last executing test programs: 4.406581934s ago: executing program 1 (id=1173): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) 4.381333907s ago: executing program 0 (id=1174): socket(0x2, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) 3.530072511s ago: executing program 1 (id=1179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/218) 3.388704895s ago: executing program 0 (id=1180): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) truncate(&(0x7f0000000180)='./file0\x00', 0x8) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) 3.388355265s ago: executing program 1 (id=1181): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 3.292680405s ago: executing program 4 (id=1183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x68000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) 2.918581401s ago: executing program 4 (id=1186): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.869052456s ago: executing program 3 (id=1188): userfaultfd(0x80001) r0 = syz_open_dev$usbfs(0x0, 0x201, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x10000000002) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e"], 0x128}}, 0x0) 2.421469951s ago: executing program 0 (id=1189): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcadd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x1000)=nil, 0x101f, 0x2000005, 0x11, r0, 0x82000000) 2.32459439s ago: executing program 1 (id=1190): socket(0x2, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) 2.261590167s ago: executing program 4 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.159716886s ago: executing program 4 (id=1192): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d345000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x9, 0x7, "44b16edfd90aff"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000ac0)={0x40, 0xa, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.006410642s ago: executing program 3 (id=1193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x33, 0x4, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0xf5, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x40078, &(0x7f00000010c0)='\xc7\x1f\x86\xb8\xa3f\xa5\xf4\x8b\x00\x00\x00\x80\xc9&\vJ\xdd\xbd\x13\xaa\xc0~\x12=\xc1M\x16\x97\xaf\x11m\xd0t\x05u\x93\x94\x18_\xad\xdf\x1d\x1f\x9d\x004{\xeb\xab\x19\xa9\xd4\xb3y;\xcbJ\xe2\x02EB\x03\bj:\xf42XiPO7\x84;\xc5\xa4\xe2AR\xeeU\xcf(I_\xa1\x916\x84p\x15\xfd\xc8\xae`t\xf9\xc9\x9a\xf3\xd47\x9c\xc2\xaak]\xe8\x8a\xc4\x8c>\x1e;\x93\x01\x18\x18K\x00L\xb8H\xbf/\xf7\"\x13<\xa8)\v\xb0\xa1\xac\xff\xac\xb8\xe0t\xc3k&qKb\x12v\xfa\x91\x18qG\x01\xc5\x11\x10\xac$\v\xbc+}\x98KK\x83\xb2\x9a/\xaa%\x88') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001080)={'gre0\x00', &(0x7f0000001180)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x5, 0x9, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_xfrm(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)=@allocspi={0x1c8, 0x16, 0x10, 0x70bd27, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x5, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x29, r7, r4}, {@in=@broadcast, 0x4d5, 0xff}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x5636, 0x81, 0xffffffff, 0xee, 0x4}, {0x10001, 0x2, 0x9, 0x8}, {0x1, 0x10001, 0x8}, 0x70bd29, 0x3504, 0xa, 0x1, 0x1, 0x4}, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'crc32c\x00'}}}, @etimer_thresh={0x8, 0xc, 0x3ff}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x2, 0x3, 0xe3}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd28, 0x70bd25, 0x70bd28, 0x70bd2c, 0x5, [0x101, 0x0, 0x0]}}, @etimer_thresh={0x8, 0xc, 0xfff}, @address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2, 0x2}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x815}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) unshare(0x40020000) 1.999554662s ago: executing program 2 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0xfe0f000000000000) 1.964094976s ago: executing program 2 (id=1195): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x60882, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.91846515s ago: executing program 2 (id=1196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x68000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) 1.891835243s ago: executing program 2 (id=1197): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20000000) listen(r1, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 1.51419208s ago: executing program 0 (id=1198): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x0, 0x2}) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 1.494818262s ago: executing program 2 (id=1199): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) truncate(&(0x7f0000000180)='./file0\x00', 0x8) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) 1.445578927s ago: executing program 4 (id=1200): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 1.380361404s ago: executing program 1 (id=1201): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) shutdown(r4, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000400)="b7000000", 0x4}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe80000000000000"], 0x128}}, 0x0) 816.155769ms ago: executing program 3 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 553.504305ms ago: executing program 4 (id=1203): userfaultfd(0x80001) r0 = syz_open_dev$usbfs(0x0, 0x201, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x10000000002) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e"], 0x128}}, 0x0) 511.42547ms ago: executing program 2 (id=1204): syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf09000000000000550901000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x2c020400) 477.412643ms ago: executing program 3 (id=1205): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000350001000000eeffffffffff03"], 0x14}], 0x1}, 0x0) 108.483369ms ago: executing program 0 (id=1206): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0xfe0f000000000000) 108.206239ms ago: executing program 3 (id=1207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x68000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 91.107921ms ago: executing program 1 (id=1208): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcadd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x1000)=nil, 0x101f, 0x2000005, 0x11, r0, 0x82000000) 362.18µs ago: executing program 0 (id=1209): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x20000000) listen(r1, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1210): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d345000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x9, 0x7, "44b16edfd90aff"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000ac0)={0x40, 0xa, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 25.063055][ T4307] cgroup: Unknown subsys name 'net' [ 25.293523][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.557015][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.253908][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.255995][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.262803][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.265204][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.266501][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.268369][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.270336][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.272263][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.273769][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.274081][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.275343][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.276407][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.277847][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.278623][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.280054][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.281384][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.282378][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.283041][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.283953][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.284937][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.286778][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.288717][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.289355][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.290362][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.291205][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.294336][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.295637][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.297754][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.299697][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.311346][ T4324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.454464][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 26.466103][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 26.473736][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.506081][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 26.528215][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.529500][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.531302][ T4329] device bridge_slave_0 entered promiscuous mode [ 26.539529][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.541357][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.542955][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.544820][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.546041][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.547449][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.549898][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.551226][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.552824][ T4329] device bridge_slave_1 entered promiscuous mode [ 26.554293][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.555467][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.556981][ T4325] device bridge_slave_0 entered promiscuous mode [ 26.560153][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 26.573076][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.574392][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.575927][ T4325] device bridge_slave_1 entered promiscuous mode [ 26.586643][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.587859][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.589302][ T4321] device bridge_slave_0 entered promiscuous mode [ 26.591669][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.592837][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.594364][ T4321] device bridge_slave_1 entered promiscuous mode [ 26.602170][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.604743][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.606922][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.613448][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.615717][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.626439][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.628799][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.637753][ T4320] team0: Port device team_slave_0 added [ 26.644930][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.654283][ T4320] team0: Port device team_slave_1 added [ 26.656375][ T4325] team0: Port device team_slave_0 added [ 26.660633][ T4329] team0: Port device team_slave_0 added [ 26.662055][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.663344][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.665000][ T4333] device bridge_slave_0 entered promiscuous mode [ 26.670392][ T4325] team0: Port device team_slave_1 added [ 26.674463][ T4329] team0: Port device team_slave_1 added [ 26.677848][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.679121][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.682818][ T4333] device bridge_slave_1 entered promiscuous mode [ 26.689639][ T4321] team0: Port device team_slave_0 added [ 26.696588][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.697746][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.702386][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.705565][ T4321] team0: Port device team_slave_1 added [ 26.709178][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.710234][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.715178][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.719648][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.720698][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.726657][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.732552][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.733726][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.738022][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.740304][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.741629][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.745815][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.749045][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.754784][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.755861][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.760074][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.765938][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.772327][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.773469][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.777726][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.780337][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.781636][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.785753][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.841805][ T4329] device hsr_slave_0 entered promiscuous mode [ 26.891006][ T4329] device hsr_slave_1 entered promiscuous mode [ 26.933289][ T4333] team0: Port device team_slave_0 added [ 26.962033][ T4325] device hsr_slave_0 entered promiscuous mode [ 26.991108][ T4325] device hsr_slave_1 entered promiscuous mode [ 27.030885][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.032206][ T4325] Cannot create hsr debugfs directory [ 27.034971][ T4333] team0: Port device team_slave_1 added [ 27.071910][ T4320] device hsr_slave_0 entered promiscuous mode [ 27.110976][ T4320] device hsr_slave_1 entered promiscuous mode [ 27.150777][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.152059][ T4320] Cannot create hsr debugfs directory [ 27.174736][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.175848][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.179776][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.190116][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.191378][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.195325][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.241773][ T4321] device hsr_slave_0 entered promiscuous mode [ 27.291044][ T4321] device hsr_slave_1 entered promiscuous mode [ 27.330798][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.332040][ T4321] Cannot create hsr debugfs directory [ 27.421711][ T4333] device hsr_slave_0 entered promiscuous mode [ 27.471082][ T4333] device hsr_slave_1 entered promiscuous mode [ 27.510865][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.512094][ T4333] Cannot create hsr debugfs directory [ 27.573527][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.616638][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.652676][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.701418][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.765493][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.793771][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.852122][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.892385][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.932952][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.972353][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.006926][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.032612][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.080639][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.132127][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.171971][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.228554][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.231780][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.282220][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.331044][ T4324] Bluetooth: hci3: command 0x0409 tx timeout [ 28.331166][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 28.332116][ T4324] Bluetooth: hci1: command 0x0409 tx timeout [ 28.333106][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 28.334162][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 28.337606][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.367699][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.381447][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.382605][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.412961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.414837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.416471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.417941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.419664][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.420827][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.422735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.424288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.425792][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.426965][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.430981][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.473205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.476510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.479403][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.497340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.499145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.500621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.503635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.505884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.507382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.514139][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.523413][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.524871][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.527865][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.530174][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.535412][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.547695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.549629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.551532][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.552736][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.554420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.556013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.557889][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.559012][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.560541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.562981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.572945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.575842][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.579897][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.582131][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.583489][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.584615][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.586631][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.587928][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.594298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.595806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.597276][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.598421][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.604461][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.609465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.616090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.617774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.619370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.621775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.623913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.630398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.632941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.634493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.635882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.637259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.643770][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.645039][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.648915][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.651819][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.654349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.655992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.657486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.659312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.667684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.669319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.671710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.673291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.678498][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.682323][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.684507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.686361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.687878][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.689101][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.690490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.693090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.694616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.699337][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.702507][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.704654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.706156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.707614][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.708768][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.710170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.712416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.713697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.715251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.718501][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.723106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.727753][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.733940][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.735648][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.737291][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.752710][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.754528][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.756097][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.757240][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.758599][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.774445][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.776165][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.777781][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.779645][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.785348][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.786973][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.790533][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.792962][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.801160][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.802840][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.809799][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.816455][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.821382][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.822848][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.823935][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.835354][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.836972][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.838670][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.840284][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.843407][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.845681][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.847419][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.848950][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.850483][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.852406][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.853572][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.856743][ T4329] device veth0_vlan entered promiscuous mode [ 28.859758][ T4329] device veth1_vlan entered promiscuous mode [ 28.866117][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.867597][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.869155][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.872652][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.877738][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.879677][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.883570][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.884908][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.886332][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.887690][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.889185][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.897482][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.898753][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.905580][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.910093][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.911483][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.923670][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.925946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.927616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.932808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.934248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.938430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.939908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.944311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.945944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.948290][ T4325] device veth0_vlan entered promiscuous mode [ 28.965016][ T4320] device veth0_vlan entered promiscuous mode [ 28.968029][ T4320] device veth1_vlan entered promiscuous mode [ 28.971670][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.973298][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.974842][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.976335][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.977865][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.979222][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.985935][ T4329] device veth0_macvtap entered promiscuous mode [ 28.988399][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.990517][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.992519][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.998030][ T4329] device veth1_macvtap entered promiscuous mode [ 29.000326][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.002492][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.004753][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.008492][ T4325] device veth1_vlan entered promiscuous mode [ 29.011377][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.012944][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.014209][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.018958][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.026630][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.029033][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.030657][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.040681][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.047824][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.049398][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.051052][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.052853][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.054333][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.056773][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.058526][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.061407][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.062916][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.064277][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.065550][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.069784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.071667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.073818][ T4321] device veth0_vlan entered promiscuous mode [ 29.075943][ T4320] device veth0_macvtap entered promiscuous mode [ 29.078231][ T4320] device veth1_macvtap entered promiscuous mode [ 29.099261][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.101365][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.103590][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.108201][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.109947][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.113644][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.115342][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.116869][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.118461][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.125091][ T4325] device veth0_macvtap entered promiscuous mode [ 29.128187][ T4325] device veth1_macvtap entered promiscuous mode [ 29.142202][ T4321] device veth1_vlan entered promiscuous mode [ 29.144580][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.146336][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.148492][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.152225][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.153615][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155077][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.156538][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.159977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.161730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.163100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.164575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.166139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.194707][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.195968][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.197762][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.208876][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.210488][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.212880][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.215018][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.216281][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.220182][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.223169][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.226746][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.228326][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.229863][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.231855][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.233676][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.235115][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.250064][ T4333] device veth0_vlan entered promiscuous mode [ 29.253340][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.255181][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.256908][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.258622][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.261594][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.264958][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.266633][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.267189][ T4321] device veth0_macvtap entered promiscuous mode [ 29.269741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.271317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.272967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.274442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.275998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.278655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.282326][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.284065][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.285684][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.287474][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.292054][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.294236][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.295908][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.306152][ T4321] device veth1_macvtap entered promiscuous mode [ 29.316027][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.317718][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.319200][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.321671][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.323113][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.324991][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.328276][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.330487][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.332970][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.334642][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.336179][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.337648][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.339261][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.341815][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.343432][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.344846][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.346163][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.347475][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.356956][ T4333] device veth1_vlan entered promiscuous mode [ 29.358440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.359993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.362063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.367103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.369473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.372211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.384621][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.386121][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.387549][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.388923][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.440014][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.440307][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.440515][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.448746][ T4333] device veth0_macvtap entered promiscuous mode [ 29.475544][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.476854][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.478630][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.480186][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.504266][ T4333] device veth1_macvtap entered promiscuous mode [ 29.509690][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.511195][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.513872][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.515437][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.555785][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.557100][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.559524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.565993][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.567942][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.569629][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.579996][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.581978][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.583581][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.585263][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.587013][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.589429][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.597880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.599568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.601252][ T1625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.604163][ T1625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.609246][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.627488][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.634524][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.636121][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.637873][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.639581][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.642503][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.650782][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.652488][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.655353][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.656627][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.658496][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.668474][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670683][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.672248][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.673584][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.707349][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.708747][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.711067][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.712287][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.714792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.716300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.752990][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.758807][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.937700][ T4456] Zero length message leads to an empty skb [ 30.243920][ T27] audit: type=1326 audit(30.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.258891][ T27] audit: type=1326 audit(30.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.262978][ T27] audit: type=1326 audit(30.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.269725][ T27] audit: type=1326 audit(30.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.280315][ T27] audit: type=1326 audit(30.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.293986][ T27] audit: type=1326 audit(30.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.297382][ T27] audit: type=1326 audit(30.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.304800][ T27] audit: type=1326 audit(30.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.313672][ T27] audit: type=1326 audit(30.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.322437][ T27] audit: type=1326 audit(30.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 30.411015][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 30.413624][ T4324] Bluetooth: hci1: command 0x041b tx timeout [ 30.413653][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 30.415443][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 30.415808][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 31.616757][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.501167][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 32.501713][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 32.502271][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 32.503247][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 32.504152][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 32.515213][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 32.517656][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 32.519640][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 32.525929][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.602382][ T4474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.874783][ T4441] usb 1-1: USB disconnect, device number 2 [ 33.896271][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.898140][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.459969][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.461971][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.571906][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 34.581526][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 34.581665][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 34.582556][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 34.583935][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 34.917241][ T4561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 34.918874][ T4561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 34.925306][ T4561] ubi31: attaching mtd0 [ 34.927166][ T4561] ubi31: scanning is finished [ 34.928002][ T4561] ubi31: empty MTD device detected [ 35.221620][ T4561] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 35.222912][ T4561] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 35.224223][ T4561] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 35.225514][ T4561] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 35.226777][ T4561] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 35.227909][ T4561] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 35.229200][ T4561] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 974257317 [ 35.230904][ T4561] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 35.233352][ T4563] ubi31: background thread "ubi_bgt31d" started, PID 4563 [ 36.281209][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.282966][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.895399][ T4639] snd_dummy snd_dummy.0: control 0:7:0:syz0:7 is already present [ 37.937430][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.940318][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.391453][ T4683] 9p: Unknown Cache mode readahead [ 39.563631][ T4707] process 'syz.3.90' launched './file0' with NULL argv: empty string added [ 39.826156][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.828739][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.980684][ T4741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'. [ 40.377110][ T4747] syz.3.108 uses obsolete (PF_INET,SOCK_PACKET) [ 40.903996][ T4763] Bluetooth: MGMT ver 1.22 [ 41.332005][ T4784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'. [ 41.645875][ T4786] input: syz0 as /devices/virtual/input/input2 [ 42.942607][ T4824] mmap: syz.2.133 (4824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.208891][ T4804] ALSA: mixer_oss: invalid OSS volume 'u' [ 43.238745][ T4801] ceph: No mds server is up or the cluster is laggy [ 44.209498][ T4848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.140'. [ 44.826104][ T4866] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 44.827597][ T4866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 44.828863][ T4866] IPv6: NLM_F_CREATE should be set when creating new route [ 44.829926][ T4866] IPv6: NLM_F_CREATE should be set when creating new route [ 44.834118][ T4866] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 44.835454][ T4866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.472542][ T4871] ======================================================= [ 45.472542][ T4871] WARNING: The mand mount option has been deprecated and [ 45.472542][ T4871] and is ignored by this kernel. Remove the mand [ 45.472542][ T4871] option from the mount to silence this warning. [ 45.472542][ T4871] ======================================================= [ 45.494269][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.495748][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.516966][ T4878] binder: 4876:4878 tried to acquire reference to desc 0, got 1 instead [ 45.519728][ T4878] binder: 4876:4878 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.521996][ T4878] binder: 4878 RLIMIT_NICE not set [ 45.522981][ T4878] binder: 4878 RLIMIT_NICE not set [ 45.524132][ T4878] binder: 4878 RLIMIT_NICE not set [ 45.526448][ T112] binder: undelivered TRANSACTION_COMPLETE [ 45.538937][ T112] binder: undelivered TRANSACTION_COMPLETE [ 45.540296][ T112] binder: undelivered transaction 6, process died. [ 45.658731][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.660292][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.869717][ T4889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.155'. [ 46.318654][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.321952][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.326791][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.329163][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.884059][ T4389] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.943105][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 46.943114][ T27] audit: type=1326 audit(46.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 46.947731][ T27] audit: type=1326 audit(46.930:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 46.978903][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.993205][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.999095][ T27] audit: type=1326 audit(46.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.003281][ T27] audit: type=1326 audit(46.990:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.008113][ T27] audit: type=1326 audit(46.990:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.019683][ T27] audit: type=1326 audit(46.990:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.071711][ T4389] usb 1-1: Using ep0 maxpacket: 8 [ 47.231436][ T27] audit: type=1326 audit(46.990:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.326340][ T27] audit: type=1326 audit(46.990:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.409243][ T4389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.411201][ T4389] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 47.412798][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.416103][ T4389] usb 1-1: config 0 descriptor?? [ 47.417323][ T27] audit: type=1326 audit(47.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.441825][ T4904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 47.448472][ T27] audit: type=1326 audit(47.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 47.507382][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.515132][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.528012][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.529556][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.631525][ T4389] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 47.976263][ T4925] input: syz1 as /devices/virtual/input/input3 [ 48.138895][ T4925] netlink: 36 bytes leftover after parsing attributes in process `syz.4.167'. [ 48.233130][ T4366] usb 1-1: USB disconnect, device number 3 [ 48.291646][ T4929] block nbd1: NBD_DISCONNECT [ 48.292680][ T4929] block nbd1: Send disconnect failed -107 [ 48.294228][ T4928] block nbd1: Disconnected due to user request. [ 48.295450][ T4928] block nbd1: shutting down sockets [ 48.385883][ T4935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.389193][ T4935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.233524][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.235154][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.379944][ T4957] binder: 4956:4957 tried to acquire reference to desc 0, got 1 instead [ 49.727641][ T4959] binder: 4956:4959 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.730001][ T4959] binder: 4959 RLIMIT_NICE not set [ 49.734329][ T4959] binder: 4959 RLIMIT_NICE not set [ 49.735535][ T4959] binder: 4959 RLIMIT_NICE not set [ 50.231824][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 50.243552][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 50.244496][ T4366] binder: undelivered transaction 12, process died. [ 50.343173][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 51.387454][ T4311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 51.417053][ T5002] hugetlbfs: Bad value 'V' for mount option 'nr_inodes' [ 51.417053][ T5002] [ 51.582107][ T4311] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 51.583654][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.592305][ T4311] pwc: Logitech QuickCam Zoom USB webcam detected. [ 51.816579][ T4311] pwc: Failed to set LED on/off time (-71) [ 51.818327][ T4311] pwc: send_video_command error -71 [ 51.819095][ T4311] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 51.820553][ T4311] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 51.838957][ T4311] usb 1-1: USB disconnect, device number 4 [ 51.862641][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.865053][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.255059][ T5027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.205'. [ 52.595512][ T5034] block device autoloading is deprecated and will be removed. [ 54.689989][ T5076] loop8: detected capacity change from 0 to 7 [ 54.695697][ T5076] Dev loop8: unable to read RDB block 7 [ 54.696850][ T5076] loop8: unable to read partition table [ 54.697982][ T5076] loop8: partition table beyond EOD, truncated [ 54.699061][ T5076] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 54.796541][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 54.853325][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 54.855167][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.974816][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.814951][ T5123] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 56.142121][ T5175] device syzkaller1 entered promiscuous mode [ 56.503785][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 57.908056][ T5209] vhci_hcd: invalid port number 0 [ 58.464850][ T47] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 59.064474][ T5219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 59.125159][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.141124][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.777320][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.779874][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.920909][ T4374] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 60.202849][ T4374] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 60.204404][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.206630][ T4374] usb 1-1: config 0 descriptor?? [ 60.410484][ T4374] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 60.412201][ T4374] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 60.413666][ T4374] [drm:udl_init] *ERROR* Selecting channel failed [ 60.420325][ T4374] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 60.422756][ T4374] [drm] Initialized udl on minor 2 [ 60.425065][ T4374] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 60.427320][ T4374] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 60.444676][ T4374] usb 1-1: USB disconnect, device number 5 [ 60.448302][ T4380] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 60.450410][ T4380] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 60.452774][ T4380] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 60.533382][ T5272] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 60.874607][ T5286] xt_l2tp: invalid flags combination: 0 [ 60.887899][ T5286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 62.315059][ T5321] fuse: Bad value for 'group_id' [ 62.762788][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 63.370773][ T5325] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 64.747746][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.748964][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.785638][ T14] cfg80211: failed to load regulatory.db [ 66.429618][ T5387] raw_sendmsg: syz.4.305 forgot to set AF_INET. Fix it! [ 66.776218][ T5396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.510676][ T5400] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.517720][ T5396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.584157][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.587062][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.796351][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 68.796360][ T27] audit: type=1326 audit(68.780:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.0.318" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b3a8 code=0x7ffc0000 [ 68.806710][ T27] audit: type=1326 audit(68.780:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.0.318" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=46 compat=0 ip=0xffffae55b3a8 code=0x7ffc0000 [ 68.844754][ T27] audit: type=1326 audit(68.780:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.0.318" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55b3a8 code=0x7ffc0000 [ 69.811688][ T5448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 70.983598][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.985354][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.534138][ T5499] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 72.860614][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.862306][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.155616][ T5554] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 75.323776][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 75.354925][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.661023][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.705244][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.709161][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.745731][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.748730][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.203079][ T27] audit: type=1326 audit(76.190:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.341605][ T27] audit: type=1326 audit(76.330:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa7159794 code=0x7ffc0000 [ 76.371481][ T27] audit: type=1326 audit(76.360:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa715aed0 code=0x7ffc0000 [ 76.372867][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.381652][ T27] audit: type=1326 audit(76.360:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa715aed0 code=0x7ffc0000 [ 76.387389][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.388825][ T27] audit: type=1326 audit(76.370:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.395262][ T27] audit: type=1326 audit(76.370:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.405048][ T27] audit: type=1326 audit(76.370:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.418268][ T27] audit: type=1326 audit(76.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.426155][ T27] audit: type=1326 audit(76.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 76.436384][ T27] audit: type=1326 audit(76.370:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 77.779710][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.784246][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.049677][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.051081][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.371429][ T5617] fuse: Unknown parameter 'grou00000000000000000000' [ 78.801209][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 79.011108][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.366263][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 79.412284][ T5636] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 79.521883][ T5642] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.525506][ T5642] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 79.768989][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 79.801918][ T7] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.804139][ T7] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.806277][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.807284][ T7] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 79.808607][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.821455][ T7] usb 1-1: config 0 descriptor?? [ 79.830100][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.833328][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.241346][ T7] corsair 0003:1B1C:1B34.0001: collection stack underflow [ 80.242659][ T7] corsair 0003:1B1C:1B34.0001: item 0 4 0 12 parsing failed [ 80.244109][ T7] corsair 0003:1B1C:1B34.0001: parse failed [ 80.245104][ T7] corsair: probe of 0003:1B1C:1B34.0001 failed with error -22 [ 80.439244][ T5659] fuse: Unknown parameter 'grou00000000000000000000' [ 80.462311][ T7] usb 1-1: USB disconnect, device number 6 [ 80.766855][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.768393][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.772516][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.773797][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.282215][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 82.331127][ T5698] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 82.639707][ T5686] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 82.783549][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.795509][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.442273][ T5720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.516310][ T5720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.561533][ T5738] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.704509][ T5756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 84.997975][ T5760] binder: 5753:5760 tried to acquire reference to desc 0, got 1 instead [ 84.999998][ T5760] binder_alloc: 5753: pid 5753 spamming oneway? 1 buffers allocated for a total size of 5240 [ 85.003159][ T5760] binder: 5753:5760 got transaction with unaligned buffers size, 5234 [ 85.004626][ T5760] binder: 5753:5760 transaction async to 5753:0 failed 17/29201/-22, size 0-0 line 3295 [ 85.007111][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.562540][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.567588][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.541717][ T5790] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 86.644888][ T5797] binder: 5796:5797 tried to acquire reference to desc 0, got 1 instead [ 86.656527][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.658062][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.659361][ T5797] binder_alloc: 5796: pid 5796 spamming oneway? 1 buffers allocated for a total size of 5240 [ 86.666428][ T5797] binder: 5796:5797 got transaction with unaligned buffers size, 5234 [ 86.668818][ T5797] binder: 5796:5797 transaction async to 5796:0 failed 22/29201/-22, size 0-0 line 3295 [ 86.672592][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.046664][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.055636][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.074777][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.077367][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.422860][ T5815] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 87.450796][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 87.450805][ T27] audit: type=1326 audit(87.429:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 87.467703][ T27] audit: type=1326 audit(87.449:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b15b3a8 code=0x7ffc0000 [ 87.506263][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.535427][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.207380][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.211275][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.570894][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 89.666368][ T5874] binder: 5873:5874 tried to acquire reference to desc 0, got 1 instead [ 89.668248][ T5874] binder: 5873:5874 BC_FREE_BUFFER u0100000000000003 no match [ 89.669508][ T5874] binder: 5873:5874 unknown command 0 [ 89.674629][ T5874] binder: 5873:5874 ioctl c0306201 20004a40 returned -22 [ 89.676128][ T4374] binder: release 5873:5874 transaction 27 out, still active [ 89.677406][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 89.685021][ T4374] binder: send failed reply for transaction 27, target dead [ 90.493571][ T5894] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 90.955798][ T5898] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 91.091376][ T4311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.281699][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 91.422803][ T4311] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 91.424336][ T4311] usb 1-1: config 0 has no interface number 0 [ 91.425319][ T4311] usb 1-1: config 0 interface 101 has no altsetting 0 [ 91.472840][ T5921] binder: tried to use weak ref as strong ref [ 91.474058][ T5921] binder: 5920:5921 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.475842][ T5921] binder: 5920:5921 got transaction to invalid handle, 1 [ 91.477751][ T5921] binder: 5921:5920 cannot find target node [ 91.478837][ T5921] binder: 5920:5921 transaction async to 0:0 failed 30/29201/-22, size 0-0 line 3054 [ 91.481220][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.502460][ T4311] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=91.80 [ 91.504094][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.505396][ T4311] usb 1-1: Product: syz [ 91.506084][ T4311] usb 1-1: Manufacturer: syz [ 91.506839][ T4311] usb 1-1: SerialNumber: syz [ 91.509071][ T4311] usb 1-1: config 0 descriptor?? [ 91.511998][ T4311] ums-cypress 1-1:0.101: USB Mass Storage device detected [ 92.272738][ T4374] usb 1-1: USB disconnect, device number 7 [ 92.400169][ T5943] binder: Unknown parameter 'defcontext' [ 92.772441][ T5931] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.804463][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.806293][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.811119][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.812659][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.242655][ T27] audit: type=1326 audit(93.222:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.257452][ T27] audit: type=1326 audit(93.232:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3759794 code=0x7ffc0000 [ 93.263209][ T27] audit: type=1326 audit(93.242:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa375aed0 code=0x7ffc0000 [ 93.273864][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.275300][ T27] audit: type=1326 audit(93.252:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa375aed0 code=0x7ffc0000 [ 93.281958][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.283438][ T27] audit: type=1326 audit(93.262:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.302904][ T27] audit: type=1326 audit(93.282:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.307027][ T27] audit: type=1326 audit(93.282:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.361676][ T5961] binder: 5960:5961 got transaction to invalid handle, 1 [ 93.362793][ T5961] binder: 5961:5960 cannot find target node [ 93.363756][ T5961] binder: 5960:5961 transaction async to 0:0 failed 34/29201/-22, size 0-0 line 3054 [ 93.371587][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.424175][ T27] audit: type=1326 audit(93.372:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.429821][ T27] audit: type=1326 audit(93.372:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 93.990687][ T27] audit: type=1326 audit(93.962:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 94.983283][ T5983] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.068616][ T5993] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 95.117981][ T5998] binder: 5997:5998 got transaction to invalid handle, 1 [ 95.119200][ T5998] binder: 5998:5997 cannot find target node [ 95.120091][ T5998] binder: 5997:5998 transaction async to 0:0 failed 38/29201/-22, size 0-0 line 3054 [ 95.127595][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.236614][ T6007] netlink: 56 bytes leftover after parsing attributes in process `syz.4.499'. [ 96.893092][ T6036] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.080297][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.090397][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.341783][ T6058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.514'. [ 98.425880][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.427419][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.462670][ T6079] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 98.481813][ T6081] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.546414][ T6073] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.589965][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.594890][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.075426][ T6106] netlink: 56 bytes leftover after parsing attributes in process `syz.0.531'. [ 100.901838][ T6134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.968141][ T6148] binder: 6147:6148 tried to acquire reference to desc 0, got 1 instead [ 100.970147][ T6148] binder_alloc: 6147: binder_alloc_buf, no vma [ 100.975623][ T6148] binder: cannot allocate buffer: vma cleared, target dead or dying [ 100.975666][ T6148] binder: 6147:6148 transaction async to 6147:0 failed 43/29189/-3, size 0-0 line 3239 [ 100.983656][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 101.346665][ T6154] netlink: 56 bytes leftover after parsing attributes in process `syz.3.545'. [ 101.699956][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.548'. [ 102.182034][ T6167] usb usb7: usbfs: process 6167 (syz.0.553) did not claim interface 0 before use [ 102.229741][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 102.918575][ T6197] netlink: 56 bytes leftover after parsing attributes in process `syz.2.562'. [ 103.177302][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.181232][ T6189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.366236][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 103.371909][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 104.016335][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 104.034965][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 104.964444][ T6238] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.143945][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.583'. [ 105.948012][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 106.628364][ T6286] fuse: Bad value for 'rootmode' [ 107.200241][ T6292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.261431][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.261547][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.433744][ T6319] binder: 6318:6319 tried to acquire reference to desc 0, got 1 instead [ 107.435634][ T6319] binder_alloc: 6318: binder_alloc_buf, no vma [ 107.439291][ T6319] binder: cannot allocate buffer: vma cleared, target dead or dying [ 107.439328][ T6319] binder: 6318:6319 transaction async to 6318:0 failed 48/29189/-3, size 0-0 line 3239 [ 107.443402][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 107.681058][ T6325] __nla_validate_parse: 2 callbacks suppressed [ 107.681070][ T6325] netlink: 56 bytes leftover after parsing attributes in process `syz.4.606'. [ 108.922170][ T6337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.133563][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.135042][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.023349][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 110.024905][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 110.029029][ T6368] ubi: mtd0 is already attached to ubi31 [ 110.189657][ T6370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.623'. [ 110.370802][ T4396] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.093486][ T4396] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 111.108262][ T4396] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 111.204208][ T4396] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 111.208075][ T4396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.212445][ T4396] usb 1-1: Product: syz [ 111.241159][ T4396] usb 1-1: Manufacturer: syz [ 111.242801][ T4396] usb 1-1: SerialNumber: syz [ 111.292273][ T6379] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.347757][ T4396] usb 1-1: config 0 descriptor?? [ 111.349789][ T6362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.351485][ T6362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.579952][ T6405] binder: tried to use weak ref as strong ref [ 111.583057][ T6362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.584202][ T6362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.585704][ T6405] binder: 6402:6405 Acquire 1 refcount change on invalid ref 0 ret -22 [ 111.587281][ T6405] binder: 6402:6405 got transaction to invalid handle, 1 [ 111.588638][ T6405] binder: 6405:6402 cannot find target node [ 111.608934][ T6405] binder: 6402:6405 transaction async to 0:0 failed 51/29201/-22, size 0-0 line 3054 [ 111.614579][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.643576][ T6407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.636'. [ 113.020832][ T6419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.043951][ T4396] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 113.056737][ T4396] dm9601 1-1:0.0 eth0: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 44:b1:6e:df:d9:0a [ 113.068732][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 113.069792][ T4396] usb 1-1: USB disconnect, device number 8 [ 113.075796][ T6435] binder: BINDER_SET_CONTEXT_MGR already set [ 113.085446][ T6435] binder: 6433:6435 ioctl 4018620d 20004a80 returned -16 [ 113.090156][ T4396] dm9601 1-1:0.0 eth0: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 113.336898][ T6453] netlink: 56 bytes leftover after parsing attributes in process `syz.4.655'. [ 114.218169][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 114.219740][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 114.270399][ T6463] ubi: mtd0 is already attached to ubi31 [ 115.323402][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.4.670'. [ 116.320449][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 117.236456][ T6539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.685'. [ 117.975277][ T6551] binder: BINDER_SET_CONTEXT_MGR already set [ 117.976612][ T6551] binder: 6550:6551 ioctl 4018620d 20004a80 returned -16 [ 118.317738][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 118.397843][ T6562] binder: 6561:6562 tried to acquire reference to desc 0, got 1 instead [ 118.406014][ T6562] binder: 6561:6562 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.408137][ T6562] binder: 6562 RLIMIT_NICE not set [ 118.408975][ T6562] binder: 6562 RLIMIT_NICE not set [ 118.412318][ T6562] binder: 6562 RLIMIT_NICE not set [ 118.416566][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 118.431386][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 118.432385][ T4375] binder: undelivered transaction 61, process died. [ 118.478353][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 119.743216][ T6584] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 119.744551][ T6584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.745732][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 119.746956][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 119.748997][ T6584] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 119.750241][ T6584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.759946][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.703'. [ 120.761654][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.703'. [ 120.765707][ T6598] ubi: mtd0 is already attached to ubi31 [ 121.556099][ T6611] netlink: 56 bytes leftover after parsing attributes in process `syz.3.704'. [ 121.848106][ T6610] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.033262][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 124.778531][ T6652] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 124.779868][ T6652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.781117][ T6652] IPv6: NLM_F_CREATE should be set when creating new route [ 124.782194][ T6652] IPv6: NLM_F_CREATE should be set when creating new route [ 124.783526][ T6656] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 124.784825][ T6656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.681093][ T6671] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 125.932152][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933258][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.159176][ T6675] ceph: No mds server is up or the cluster is laggy [ 127.211056][ T6708] input: syz1 as /devices/virtual/input/input4 [ 127.289155][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.733'. [ 127.836545][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 128.196371][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.206055][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.207708][ T6728] fuse: Unknown parameter '0x0000000000000004' [ 128.215139][ T6730] binder: 6729:6730 tried to acquire reference to desc 0, got 1 instead [ 128.218038][ T6730] binder: 6729:6730 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 128.220038][ T6730] binder: 6730 RLIMIT_NICE not set [ 128.221192][ T6730] binder: 6730 RLIMIT_NICE not set [ 128.222104][ T6730] binder: 6730 RLIMIT_NICE not set [ 128.223386][ T4396] binder: undelivered TRANSACTION_COMPLETE [ 128.241299][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 128.242524][ T4380] binder: undelivered transaction 67, process died. [ 128.242579][ T6732] netlink: 60 bytes leftover after parsing attributes in process `syz.0.745'. [ 129.594866][ T6761] input: syz1 as /devices/virtual/input/input5 [ 129.812133][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.754'. [ 130.096843][ T6771] fuse: Unknown parameter '0x0000000000000004' [ 130.113470][ T6773] binder: 6772:6773 tried to acquire reference to desc 0, got 1 instead [ 130.120499][ T6773] binder: 6772:6773 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.136273][ T6773] binder: 6773 RLIMIT_NICE not set [ 130.138652][ T6773] binder: 6773 RLIMIT_NICE not set [ 130.139775][ T6773] binder: 6773 RLIMIT_NICE not set [ 130.151575][ T4441] binder: undelivered TRANSACTION_COMPLETE [ 130.167827][ T6762] ceph: No mds server is up or the cluster is laggy [ 130.172359][ T4441] binder: undelivered TRANSACTION_COMPLETE [ 130.173403][ T4441] binder: undelivered transaction 73, process died. [ 130.204376][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.211547][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.282838][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.284344][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.734061][ T27] audit: type=1326 audit(130.712:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 130.754002][ T27] audit: type=1326 audit(130.732:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715b3a8 code=0x7ffc0000 [ 130.827692][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.829603][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.468348][ T6806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'. [ 131.587179][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.594300][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.676872][ T6812] fuse: Unknown parameter '0x0000000000000004' [ 131.822380][ T4441] binder: undelivered TRANSACTION_COMPLETE [ 131.842936][ T4441] binder: undelivered TRANSACTION_COMPLETE [ 131.843908][ T4441] binder: undelivered transaction 79, process died. [ 132.136941][ T6831] input: syz1 as /devices/virtual/input/input6 [ 132.828280][ T6813] ceph: No mds server is up or the cluster is laggy [ 132.968121][ T6841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.780'. [ 133.064569][ T6844] fuse: Unknown parameter '0x0000000000000004' [ 133.124543][ T4396] binder: release 6847:6848 transaction 84 in, still active [ 134.335629][ T6882] fuse: Unknown parameter '0x0000000000000004' [ 134.431033][ T6885] input: syz1 as /devices/virtual/input/input7 [ 134.950301][ T6894] binder_user_error: 9 callbacks suppressed [ 134.950311][ T6894] binder: 6887:6894 tried to acquire reference to desc 0, got 1 instead [ 134.955765][ T6894] binder: 6887:6894 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.957856][ T6894] binder: 6894 RLIMIT_NICE not set [ 134.958706][ T6894] binder: 6894 RLIMIT_NICE not set [ 134.964676][ T4396] binder_debug: 3 callbacks suppressed [ 134.964684][ T4396] binder: release 6887:6894 transaction 89 in, still active [ 134.966847][ T4396] binder: send failed reply for transaction 89 to 6887:6894 [ 134.986288][ T4493] binder: undelivered TRANSACTION_COMPLETE [ 134.987334][ T4493] binder: undelivered TRANSACTION_ERROR: 29189 [ 135.115677][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.748851][ T6901] ceph: No mds server is up or the cluster is laggy [ 135.811061][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.4.803'. [ 135.921022][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.951590][ T6920] 9pnet_fd: Insufficient options for proto=fd [ 136.093782][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.095822][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.382166][ T27] audit: type=1326 audit(136.362:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.397452][ T27] audit: type=1326 audit(136.372:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3759794 code=0x7ffc0000 [ 136.406495][ T27] audit: type=1326 audit(136.382:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa375aed0 code=0x7ffc0000 [ 136.410588][ T27] audit: type=1326 audit(136.382:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa375aed0 code=0x7ffc0000 [ 136.418380][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.424180][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.427816][ T27] audit: type=1326 audit(136.402:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.437670][ T27] audit: type=1326 audit(136.412:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.443422][ T27] audit: type=1326 audit(136.422:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.452795][ T27] audit: type=1326 audit(136.422:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.465075][ T27] audit: type=1326 audit(136.422:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.468744][ T27] audit: type=1326 audit(136.422:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffffa375b3a8 code=0x7ffc0000 [ 136.905298][ T6945] input: syz1 as /devices/virtual/input/input8 [ 138.065511][ T6958] ceph: No mds server is up or the cluster is laggy [ 138.122564][ T6965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.819'. [ 138.372761][ T6977] 9pnet_fd: Insufficient options for proto=fd [ 139.379232][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.393609][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.408303][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.421011][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.797826][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.799940][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.822563][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 140.261946][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 141.821524][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 142.291777][ T7057] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 142.418952][ T7077] netlink: 56 bytes leftover after parsing attributes in process `syz.0.856'. [ 142.918809][ T7089] 9pnet_fd: Insufficient options for proto=fd [ 144.203994][ T7106] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.527947][ T7131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.877'. [ 144.729988][ T7132] input: syz1 as /devices/virtual/input/input9 [ 145.703999][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.881'. [ 146.426174][ T7154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 146.673233][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.891'. [ 147.232444][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 147.928900][ T7192] input: syz1 as /devices/virtual/input/input10 [ 148.491841][ T4335] Bluetooth: hci1: command 0x0406 tx timeout [ 148.491864][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 148.491880][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 148.741565][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 149.117089][ T7211] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.300860][ T7227] netlink: 56 bytes leftover after parsing attributes in process `syz.4.905'. [ 149.654770][ T4380] kernel write not supported for file /snd/seq (pid: 4380 comm: kworker/1:5) [ 149.909644][ T7242] input: syz1 as /devices/virtual/input/input11 [ 150.852525][ T7250] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.246191][ T4441] kernel write not supported for file /snd/seq (pid: 4441 comm: kworker/0:9) [ 151.424553][ T7288] netlink: 56 bytes leftover after parsing attributes in process `syz.4.928'. [ 151.929993][ T7299] binder: 7298:7299 got transaction to invalid handle, 1 [ 151.931505][ T7299] binder: 7299:7298 cannot find target node [ 151.932606][ T7299] binder: 7298:7299 transaction call to 0:0 failed 93/29201/-22, size 0-0 line 3054 [ 151.935273][ T7299] binder: 7298:7299 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 151.937355][ T7299] binder: 7299 RLIMIT_NICE not set [ 151.938204][ T7299] binder: 7298:7299 ioctl c0306201 20000240 returned -11 [ 151.940021][ T7299] binder: 7298:7299 got reply transaction with no transaction stack [ 151.954136][ T7299] binder: 7298:7299 transaction reply to 0:0 failed 94/29201/-71, size 0-0 line 2955 [ 151.956400][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.966381][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.730578][ T7308] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.842340][ T7314] input: syz1 as /devices/virtual/input/input12 [ 153.946799][ T7338] binder: 7337:7338 got transaction to invalid handle, 1 [ 153.948687][ T7338] binder: 7338:7337 cannot find target node [ 153.949847][ T7338] binder: 7337:7338 transaction call to 0:0 failed 98/29201/-22, size 0-0 line 3054 [ 153.952860][ T7338] binder: 7337:7338 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.955358][ T7338] binder: 7338 RLIMIT_NICE not set [ 153.956381][ T7338] binder: 7337:7338 ioctl c0306201 20000240 returned -11 [ 153.957937][ T7338] binder: 7337:7338 got reply transaction with no transaction stack [ 153.966201][ T7338] binder: 7337:7338 transaction reply to 0:0 failed 99/29201/-71, size 0-0 line 2955 [ 153.968566][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.977393][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.047618][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 154.145846][ T7345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.946'. [ 154.513894][ T4493] kernel write not supported for file /snd/seq (pid: 4493 comm: kworker/1:6) [ 155.074836][ T7366] binder: 7364:7366 got transaction to invalid handle, 1 [ 155.081247][ T7366] binder: 7364:7366 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 155.087314][ T7366] binder: 7364:7366 ioctl c0306201 20000240 returned -11 [ 155.140693][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'. [ 155.255810][ T7376] input: syz1 as /devices/virtual/input/input13 [ 155.957231][ T4441] kernel write not supported for file /snd/seq (pid: 4441 comm: kworker/0:9) [ 156.968258][ T7406] binder_user_error: 2 callbacks suppressed [ 156.968269][ T7406] binder: tried to use weak ref as strong ref [ 156.970320][ T7406] binder: 7404:7406 Acquire 1 refcount change on invalid ref 0 ret -22 [ 156.978380][ T7406] binder: 7404:7406 got transaction to invalid handle, 1 [ 156.979662][ T7406] binder_debug: 5 callbacks suppressed [ 156.979670][ T7406] binder: 7406:7404 cannot find target node [ 156.998259][ T7406] binder: 7404:7406 transaction call to 0:0 failed 107/29201/-22, size 0-0 line 3054 [ 157.003436][ T7406] binder: 7404:7406 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 157.007980][ T7406] binder: 7406 RLIMIT_NICE not set [ 157.010623][ T7406] binder: 7404:7406 got reply transaction with no transaction stack [ 157.018773][ T7406] binder: 7404:7406 transaction reply to 0:0 failed 108/29201/-71, size 0-0 line 2955 [ 157.023017][ T7060] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.035818][ T7060] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.207783][ T7414] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 157.209289][ T7414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.210476][ T7414] IPv6: NLM_F_CREATE should be set when creating new route [ 157.211693][ T7414] IPv6: NLM_F_CREATE should be set when creating new route [ 157.407247][ T7409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.971'. [ 158.418811][ T7443] binder: tried to use weak ref as strong ref [ 158.420086][ T7443] binder: 7442:7443 Acquire 1 refcount change on invalid ref 0 ret -22 [ 158.425452][ T7443] binder: 7442:7443 got transaction to invalid handle, 1 [ 158.426828][ T7443] binder: 7443:7442 cannot find target node [ 158.427985][ T7443] binder: 7442:7443 transaction call to 0:0 failed 111/29201/-22, size 0-0 line 3054 [ 158.429411][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.984'. [ 158.430210][ T7443] binder: 7442:7443 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 158.515513][ T7443] binder: 7442:7443 transaction reply to 0:0 failed 112/29201/-71, size 0-0 line 2955 [ 158.588754][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.848699][ T7060] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.863489][ T7449] 9pnet_fd: Insufficient options for proto=fd [ 159.371135][ T7461] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 159.372672][ T7461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.373758][ T7461] IPv6: NLM_F_CREATE should be set when creating new route [ 159.374854][ T7461] IPv6: NLM_F_CREATE should be set when creating new route [ 160.424176][ T7484] input: syz1 as /devices/virtual/input/input14 [ 160.560128][ T7486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.996'. [ 160.817502][ T7490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.999'. [ 161.764616][ T7500] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 161.766274][ T7500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.322451][ T7517] binder_user_error: 8 callbacks suppressed [ 162.322460][ T7517] binder: 7516:7517 tried to acquire reference to desc 0, got 1 instead [ 162.325005][ T7517] binder_alloc: 7516: binder_alloc_buf, no vma [ 162.325994][ T7517] binder_debug: 5 callbacks suppressed [ 162.326003][ T7517] binder: cannot allocate buffer: vma cleared, target dead or dying [ 162.326909][ T7517] binder: 7516:7517 transaction call to 7516:0 failed 121/29189/-3, size 0-0 line 3239 [ 162.330501][ T7517] binder: 7516:7517 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 162.330513][ T7517] binder: 7517 RLIMIT_NICE not set [ 162.330520][ T7517] binder: 7516:7517 ioctl c0306201 20000240 returned -11 [ 162.330608][ T7517] binder: 7516:7517 got reply transaction with no transaction stack [ 162.330616][ T7517] binder: 7516:7517 transaction reply to 0:0 failed 122/29201/-71, size 0-0 line 2955 [ 162.333875][ T4405] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.455731][ T1514] binder: undelivered TRANSACTION_ERROR: 29189 [ 162.739057][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1010'. [ 163.705076][ T7544] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 163.706494][ T7544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.708277][ T7544] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 163.709520][ T7544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.194244][ T7554] binder: BINDER_SET_CONTEXT_MGR already set [ 164.195353][ T7554] binder: 7552:7554 ioctl 4018620d 20000040 returned -16 [ 164.279303][ T7554] binder: tried to use weak ref as strong ref [ 164.280273][ T7554] binder: 7552:7554 Acquire 1 refcount change on invalid ref 0 ret -22 [ 164.305329][ T7554] binder: 7552:7554 got transaction to invalid handle, 1 [ 164.306519][ T7554] binder: 7554:7552 cannot find target node [ 164.307546][ T7554] binder: 7552:7554 transaction call to 0:0 failed 125/29201/-22, size 0-0 line 3054 [ 164.309841][ T7554] binder: 7552:7554 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 164.363115][ T7554] binder: 7554 RLIMIT_NICE not set [ 164.364374][ T7554] binder: 7552:7554 ioctl c0306201 20000240 returned -11 [ 164.380992][ T7559] input: syz1 as /devices/virtual/input/input15 [ 164.549307][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1017'. [ 164.635047][ T7554] binder: 7552:7554 got reply transaction with no transaction stack [ 164.646948][ T7554] binder: 7552:7554 transaction reply to 0:0 failed 126/29201/-71, size 0-0 line 2955 [ 164.654905][ T7060] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.668740][ T7060] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.640086][ T7600] binder_alloc: 7599: binder_alloc_buf, no vma [ 166.645339][ T7600] binder: 7599:7600 ioctl c0306201 20000240 returned -11 [ 167.251380][ T7619] input: syz1 as /devices/virtual/input/input16 [ 167.405289][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1039'. [ 167.670062][ T7628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1043'. [ 168.812237][ T7644] binder_user_error: 4 callbacks suppressed [ 168.812248][ T7644] binder: 7642:7644 tried to acquire reference to desc 0, got 1 instead [ 168.816825][ T7644] binder: 7642:7644 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 168.824246][ T7644] binder: 7644 RLIMIT_NICE not set [ 168.826435][ T7644] binder: 7644 RLIMIT_NICE not set [ 168.828672][ T7644] binder: 7644 RLIMIT_NICE not set [ 168.835841][ T7647] 9pnet_fd: Insufficient options for proto=fd [ 168.839406][ T7060] binder_debug: 5 callbacks suppressed [ 168.839419][ T7060] binder: undelivered TRANSACTION_COMPLETE [ 168.915228][ T7060] binder: undelivered TRANSACTION_COMPLETE [ 168.916210][ T7060] binder: undelivered transaction 138, process died. [ 169.132707][ T7659] binder: 7658:7659 got transaction to invalid handle, 1 [ 169.133942][ T7659] binder: 7659:7658 cannot find target node [ 169.142501][ T7659] binder: 7658:7659 transaction async to 0:0 failed 142/29201/-22, size 0-0 line 3054 [ 169.147983][ T4493] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.217172][ T7665] input: syz1 as /devices/virtual/input/input17 [ 169.442741][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1055'. [ 169.545976][ T7662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1056'. [ 170.205364][ T7687] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1060'. [ 170.613607][ T7689] binder: tried to use weak ref as strong ref [ 170.622071][ T7689] binder: 7688:7689 Acquire 1 refcount change on invalid ref 0 ret -22 [ 170.676159][ T7689] binder: 7688:7689 got transaction to invalid handle, 1 [ 170.679015][ T7689] binder: 7689:7688 cannot find target node [ 170.680016][ T7689] binder: 7688:7689 transaction call to 0:0 failed 145/29201/-22, size 0-0 line 3054 [ 170.689108][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.128739][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1068'. [ 171.332538][ T7726] input: syz1 as /devices/virtual/input/input18 [ 171.355418][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1071'. [ 172.018798][ T7732] binder: tried to use weak ref as strong ref [ 172.020055][ T7732] binder: 7732:7731 cannot find target node [ 172.143175][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.144743][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.302160][ T7746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1080'. [ 172.821433][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1084'. [ 173.516321][ T7779] input: syz1 as /devices/virtual/input/input19 [ 173.637256][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1092'. [ 174.133003][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1096'. [ 174.137039][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1096'. [ 174.176047][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.177659][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.836997][ T7803] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 174.838245][ T7803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.839858][ T7803] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 174.841286][ T7803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.851820][ T7805] binder: BINDER_SET_CONTEXT_MGR already set [ 174.853042][ T7805] binder: 7804:7805 ioctl 4018620d 20000040 returned -16 [ 174.854612][ T7805] binder_user_error: 5 callbacks suppressed [ 174.854617][ T7805] binder: 7804:7805 got transaction to invalid handle, 1 [ 174.856765][ T7805] binder_debug: 5 callbacks suppressed [ 174.856778][ T7805] binder: 7805:7804 cannot find target node [ 174.858604][ T7805] binder: 7804:7805 transaction call to 0:0 failed 154/29201/-22, size 0-0 line 3054 [ 174.860418][ T7805] binder: 7804:7805 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 174.863891][ T7805] binder: 7805 RLIMIT_NICE not set [ 174.864766][ T7805] binder: 7804:7805 ioctl c0306201 20000240 returned -11 [ 174.866591][ T7805] binder: 7804:7805 got reply transaction with no transaction stack [ 174.868079][ T7805] binder: 7804:7805 transaction reply to 0:0 failed 155/29201/-71, size 0-0 line 2955 [ 174.877880][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.960037][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.542106][ T7824] __nla_validate_parse: 1 callbacks suppressed [ 175.542118][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 175.545811][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 175.771436][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.773135][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.963025][ T7838] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 175.964450][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.966083][ T7838] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 175.967327][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.045248][ T7844] binder: BINDER_SET_CONTEXT_MGR already set [ 176.046523][ T7844] binder: 7842:7844 ioctl 4018620d 20000040 returned -16 [ 176.048036][ T7844] binder: 7842:7844 got transaction to invalid handle, 1 [ 176.049266][ T7844] binder: 7844:7842 cannot find target node [ 176.050361][ T7844] binder: 7842:7844 transaction call to 0:0 failed 158/29201/-22, size 0-0 line 3054 [ 176.052733][ T7844] binder: 7842:7844 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 176.055668][ T7844] binder: 7844 RLIMIT_NICE not set [ 176.063037][ T7844] binder: 7842:7844 ioctl c0306201 20000240 returned -11 [ 176.065582][ T7844] binder: 7842:7844 got reply transaction with no transaction stack [ 176.067140][ T7844] binder: 7842:7844 transaction reply to 0:0 failed 159/29201/-71, size 0-0 line 2955 [ 176.081002][ T4441] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.093960][ T4441] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.217313][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1115'. [ 176.727103][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 176.729897][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 177.065227][ T7870] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 177.066687][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.068394][ T7870] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 177.069660][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.392333][ T7873] binder: BINDER_SET_CONTEXT_MGR already set [ 177.395959][ T7873] binder: 7872:7873 ioctl 4018620d 20000040 returned -16 [ 177.398077][ T7873] binder: 7872:7873 got transaction to invalid handle, 1 [ 177.399584][ T7873] binder: 7872:7873 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 177.402211][ T7873] binder: 7872:7873 ioctl c0306201 20000240 returned -11 [ 177.703956][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 177.706971][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 177.720969][ T1514] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.877192][ T7896] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1132'. [ 177.918877][ T1514] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 177.920577][ T1514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 177.923215][ T1514] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 177.946261][ T1514] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 177.952982][ T1514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.048206][ T1514] usb 1-1: Product: syz [ 178.049338][ T1514] usb 1-1: Manufacturer: syz [ 178.057870][ T1514] usb 1-1: SerialNumber: syz [ 178.148687][ T1514] usb 1-1: config 0 descriptor?? [ 178.175124][ T7881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.198324][ T1514] dm9601: probe of 1-1:0.0 failed with error -22 [ 178.382141][ T7904] binder: 7903:7904 ioctl c0306201 20000240 returned -11 [ 178.927172][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 178.933311][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 179.693270][ T7935] binder: 7934:7935 ioctl c0306201 20000240 returned -11 [ 180.458716][ T7965] binder_user_error: 10 callbacks suppressed [ 180.458726][ T7965] binder: 7961:7965 got transaction to invalid handle, 1 [ 180.461395][ T7965] binder_debug: 15 callbacks suppressed [ 180.461408][ T7965] binder: 7965:7961 cannot find target node [ 180.463158][ T7965] binder: 7961:7965 transaction call to 0:0 failed 176/29201/-22, size 0-0 line 3054 [ 180.466074][ T7965] binder: 7961:7965 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 180.466530][ T7] usb 1-1: USB disconnect, device number 9 [ 180.468160][ T7965] binder: 7965 RLIMIT_NICE not set [ 180.478696][ T7965] binder: 7961:7965 ioctl c0306201 20000240 returned -11 [ 180.484678][ T7965] binder: 7961:7965 got reply transaction with no transaction stack [ 180.485917][ T7965] binder: 7961:7965 transaction reply to 0:0 failed 177/29201/-71, size 0-0 line 2955 [ 180.533599][ T7962] ceph: No mds server is up or the cluster is laggy [ 180.604422][ T4311] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.618857][ T1514] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.313398][ T7987] __nla_validate_parse: 3 callbacks suppressed [ 181.313411][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 181.318945][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 181.552123][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.570602][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.599744][ T8000] binder: BINDER_SET_CONTEXT_MGR already set [ 181.601432][ T8000] binder: 7999:8000 ioctl 4018620d 20000040 returned -16 [ 181.657717][ T8002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1170'. [ 181.920583][ T8000] binder: 7999:8000 got transaction to invalid handle, 1 [ 181.921969][ T8000] binder: 8000:7999 cannot find target node [ 181.922883][ T8000] binder: 7999:8000 transaction call to 0:0 failed 179/29201/-22, size 0-0 line 3054 [ 181.924813][ T8000] binder: 7999:8000 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 181.926857][ T8000] binder: 8000 RLIMIT_NICE not set [ 181.927698][ T8000] binder: 7999:8000 ioctl c0306201 20000240 returned -11 [ 181.928964][ T8000] binder: 7999:8000 got reply transaction with no transaction stack [ 181.930376][ T8000] binder: 7999:8000 transaction reply to 0:0 failed 180/29201/-71, size 0-0 line 2955 [ 181.932758][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.940351][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.141948][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 182.144713][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 182.334066][ T8020] ceph: No mds server is up or the cluster is laggy [ 182.415912][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.417537][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.390602][ T8039] binder: BINDER_SET_CONTEXT_MGR already set [ 183.392245][ T8039] binder: 8038:8039 ioctl 4018620d 20000040 returned -16 [ 183.398696][ T8039] binder: 8038:8039 got transaction to invalid handle, 1 [ 183.400268][ T8039] binder: 8038:8039 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 183.406335][ T8039] binder: 8038:8039 ioctl c0306201 20000240 returned -11 [ 183.455512][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.463805][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.603596][ T8053] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1188'. [ 184.242111][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.247011][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.369363][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 184.374556][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 184.443593][ T8074] binder: BINDER_SET_CONTEXT_MGR already set [ 184.444747][ T8074] binder: 8073:8074 ioctl 4018620d 20000040 returned -16 [ 184.446488][ T8074] binder: 8073:8074 ioctl c0306201 20000240 returned -11 [ 185.367831][ T8077] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 185.420254][ T8093] input: syz1 as /devices/virtual/input/input20 [ 185.432488][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1201'. [ 185.964643][ T8103] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1203'. [ 186.261633][ T8105] binder_user_error: 8 callbacks suppressed [ 186.261643][ T8105] binder: 8104:8105 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 186.270301][ T8105] binder: 8104:8105 got transaction to invalid handle, 1 [ 186.272631][ T8105] binder_debug: 13 callbacks suppressed [ 186.272641][ T8105] binder: 8105:8104 cannot find target node [ 186.274529][ T8105] binder: 8104:8105 transaction call to 0:0 failed 192/29201/-22, size 0-0 line 3054 [ 186.317789][ T8105] binder: 8104:8105 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 186.320044][ T8105] binder: 8105 RLIMIT_NICE not set [ 186.327479][ T8105] binder: 8104:8105 ioctl c0306201 20000240 returned -11 [ 186.329001][ T8105] binder: 8104:8105 got reply transaction with no transaction stack [ 186.330334][ T8105] binder: 8104:8105 transaction reply to 0:0 failed 193/29201/-71, size 0-0 line 2955 [ 186.335102][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.343240][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.370481][ T8113] [ 186.370860][ T8113] ====================================================== [ 186.371963][ T8113] WARNING: possible circular locking dependency detected [ 186.373144][ T8113] syzkaller #0 Not tainted [ 186.373842][ T8113] ------------------------------------------------------ [ 186.374963][ T8113] syz.0.1209/8113 is trying to acquire lock: [ 186.375954][ T8113] ffff0000d6259f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 186.377832][ T8113] [ 186.377832][ T8113] but task is already holding lock: [ 186.379035][ T8113] ffff0000d6258c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 186.380550][ T8113] [ 186.380550][ T8113] which lock already depends on the new lock. [ 186.380550][ T8113] [ 186.382215][ T8113] [ 186.382215][ T8113] the existing dependency chain (in reverse order) is: [ 186.383600][ T8113] [ 186.383600][ T8113] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 186.384105][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.384854][ T8113] lock_sock_nested+0x70/0x130 [ 186.386490][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.387187][ T8113] smc_listen_out+0x114/0x3b0 [ 186.389175][ T8113] smc_listen_work+0x1d0/0xde0 [ 186.389941][ T8113] process_one_work+0x7f4/0x13a8 [ 186.390807][ T8113] worker_thread+0x8c8/0xfbc [ 186.391687][ T8113] kthread+0x250/0x2d8 [ 186.392449][ T8113] ret_from_fork+0x10/0x20 [ 186.393262][ T8113] [ 186.393262][ T8113] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 186.394946][ T8113] __lock_acquire+0x293c/0x6544 [ 186.395775][ T8113] lock_acquire+0x20c/0x644 [ 186.396529][ T8113] __flush_work+0xf4/0x1bc [ 186.397353][ T8113] __cancel_work_timer+0x2ec/0x448 [ 186.398231][ T8113] cancel_work_sync+0x24/0x38 [ 186.399107][ T8113] smc_clcsock_release+0x64/0xe8 [ 186.400017][ T8113] __smc_release+0x568/0x6c4 [ 186.400833][ T8113] smc_close_non_accepted+0xd8/0x260 [ 186.401762][ T8113] smc_close_active+0x954/0xcc8 [ 186.402653][ T8113] __smc_release+0x48c/0x6c4 [ 186.403503][ T8113] smc_release+0x258/0x51c [ 186.404346][ T8113] sock_close+0xb4/0x1f8 [ 186.405160][ T8113] __fput+0x1bc/0x7c0 [ 186.405939][ T8113] ____fput+0x20/0x30 [ 186.406707][ T8113] task_work_run+0x1ec/0x270 [ 186.407563][ T8113] do_notify_resume+0x1f70/0x2b0c [ 186.408426][ T8113] el0_svc+0x98/0x138 [ 186.409180][ T8113] el0t_64_sync_handler+0x84/0xf0 [ 186.410149][ T8113] el0t_64_sync+0x18c/0x190 [ 186.411013][ T8113] [ 186.411013][ T8113] other info that might help us debug this: [ 186.411013][ T8113] [ 186.412752][ T8113] Possible unsafe locking scenario: [ 186.412752][ T8113] [ 186.413951][ T8113] CPU0 CPU1 [ 186.414818][ T8113] ---- ---- [ 186.415682][ T8113] lock(sk_lock-AF_SMC/1); [ 186.416440][ T8113] lock((work_completion)(&new_smc->smc_listen_work)); [ 186.417893][ T8113] lock(sk_lock-AF_SMC/1); [ 186.419037][ T8113] lock((work_completion)(&new_smc->smc_listen_work)); [ 186.420181][ T8113] [ 186.420181][ T8113] *** DEADLOCK *** [ 186.420181][ T8113] [ 186.421411][ T8113] 2 locks held by syz.0.1209/8113: [ 186.422280][ T8113] #0: ffff0000f6223210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 186.424009][ T8113] #1: ffff0000d6258c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 186.425631][ T8113] [ 186.425631][ T8113] stack backtrace: [ 186.426625][ T8113] CPU: 0 PID: 8113 Comm: syz.0.1209 Not tainted syzkaller #0 [ 186.427828][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 186.429391][ T8113] Call trace: [ 186.429979][ T8113] dump_backtrace+0x1c8/0x1f4 [ 186.430728][ T8113] show_stack+0x2c/0x3c [ 186.431496][ T8113] __dump_stack+0x30/0x40 [ 186.432276][ T8113] dump_stack_lvl+0xf8/0x160 [ 186.433043][ T8113] dump_stack+0x1c/0x5c [ 186.433786][ T8113] print_circular_bug+0x148/0x1b0 [ 186.434664][ T8113] check_noncircular+0x240/0x2d4 [ 186.435521][ T8113] __lock_acquire+0x293c/0x6544 [ 186.436329][ T8113] lock_acquire+0x20c/0x644 [ 186.437119][ T8113] __flush_work+0xf4/0x1bc [ 186.437880][ T8113] __cancel_work_timer+0x2ec/0x448 [ 186.438719][ T8113] cancel_work_sync+0x24/0x38 [ 186.439515][ T8113] smc_clcsock_release+0x64/0xe8 [ 186.440333][ T8113] __smc_release+0x568/0x6c4 [ 186.441139][ T8113] smc_close_non_accepted+0xd8/0x260 [ 186.442018][ T8113] smc_close_active+0x954/0xcc8 [ 186.442875][ T8113] __smc_release+0x48c/0x6c4 [ 186.443708][ T8113] smc_release+0x258/0x51c [ 186.444442][ T8113] sock_close+0xb4/0x1f8 [ 186.445145][ T8113] __fput+0x1bc/0x7c0 [ 186.445771][ T8113] ____fput+0x20/0x30 [ 186.446432][ T8113] task_work_run+0x1ec/0x270 [ 186.447199][ T8113] do_notify_resume+0x1f70/0x2b0c [ 186.448019][ T8113] el0_svc+0x98/0x138 [ 186.448641][ T8113] el0t_64_sync_handler+0x84/0xf0 [ 186.449389][ T8113] el0t_64_sync+0x18c/0x190 [ 187.371099][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372165][ T2062] ieee802154 phy1 wpan1: encryption failed: -22