 71.659975][ T5354] input: syz1 as /devices/virtual/input/input16 [ 71.757926][ T5355] device bridge_slave_0 left promiscuous mode [ 71.761409][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.132856][ T5355] device bridge_slave_1 left promiscuous mode [ 72.136090][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.183090][ T5355] bond0: (slave bond_slave_0): Releasing backup interface [ 72.221176][ T5355] bond0: (slave bond_slave_1): Releasing backup interface [ 72.278252][ T5355] team0: Port device team_slave_0 removed [ 72.285777][ T5355] team0: Port device team_slave_1 removed [ 72.287737][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.293769][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.304967][ T5355] bond4: (slave ip6gretap1): Releasing backup interface [ 72.354919][ T5364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 72.426425][ T5372] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 72.464340][ T5372] device veth5 entered promiscuous mode [ 72.476754][ T5372] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 72.561710][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 72.849052][ T5385] input: syz1 as /devices/virtual/input/input17 [ 73.219076][ T5398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.393'. [ 73.223759][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 73.250388][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.252881][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.301994][ T5393] netlink: 'syz.3.392': attribute type 15 has an invalid length. [ 73.324157][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 73.522667][ T5411] input: syz1 as /devices/virtual/input/input18 [ 73.656622][ T5419] binder_user_error: 8 callbacks suppressed [ 73.656634][ T5419] binder: 5417:5419 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 73.827544][ T5425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.833159][ T5425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.930068][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 74.379666][ T7] usb 1-1: config 0 has no interfaces? [ 74.396605][ T7] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 74.399061][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.401505][ T7] usb 1-1: Product: syz [ 74.402642][ T7] usb 1-1: Manufacturer: syz [ 74.403824][ T7] usb 1-1: SerialNumber: syz [ 74.416763][ T7] usb 1-1: config 0 descriptor?? [ 74.486548][ T5441] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 74.531008][ T5441] device veth5 entered promiscuous mode [ 74.537945][ T5441] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 74.694157][ T5448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'. [ 74.718644][ T5450] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 74.909699][ T5454] binder: 5453:5454 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 75.068749][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.073810][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.094139][ T5456] netlink: 'syz.2.416': attribute type 15 has an invalid length. [ 75.856632][ T5470] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 75.909334][ T5470] device veth9 entered promiscuous mode [ 75.922487][ T5470] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 76.002180][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.005996][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.008324][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.012381][ T5475] device bridge_slave_0 left promiscuous mode [ 76.014311][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.050988][ T5475] device bridge_slave_1 left promiscuous mode [ 76.052824][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.092152][ T5475] bond0: (slave bond_slave_0): Releasing backup interface [ 76.145767][ T5475] bond0: (slave bond_slave_1): Releasing backup interface [ 76.199106][ T5475] team0: Port device team_slave_0 removed [ 76.210688][ T5475] team0: Port device team_slave_1 removed [ 76.212985][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.215082][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.218006][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.220751][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.229313][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 76.258861][ T14] bond0 speed is unknown, defaulting to 1000 [ 76.356521][ T5485] binder: 5484:5485 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 76.751263][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 76.834919][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.845334][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 76.850624][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.855342][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.858903][ T5510] device bridge_slave_0 left promiscuous mode [ 76.866298][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.927015][ T5510] device bridge_slave_1 left promiscuous mode [ 76.929107][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.985549][ T5510] bond0: (slave bond_slave_0): Releasing backup interface [ 77.012910][ T5517] binder: 5516:5517 ioctl 4018620d 0 returned -22 [ 77.018570][ T5517] binder: 5516:5517 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 77.024419][ T5510] bond0: (slave bond_slave_1): Releasing backup interface [ 77.030730][ T5517] binder: 5516:5517 got transaction to invalid handle, 1 [ 77.032896][ T5517] binder_debug: 14 callbacks suppressed [ 77.032905][ T5517] binder: 5517:5516 cannot find target node [ 77.040397][ T5517] binder: 5516:5517 transaction call to 0:0 failed 145/29201/-22, size 88-24 line 3054 [ 77.040712][ T14] usb 1-1: USB disconnect, device number 6 [ 77.045267][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.106549][ T5510] team0: Port device team_slave_0 removed [ 77.139041][ T5510] team0: Port device team_slave_1 removed [ 77.158091][ T5510] bond2: (slave ip6gretap1): Releasing backup interface [ 77.164777][ T5510] bond2: (slave ip6gretap1): the permanent HWaddr of slave - d6:38:77:3a:16:fb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 77.227733][ T5510] bond2: (slave veth3): Releasing backup interface [ 77.270023][ T5510] bond5: (slave veth5): Releasing backup interface [ 77.529426][ T5536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 77.838770][ T5547] binder: 5544:5547 ioctl 4018620d 0 returned -22 [ 77.847152][ T5547] binder: 5544:5547 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 77.855225][ T5547] binder: 5544:5547 got transaction to invalid handle, 1 [ 77.857434][ T5547] binder: 5547:5544 cannot find target node [ 77.859221][ T5547] binder: 5544:5547 transaction call to 0:0 failed 148/29201/-22, size 88-24 line 3054 [ 77.867318][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.985805][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.012677][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.108346][ T5558] bond0 speed is unknown, defaulting to 1000 [ 78.224726][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 79.078441][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 79.567445][ T5617] binder: BINDER_SET_CONTEXT_MGR already set [ 79.569275][ T5617] binder: 5615:5617 ioctl 4018620d 20000040 returned -16 [ 79.585793][ T5617] binder: 5615:5617 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.602090][ T5617] binder: 5617 RLIMIT_NICE not set [ 79.603645][ T5617] binder: 5615:5617 ioctl c0306201 20000240 returned -11 [ 79.825638][ T5622] bond0 speed is unknown, defaulting to 1000 [ 79.838709][ T5625] binder: 5624:5625 ioctl 4018620d 0 returned -22 [ 79.845327][ T5625] binder: 5624:5625 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 79.852179][ T5625] binder: 5624:5625 got transaction to invalid handle, 1 [ 79.869703][ T5625] binder: 5625:5624 cannot find target node [ 79.871415][ T5625] binder: 5624:5625 transaction async to 0:0 failed 152/29201/-22, size 120-24 line 3054 [ 79.885021][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.000029][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.483'. [ 80.299159][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.305186][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.904239][ T5645] binder: BINDER_SET_CONTEXT_MGR already set [ 80.906052][ T5645] binder: 5644:5645 ioctl 4018620d 20000040 returned -16 [ 80.908411][ T5645] binder: 5644:5645 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.925509][ T5645] binder: 5645 RLIMIT_NICE not set [ 80.926913][ T5645] binder: 5644:5645 ioctl c0306201 20000240 returned -11 [ 80.943047][ T5650] binder: 5648:5650 ioctl 4018620d 0 returned -22 [ 80.954737][ T5650] binder: 5648:5650 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 80.959663][ T5651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 80.972941][ T5650] binder: 5648:5650 got transaction to invalid handle, 1 [ 80.974982][ T5650] binder: 5650:5648 cannot find target node [ 81.105268][ T5659] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 81.135904][ T5658] bond0 speed is unknown, defaulting to 1000 [ 81.179680][ T5659] device veth11 entered promiscuous mode [ 81.185029][ T5659] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 81.403787][ T5672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.453775][ T5675] binder: BINDER_SET_CONTEXT_MGR already set [ 81.455583][ T5675] binder: 5674:5675 ioctl 4018620d 20000040 returned -16 [ 81.468135][ T5675] binder: 5674:5675 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.478142][ T5675] binder: 5675 RLIMIT_NICE not set [ 81.480001][ T5675] binder: 5674:5675 ioctl c0306201 20000240 returned -11 [ 81.519066][ T5678] tipc: Started in network mode [ 81.520620][ T5678] tipc: Node identity 7f000001, cluster identity 4711 [ 81.523016][ T5678] tipc: Enabled bearer , priority 10 [ 81.555733][ T5678] tipc: Enabling of bearer rejected, failed to enable media [ 81.567751][ T5680] binder: 5679:5680 ioctl 4018620d 0 returned -22 [ 81.616841][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 81.887017][ T5701] binder: 5700:5701 ioctl c0306201 0 returned -14 [ 81.896879][ T5701] binder: 5700:5701 ioctl c0306201 20000240 returned -11 [ 82.011067][ T5711] binder: BINDER_SET_CONTEXT_MGR already set [ 82.012784][ T5711] binder: 5710:5711 ioctl 4018620d 20000040 returned -16 [ 82.063996][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.074997][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.139829][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 82.177084][ T5715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.199102][ T5715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.313429][ T4313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.515317][ T4313] usb 1-1: config 0 has no interfaces? [ 82.519653][ T4313] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 82.522189][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.524315][ T4313] usb 1-1: Product: syz [ 82.525507][ T4313] usb 1-1: Manufacturer: syz [ 82.526785][ T4313] usb 1-1: SerialNumber: syz [ 82.544977][ T4313] usb 1-1: config 0 descriptor?? [ 82.640400][ T22] tipc: Node number set to 2130706433 [ 82.760084][ T5714] input: syz1 as /devices/virtual/input/input19 [ 82.824605][ T5731] syz.4.526 sent an empty control message without MSG_MORE. [ 83.110422][ T5735] bond0 speed is unknown, defaulting to 1000 [ 83.856583][ T5744] binder: 5743:5744 ioctl c0306201 0 returned -14 [ 83.868824][ T5744] binder_debug: 11 callbacks suppressed [ 83.868837][ T5744] binder: 5744:5743 cannot find target node [ 83.879736][ T5744] binder: 5743:5744 transaction call to 0:0 failed 170/29201/-22, size 88-24 line 3054 [ 83.883801][ T5744] binder: 5743:5744 ioctl c0306201 20000240 returned -11 [ 83.886644][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.981082][ T5746] binder: BINDER_SET_CONTEXT_MGR already set [ 83.983202][ T5746] binder: 5745:5746 ioctl 4018620d 20000040 returned -16 [ 83.987243][ T5746] binder: 5746:5745 cannot find target node [ 83.989174][ T5746] binder: 5745:5746 transaction async to 0:0 failed 172/29201/-22, size 120-24 line 3054 [ 83.996274][ T4313] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.056459][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 84.473281][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.477816][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.988141][ T14] usb 1-1: USB disconnect, device number 7 [ 85.064856][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.067771][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.078011][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 85.122337][ T5775] binder: 5774:5775 ioctl c0306201 0 returned -14 [ 85.127353][ T5775] binder_user_error: 10 callbacks suppressed [ 85.127363][ T5775] binder: 5774:5775 got transaction to invalid handle, 1 [ 85.131892][ T5775] binder: 5775:5774 cannot find target node [ 85.133552][ T5775] binder: 5774:5775 transaction call to 0:0 failed 176/29201/-22, size 88-24 line 3054 [ 85.136675][ T5775] binder: 5774:5775 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.140556][ T5775] binder: 5775 RLIMIT_NICE not set [ 85.145874][ T5775] binder: 5774:5775 ioctl c0306201 20000240 returned -11 [ 85.148531][ T4345] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.200780][ T5777] binder: BINDER_SET_CONTEXT_MGR already set [ 85.202637][ T5777] binder: 5776:5777 ioctl 4018620d 20000040 returned -16 [ 85.206565][ T5777] binder: 5776:5777 got transaction to invalid handle, 1 [ 85.208547][ T5777] binder: 5777:5776 cannot find target node [ 85.253465][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 85.355057][ T5784] Soft offlining pfn 0x21144a at process virtual address 0x20ffb000 [ 85.361091][ T5784] Memory failure: 0x21144a: unhandlable page. [ 85.445447][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.451061][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.519469][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.529933][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.909814][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.913787][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.336144][ T5806] binder: 5805:5806 got transaction to invalid handle, 1 [ 86.342105][ T5806] binder: 5805:5806 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.352545][ T5806] binder: 5806 RLIMIT_NICE not set [ 86.356340][ T5806] binder: 5805:5806 ioctl c0306201 20000240 returned -11 [ 86.455787][ T5808] binder: 5807:5808 ioctl c0306201 0 returned -14 [ 86.464533][ T5808] binder: 5807:5808 got transaction to invalid handle, 1 [ 86.565053][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 87.122294][ T5825] device veth7 entered promiscuous mode [ 87.241437][ T5829] binder: 5828:5829 got transaction to invalid handle, 1 [ 87.243912][ T5829] binder: 5828:5829 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.247859][ T5829] binder: 5828:5829 ioctl c0306201 20000240 returned -11 [ 87.293506][ T5831] binder: 5830:5831 ioctl c0306201 0 returned -14 [ 87.609127][ T5841] bond0 speed is unknown, defaulting to 1000 [ 87.864839][ T5853] binder: 5852:5853 ioctl c0306201 20000240 returned -11 [ 87.926868][ T5857] binder: 5856:5857 ioctl c0306201 0 returned -14 [ 87.986469][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.989393][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.202289][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 88.469776][ T5882] binder: 5881:5882 ioctl c0306201 20000240 returned -11 [ 88.568140][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 88.607107][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 88.798983][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 88.957234][ T5908] binder_debug: 26 callbacks suppressed [ 88.957246][ T5908] binder: 5908:5907 cannot find target node [ 88.962248][ T5908] binder: 5907:5908 transaction call to 0:0 failed 214/29201/-22, size 88-24 line 3054 [ 88.965499][ T5908] binder: 5907:5908 ioctl c0306201 20000240 returned -11 [ 88.997641][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.225733][ T5921] binder: 5921:5920 cannot find target node [ 89.230821][ T5921] binder: 5920:5921 transaction call to 0:0 failed 217/29201/-22, size 88-24 line 3054 [ 89.237340][ T4313] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.330846][ T14] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 89.334586][ T5923] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 89.388471][ T5923] device veth3 entered promiscuous mode [ 89.525467][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.528565][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 89.533188][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.542932][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 89.561224][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.569801][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.577765][ T14] usb 1-1: Manufacturer: syz [ 89.597665][ T14] usb 1-1: config 0 descriptor?? [ 89.785504][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 89.828445][ T14] Registered IR keymap rc-hauppauge [ 89.929706][ T14] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 89.933041][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 89.969709][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.090987][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.094003][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 90.099240][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 90.136409][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.159710][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.171704][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.199981][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.204235][ T5943] binder_user_error: 16 callbacks suppressed [ 90.204246][ T5943] binder: 5942:5943 got transaction to invalid handle, 1 [ 90.210874][ T5943] binder: 5943:5942 cannot find target node [ 90.213018][ T5943] binder: 5942:5943 transaction call to 0:0 failed 221/29201/-22, size 88-24 line 3054 [ 90.216863][ T5943] binder: 5942:5943 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.221721][ T5943] binder: 5943 RLIMIT_NICE not set [ 90.224090][ T5943] binder: 5942:5943 ioctl c0306201 20000240 returned -11 [ 90.226967][ T4313] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.239714][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.269876][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.301342][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.329867][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.369667][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.396704][ T5949] binder: tried to use weak ref as strong ref [ 90.398511][ T5949] binder: 5948:5949 Acquire 1 refcount change on invalid ref 0 ret -22 [ 90.408112][ T5949] binder: 5948:5949 got transaction to invalid handle, 1 [ 90.410861][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.415675][ T5949] binder: 5949:5948 cannot find target node [ 90.449653][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 90.491285][ T14] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 90.494272][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.891458][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.893986][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.945145][ T5972] binder: tried to use weak ref as strong ref [ 90.958725][ T5972] binder: 5971:5972 Acquire 1 refcount change on invalid ref 0 ret -22 [ 90.991815][ T5972] binder: 5971:5972 got transaction to invalid handle, 1 [ 91.076728][ T5979] binder: tried to use weak ref as strong ref [ 91.741068][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.747381][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.883941][ T6013] binder: 6012:6013 ioctl 4018620d 0 returned -22 [ 92.194770][ T24] usb 1-1: USB disconnect, device number 8 [ 92.569983][ T6042] binder: 6041:6042 ioctl 4018620d 0 returned -22 [ 93.005965][ T6066] binder: 6065:6066 ioctl 4018620d 0 returned -22 [ 93.016184][ T6066] binder: 6065:6066 ioctl c0306201 20000240 returned -11 [ 93.047081][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 93.047113][ T6070] binder: 6068:6070 ioctl 4018620d 0 returned -22 [ 93.121641][ T6072] bond0 speed is unknown, defaulting to 1000 [ 93.168120][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 93.299350][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.306814][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.611487][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.618847][ T6103] binder: 6101:6103 ioctl 4018620d 0 returned -22 [ 93.622157][ T6103] binder: 6101:6103 ioctl c0306201 20000240 returned -11 [ 93.632413][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.711547][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 93.727413][ T6107] binder: 6105:6107 ioctl c0306201 0 returned -14 [ 94.027826][ T6123] binder_debug: 35 callbacks suppressed [ 94.027838][ T6123] binder: 6123:6122 cannot find target node [ 94.039964][ T6123] binder: 6122:6123 transaction async to 0:0 failed 264/29201/-22, size 120-24 line 3054 [ 94.050496][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.114072][ T6127] binder: 6125:6127 ioctl 4018620d 0 returned -22 [ 94.119969][ T6126] bond0 speed is unknown, defaulting to 1000 [ 94.123200][ T6127] binder: 6127:6125 cannot find target node [ 94.128236][ T6127] binder: 6125:6127 transaction call to 0:0 failed 267/29201/-22, size 88-24 line 3054 [ 94.136490][ T6127] binder: 6125:6127 ioctl c0306201 20000240 returned -11 [ 94.142792][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.254657][ T6132] binder: 6131:6132 ioctl c0306201 0 returned -14 [ 94.818634][ T6154] binder: 6154:6153 cannot find target node [ 94.822456][ T6154] binder: 6153:6154 transaction async to 0:0 failed 273/29201/-22, size 120-24 line 3054 [ 94.833388][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.437412][ T6176] bond0 speed is unknown, defaulting to 1000 [ 95.883198][ T6185] binder: 6184:6185 ioctl 4018620d 0 returned -22 [ 95.888993][ T6185] binder_user_error: 42 callbacks suppressed [ 95.889003][ T6185] binder: tried to use weak ref as strong ref [ 95.898706][ T6185] binder: 6184:6185 Acquire 1 refcount change on invalid ref 0 ret -22 [ 95.909923][ T6185] binder: 6184:6185 got transaction to invalid handle, 1 [ 95.917638][ T6185] binder: 6185:6184 cannot find target node [ 96.403121][ T6196] netlink: 'syz.2.711': attribute type 18 has an invalid length. [ 96.706021][ T6213] binder: 6212:6213 ioctl 4018620d 0 returned -22 [ 96.717201][ T6213] binder: tried to use weak ref as strong ref [ 96.722434][ T6213] binder: 6212:6213 Acquire 1 refcount change on invalid ref 0 ret -22 [ 96.725519][ T6213] binder: 6212:6213 got transaction to invalid handle, 1 [ 97.253591][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.256255][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.339906][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.348018][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.355053][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 97.527125][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 97.632930][ T6245] binder: 6244:6245 ioctl 4018620d 0 returned -22 [ 97.635336][ T6245] binder: tried to use weak ref as strong ref [ 97.637277][ T6245] binder: 6244:6245 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.641150][ T6245] binder: 6244:6245 got transaction to invalid handle, 1 [ 97.899303][ T6259] bond0 speed is unknown, defaulting to 1000 [ 98.489342][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 98.908580][ T6290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'. [ 99.350303][ T6304] netlink: 'syz.3.756': attribute type 72 has an invalid length. [ 99.533233][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 99.732961][ T6319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.762'. [ 99.817831][ T6321] binder: 6320:6321 ioctl c0306201 0 returned -14 [ 99.829736][ T6321] binder: 6320:6321 got transaction to invalid handle, 1 [ 99.831747][ T6321] binder_debug: 8 callbacks suppressed [ 99.831757][ T6321] binder: 6321:6320 cannot find target node [ 99.834624][ T6321] binder: 6320:6321 transaction async to 0:0 failed 286/29201/-22, size 120-24 line 3054 [ 99.859683][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.232582][ T6335] netlink: 'syz.3.768': attribute type 72 has an invalid length. [ 100.345872][ T6339] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 100.414258][ T6339] device veth13 entered promiscuous mode [ 100.418332][ T6339] bond9: (slave veth13): Enslaving as a backup interface with a down link [ 100.446617][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 100.580061][ T6346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.773'. [ 100.618256][ T6348] binder: 6347:6348 ioctl c0306201 0 returned -14 [ 100.629954][ T6348] binder: 6348:6347 cannot find target node [ 100.636639][ T6348] binder: 6347:6348 transaction async to 0:0 failed 290/29201/-22, size 120-24 line 3054 [ 100.644702][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.818744][ T6358] netlink: 'syz.3.779': attribute type 72 has an invalid length. [ 101.026210][ T6371] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 101.035933][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.783'. [ 101.139618][ T6374] device veth9 entered promiscuous mode [ 101.143750][ T6374] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 101.198331][ T6379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.786'. [ 101.338581][ T6381] bond0 speed is unknown, defaulting to 1000 [ 101.796491][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 102.035712][ T6412] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 102.066583][ T6413] device veth15 entered promiscuous mode [ 102.071244][ T6413] bond10: (slave veth15): Enslaving as a backup interface with a down link [ 102.194016][ T6422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.801'. [ 102.615959][ T6441] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 102.776894][ T6449] device veth5 entered promiscuous mode [ 102.790666][ T6449] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 103.508588][ T6486] __nla_validate_parse: 5 callbacks suppressed [ 103.508611][ T6486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 103.629503][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 104.046253][ T6506] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 104.070365][ T6506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.091622][ T6506] device ip6erspan0 entered promiscuous mode [ 104.107164][ T6506] bond5: (slave ip6erspan0): making interface the new active one [ 104.137529][ T6506] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 104.143975][ T1878] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 104.425955][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.432171][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.501644][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.504219][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.675356][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.844'. [ 104.768570][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 104.899405][ T6535] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 104.959123][ T6535] device veth17 entered promiscuous mode [ 104.968199][ T6535] bond11: (slave veth17): Enslaving as a backup interface with a down link [ 105.147086][ T6544] binder_user_error: 1 callbacks suppressed [ 105.147099][ T6544] binder: 6543:6544 got transaction to invalid handle, 1 [ 105.154470][ T6544] binder: 6544:6543 cannot find target node [ 105.156301][ T6544] binder: 6543:6544 transaction async to 0:0 failed 294/29201/-22, size 120-24 line 3054 [ 105.174771][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.326716][ T6556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.857'. [ 105.374664][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 105.808511][ T6571] binder: 6570:6571 got transaction to invalid handle, 1 [ 105.810976][ T6571] binder: 6571:6570 cannot find target node [ 105.812589][ T6571] binder: 6570:6571 transaction async to 0:0 failed 298/29201/-22, size 120-24 line 3054 [ 105.815864][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.856409][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 106.256518][ T6581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'. [ 106.345024][ T6585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 106.598447][ T6604] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 106.633639][ T6604] device veth9 entered promiscuous mode [ 106.816761][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'. [ 107.536926][ T6628] binder: 6627:6628 tried to acquire reference to desc 0, got 1 instead [ 107.541744][ T14] binder: release 6627:6628 transaction 303 out, still active [ 107.544246][ T14] binder: undelivered TRANSACTION_COMPLETE [ 107.566910][ T22] binder: send failed reply for transaction 303, target dead [ 107.634379][ T6634] binder: 6633:6634 tried to acquire reference to desc 0, got 1 instead [ 107.637499][ T6634] binder: 6633:6634 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.641822][ T6634] binder: 6634 RLIMIT_NICE not set [ 107.643504][ T6634] binder: 6634 RLIMIT_NICE not set [ 107.646692][ T14] binder: release 6633:6634 transaction 308 out, still active [ 107.697268][ T6636] binder: 6635:6636 tried to acquire reference to desc 0, got 1 instead [ 107.704401][ T6636] binder: 6635:6636 ioctl c0306201 0 returned -14 [ 107.798867][ T6643] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 107.819735][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.825442][ T6643] device veth7 entered promiscuous mode [ 107.958410][ T6657] binder: 6656:6657 tried to acquire reference to desc 0, got 1 instead [ 108.000030][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 108.003593][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.006913][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.010204][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.014489][ T24] usb 1-1: config 0 descriptor?? [ 108.298474][ T6669] binder: 6668:6669 tried to acquire reference to desc 0, got 1 instead [ 108.383907][ T6671] binder: 6670:6671 ioctl c0306201 0 returned -14 [ 108.430773][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 108.434344][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 108.441251][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 108.445665][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 108.450735][ T24] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 108.455763][ T24] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 108.540138][ T24] Unable to handle kernel paging request at virtual address dfff800000000000 [ 108.543462][ T24] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 108.546203][ T24] Mem abort info: [ 108.547427][ T24] ESR = 0x0000000096000006 [ 108.548953][ T24] EC = 0x25: DABT (current EL), IL = 32 bits [ 108.551905][ T24] SET = 0, FnV = 0 [ 108.553220][ T24] EA = 0, S1PTW = 0 [ 108.554558][ T24] FSC = 0x06: level 2 translation fault [ 108.556508][ T24] Data abort info: [ 108.557769][ T24] ISV = 0, ISS = 0x00000006 [ 108.559305][ T24] CM = 0, WnR = 0 [ 108.561368][ T24] [dfff800000000000] address between user and kernel address ranges [ 108.564060][ T24] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 108.566085][ T24] Modules linked in: [ 108.567133][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 6.1.141-syzkaller #0 [ 108.569339][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.572206][ T24] Workqueue: usb_hub_wq hub_event [ 108.573651][ T24] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.575771][ T24] pc : mcp_smbus_xfer+0x64/0xf30 [ 108.577097][ T24] lr : mcp_smbus_xfer+0x44/0xf30 [ 108.578522][ T24] sp : ffff80001c916140 [ 108.579719][ T24] x29: ffff80001c916140 x28: 0000000000000000 x27: dfff800000000000 [ 108.581952][ T24] x26: 00000000ffffb535 x25: 1ffff000029fde40 x24: 0000000000000000 [ 108.584172][ T24] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000018 [ 108.586395][ T24] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800011a7bce0 [ 108.588743][ T24] x17: ffff8000181a1000 x16: ffff8000082d1c00 x15: ffff800017c81fc0 [ 108.590991][ T24] x14: ffff0000c0a58a98 x13: ffff0000c0a58bd8 x12: 0000000000100000 [ 108.593220][ T24] x11: 00000000000bffad x10: ffff800032f3d000 x9 : ffff80000f252b6c [ 108.595372][ T24] x8 : 0000000000000000 x7 : 1111111111111111 x6 : 0000000000000000 [ 108.597527][ T24] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 108.599794][ T24] x2 : 0000000000000000 x1 : 0000000000000018 x0 : ffff0000d1410088 [ 108.602006][ T24] Call trace: [ 108.602883][ T24] mcp_smbus_xfer+0x64/0xf30 [ 108.604187][ T24] __i2c_smbus_xfer+0x584/0x2150 [ 108.605751][ T24] i2c_smbus_xfer+0x1f0/0x314 [ 108.607048][ T24] i2c_default_probe+0x1bc/0x240 [ 108.608395][ T24] i2c_do_add_adapter+0x388/0x7a0 [ 108.609731][ T24] __process_new_adapter+0x28/0x3c [ 108.611135][ T24] bus_for_each_drv+0x150/0x1d8 [ 108.612469][ T24] i2c_register_adapter+0xd94/0x1088 [ 108.614117][ T24] i2c_add_adapter+0x16c/0x248 [ 108.615473][ T24] mcp2221_probe+0x254/0x5a8 [ 108.616732][ T24] hid_device_probe+0x22c/0x328 [ 108.618039][ T24] really_probe+0x39c/0xae0 [ 108.619292][ T24] __driver_probe_device+0x180/0x314 [ 108.620845][ T24] driver_probe_device+0x78/0x330 [ 108.622238][ T24] __device_attach_driver+0x290/0x4e0 [ 108.623781][ T24] bus_for_each_drv+0x150/0x1d8 [ 108.625205][ T24] __device_attach+0x2a8/0x3d4 [ 108.626487][ T24] device_initial_probe+0x24/0x34 [ 108.627910][ T24] bus_probe_device+0xbc/0x1c4 [ 108.629263][ T24] device_add+0xb04/0xf94 [ 108.630433][ T24] hid_add_device+0x310/0x4c8 [ 108.631742][ T24] usbhid_probe+0x90c/0xc8c [ 108.633039][ T24] usb_probe_interface+0x4fc/0x994 [ 108.634457][ T24] really_probe+0x39c/0xae0 [ 108.635834][ T24] __driver_probe_device+0x180/0x314 [ 108.637258][ T24] driver_probe_device+0x78/0x330 [ 108.638735][ T24] __device_attach_driver+0x290/0x4e0 [ 108.640265][ T24] bus_for_each_drv+0x150/0x1d8 [ 108.641713][ T24] __device_attach+0x2a8/0x3d4 [ 108.643045][ T24] device_initial_probe+0x24/0x34 [ 108.644431][ T24] bus_probe_device+0xbc/0x1c4 [ 108.645789][ T24] device_add+0xb04/0xf94 [ 108.646999][ T24] usb_set_configuration+0x1598/0x1b0c [ 108.648490][ T24] usb_generic_driver_probe+0x8c/0x144 [ 108.649987][ T24] usb_probe_device+0x120/0x25c [ 108.651308][ T24] really_probe+0x39c/0xae0 [ 108.652594][ T24] __driver_probe_device+0x180/0x314 [ 108.654239][ T24] driver_probe_device+0x78/0x330 [ 108.655677][ T24] __device_attach_driver+0x290/0x4e0 [ 108.657160][ T24] bus_for_each_drv+0x150/0x1d8 [ 108.658508][ T24] __device_attach+0x2a8/0x3d4 [ 108.659822][ T24] device_initial_probe+0x24/0x34 [ 108.661198][ T24] bus_probe_device+0xbc/0x1c4 [ 108.662556][ T24] device_add+0xb04/0xf94 [ 108.663843][ T24] usb_new_device+0x7f0/0x11c4 [ 108.665141][ T24] hub_event+0x21c8/0x3dc4 [ 108.666363][ T24] process_one_work+0x7f4/0x13a8 [ 108.667665][ T24] worker_thread+0x8c8/0xfbc [ 108.669030][ T24] kthread+0x250/0x2d8 [ 108.670181][ T24] ret_from_fork+0x10/0x20 [ 108.671390][ T24] Code: aa1303e0 965a0bf1 f9400273 d343fe7c (387b6b88) [ 108.673342][ T24] ---[ end trace 0000000000000000 ]--- [ 109.148214][ T24] Kernel panic - not syncing: Oops: Fatal exception [ 109.150082][ T24] SMP: stopping secondary CPUs [ 109.151409][ T24] Kernel Offset: disabled [ 109.152686][ T24] CPU features: 0x080000,02070084,26017203 [ 109.154302][ T24] Memory Limit: none [ 109.623021][ T24] Rebooting in 86400 seconds..