last executing test programs: 5.497747025s ago: executing program 0 (id=805): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) 4.841741479s ago: executing program 0 (id=815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x80, 0x0, @mcast2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in=@private=0xa010101}}]}, 0x78}}, 0x0) 4.821895749s ago: executing program 4 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x2400c850) 4.77738585s ago: executing program 4 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d4) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 4.76460454s ago: executing program 0 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 4.76388392s ago: executing program 4 (id=820): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xfb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 4.694695152s ago: executing program 4 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = fsopen(&(0x7f0000000140)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x800, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x209, 0x3ff, 0x2, 0x6, 0x42, 0xfffc, 0x83, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x12, 0x6, 0x2, 0x9, 0x2, 0x0, 0x1, 0x8, 0x2, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x106, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xaa, 0x81, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_emit_ethernet(0x136, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 4.127194544s ago: executing program 4 (id=830): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.894585289s ago: executing program 0 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1c}], 0x1}, 0x4011) 3.761569612s ago: executing program 1 (id=837): socket$igmp6(0xa, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a\x00', @ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) 3.37540568s ago: executing program 0 (id=839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x80002, &(0x7f0000000640)=""/224, 0xe0, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1c}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.32145013s ago: executing program 0 (id=840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x6, 0xc8, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2e, 0xce, 0xf8, 0xff, 0x5c6, 0x6000, 0x181a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x1, 0xe, 0x51, 0xd5fee6fe153f02e8, 0x8, "", [{{0x9, 0x4, 0x68, 0x95, 0x3, 0x2e, 0x5d, 0xf4, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0x9, 0x20}}, {{0x9, 0x5, 0x8, 0x0, 0x1ef, 0x40, 0x0, 0x3, [@generic={0x4c, 0x23, "06895164a675152de73da94e2c07da5f9a4238b044ace08b4a246a4a52d0be32c5ef2602a3acd050480f1a0cfcaef29a6aec30b92525176b1f8fa9a883b71cb5b19a94a4658678ef7f1e"}, @generic={0x3d, 0x8, "78e68b90355422e48e2d85a799db650d860aef3b8840ab1acc92612e653ac0e4928fad662aa861da6d4e0a3465921902389beeaa101eeff8e6c368"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0xc, 0xff, 0x90}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.87406104s ago: executing program 1 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 2.798404601s ago: executing program 2 (id=847): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x0, 0x2}, 0x37, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xf5b1, 0xfffffffd, 0x10000000, 0x8000099, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x1, 0x1], [0x7, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xffffffff, 0x4, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x2, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffff8, 0x12, 0x0, 0x2, 0x3, 0x0, 0x0, 0x8, 0x40000, 0x4, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x4, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x10000, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0xc0, 0xfffffffd, 0x0, 0x3, 0xfffffffc, 0x4, 0xf88], [0x8, 0x0, 0x4, 0x0, 0xfffefffe, 0x6, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x3ff, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 2.42106038s ago: executing program 2 (id=848): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xa}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.313912642s ago: executing program 2 (id=850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x80002, &(0x7f0000000640)=""/224, 0xe0, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1c}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2.313551272s ago: executing program 2 (id=851): syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f2"], 0x0) 2.194940584s ago: executing program 3 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) 2.043073137s ago: executing program 1 (id=853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 2.007946238s ago: executing program 1 (id=854): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0x87, 0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b4b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000077"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.996172328s ago: executing program 3 (id=855): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140), 0x4) 1.91897321s ago: executing program 3 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 1.91854591s ago: executing program 1 (id=857): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xfb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 1.91726228s ago: executing program 3 (id=858): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x0, 0x2}, 0x37, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xf5b1, 0xfffffffd, 0x10000000, 0x8000099, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x1, 0x1], [0x7, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xffffffff, 0x4, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x2, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffff8, 0x12, 0x0, 0x2, 0x3, 0x0, 0x0, 0x8, 0x40000, 0x4, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x4, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x10000, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0xc0, 0xfffffffd, 0x0, 0x3, 0xfffffffc, 0x4, 0xf88], [0x8, 0x0, 0x4, 0x0, 0xfffefffe, 0x6, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x3ff, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 1.813949382s ago: executing program 3 (id=859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000600)={0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2b) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) timer_create(0x3, &(0x7f0000000580)={0x0, 0x31, 0x0, @thr={&(0x7f00000003c0)="7da1ab26adb22d1817433af3f81031ceb0e2770c43c856881baa1e5bcc0ac380406c9cf2f42bbca0fbcbf5873a7d5b52a1fc56ea5689e0aa8b437600af242bb5c5b46af31cabf39026f7087de75248b8c638bd28dcf2ef0c813578a66e5a2e782daa7456db5f7471a6ac2482c092f16f4e8591f7f8ce276841c260512be3b1a0e96343cd6efe5ee7bc862643729d9bc8574cdad1427cf177b6bc7ec4127a5ed6adf7ba83666a8620878380d440d14cbb33526e017ce451b1d390598b3db7", &(0x7f0000000480)="0c16e36c5f2d54044d67e2e398be60817cb7f42912a7c099011c9e5d2d85ec0a586afd49be7386f0f2eff64feb96229c407bd8911a189feade4730ea9b96c5162e81a5588793fed702e90d68764cfe495f10566bb4acfa377ed4579e42484f9cc18c12d75e4fbdb6c8a777fbbc088dfc86568427ccfa6e09e4cf3b3da9a2dfb5cd679c201125680f0385c157706d15d669064191072c0f0425b90058010fa2a31f2fd6e63bb9e08015a895b9ebf10cb04c5c5ef8a639ec19b5722b3ba7"}}, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r5}) 1.781482213s ago: executing program 2 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = fsopen(&(0x7f0000000140)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x800, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x209, 0x3ff, 0x2, 0x6, 0x42, 0xfffc, 0x83, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x12, 0x6, 0x2, 0x9, 0x2, 0x0, 0x1, 0x8, 0x2, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x106, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xaa, 0x81, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_emit_ethernet(0x136, &(0x7f00000006c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000001003afffa880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe80000000000000000000000000f6ffffffffffffffc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a440d97b36f243a656726f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13fd238914de7816db149570fe8ec5a24df8c000000000000000000"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.726972174s ago: executing program 1 (id=861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="afa844c7b7f77bf4aa1c5c43b29a71c2336c8594c3135ee0"], 0xffdd) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r2}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={r2, 0x6, 0x7fff, 0x9, 0xffffffff, 0x3}, &(0x7f0000000900)=0x14) 530.930129ms ago: executing program 4 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1c}], 0x1}, 0x4011) 449.040101ms ago: executing program 3 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 0s ago: executing program 2 (id=864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x80002, &(0x7f0000000640)=""/224, 0xe0, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1c}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 29.319132][ T4314] cgroup: Unknown subsys name 'net' [ 29.575832][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.841391][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.553570][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.555590][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.557187][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.558630][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.560331][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.562502][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.566726][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.568479][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.569933][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.571196][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.572563][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.574452][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.575933][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.577168][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.578362][ T4338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.579598][ T4338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.581243][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.582477][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.584509][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.586022][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.586627][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.587813][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.589768][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.591811][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.601241][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.604898][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.606696][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.626517][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.629968][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.633185][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.745882][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.766683][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.775100][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.780656][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.796760][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.826043][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.827316][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.829278][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.832582][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.834675][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.836308][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.841841][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.843055][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.844868][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.850733][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.851976][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.854168][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.857476][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.858620][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.860089][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.861637][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.862898][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.864644][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.866321][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867471][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.868900][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.878589][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.879889][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.881390][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.888968][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890132][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.891548][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.899272][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.901734][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.906214][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.907823][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909169][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.910866][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.917600][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.919899][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.928029][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.930190][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.932472][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.935578][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.942144][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.956796][ T4337] team0: Port device team_slave_0 added [ 30.958832][ T4335] team0: Port device team_slave_0 added [ 30.960630][ T4334] team0: Port device team_slave_0 added [ 30.962257][ T4337] team0: Port device team_slave_1 added [ 30.967899][ T4327] team0: Port device team_slave_0 added [ 30.969767][ T4335] team0: Port device team_slave_1 added [ 30.971419][ T4328] team0: Port device team_slave_0 added [ 30.973639][ T4334] team0: Port device team_slave_1 added [ 30.977448][ T4327] team0: Port device team_slave_1 added [ 30.982945][ T4328] team0: Port device team_slave_1 added [ 30.994027][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.995172][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.999186][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.007819][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.008945][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.012765][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.015824][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.016964][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.021095][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.023375][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.024663][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.028575][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.031312][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.032425][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.037348][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.041477][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.042652][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.047820][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.051634][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.052736][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.057506][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.060955][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.062118][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.068336][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.070637][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.071716][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.076656][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.134373][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.173374][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.213508][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.214641][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.218573][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.274317][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.313350][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.353192][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.354450][ T4337] Cannot create hsr debugfs directory [ 31.414269][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.453537][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.493169][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.494411][ T4335] Cannot create hsr debugfs directory [ 31.544254][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.593331][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.633169][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.634380][ T4328] Cannot create hsr debugfs directory [ 31.694152][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.743370][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.783355][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.784705][ T4327] Cannot create hsr debugfs directory [ 31.901685][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.934417][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.981381][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.014395][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.064048][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.094876][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.144500][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.177923][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.238392][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.281361][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.320338][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.367305][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.414971][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.417843][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.445124][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.502123][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.548632][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.587176][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.592760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.595076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.608492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.610285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.611871][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.612955][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.617364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.626743][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.645528][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.663408][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 32.663412][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 32.664537][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 32.665590][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 32.666520][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 32.684410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.685950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.687369][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.688459][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.691188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.698556][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.739190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.744448][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.789216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.791005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.796086][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.799783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.806909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.808583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.812239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.817068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.822512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.828470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.832627][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.836815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.838383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.841222][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.845883][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.850405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.851920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.857476][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.859484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.861053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.862445][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.863714][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.867862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.878207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.879816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.881316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.882388][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.887464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.894323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.896152][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.897335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.898757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.906554][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.908424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.910150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.911565][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.912706][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.916149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.917820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.928552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.931040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.932517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.935048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.936672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.938342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.944395][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.952232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.954697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.956172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.961774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.964056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.965911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.967907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.969510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.974594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.975849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.980044][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.982854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.985161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.986720][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.987811][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.989170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.990638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.992737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.001338][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.003801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.005384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.006911][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.007980][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.009384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.010906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.012350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.015431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.024607][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.027482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.029258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.030878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.032591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.037884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.039537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.041126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.042708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.045170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.046686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.050691][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.058713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.060445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.062346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.064885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.066437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.069195][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.071622][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.083705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.085470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.086898][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.088082][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.089417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.092296][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.094422][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.095975][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.097164][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.110204][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.111821][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.130841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.132576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.135377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.137247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.138816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.140460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.141983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.144066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.145663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.147180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.148722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.150181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.206546][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.208106][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.211124][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.226777][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.228255][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.247704][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.249365][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.250773][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.251933][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.254982][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.268132][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.279173][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.280819][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.285452][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.286723][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.299314][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.300890][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.302636][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.305112][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.306784][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.308372][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.310361][ T4334] device veth0_vlan entered promiscuous mode [ 33.314060][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.318750][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.320460][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.328479][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.330172][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.332044][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.334343][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.336403][ T4337] device veth0_vlan entered promiscuous mode [ 33.340047][ T4334] device veth1_vlan entered promiscuous mode [ 33.349981][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.351713][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.355127][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.356805][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.358151][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.363338][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.364899][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.369383][ T4335] device veth0_vlan entered promiscuous mode [ 33.373040][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.375122][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.376667][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.378296][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.379842][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.381691][ T4327] device veth0_vlan entered promiscuous mode [ 33.387140][ T4337] device veth1_vlan entered promiscuous mode [ 33.396937][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.398583][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.400192][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.402133][ T4334] device veth0_macvtap entered promiscuous mode [ 33.408497][ T4335] device veth1_vlan entered promiscuous mode [ 33.412356][ T4327] device veth1_vlan entered promiscuous mode [ 33.415469][ T4334] device veth1_macvtap entered promiscuous mode [ 33.426137][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.428399][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.429935][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.431455][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.432978][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.435524][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.436984][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.438462][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.440131][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.441673][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.445774][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.447383][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.448854][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.454812][ T4328] device veth0_vlan entered promiscuous mode [ 33.458058][ T4337] device veth0_macvtap entered promiscuous mode [ 33.464425][ T4335] device veth0_macvtap entered promiscuous mode [ 33.467056][ T4337] device veth1_macvtap entered promiscuous mode [ 33.470845][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.472339][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.474304][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.475705][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.477268][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.478862][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.480482][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.482013][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.486323][ T4335] device veth1_macvtap entered promiscuous mode [ 33.493495][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.495054][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.496793][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.500135][ T4328] device veth1_vlan entered promiscuous mode [ 33.505312][ T4327] device veth0_macvtap entered promiscuous mode [ 33.508027][ T4327] device veth1_macvtap entered promiscuous mode [ 33.511206][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.512583][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.515193][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.516726][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.518227][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.519840][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.528057][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.529757][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.531885][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.535991][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.537678][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.539222][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.541286][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.542870][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545879][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.547323][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552008][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.554502][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.556093][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.557697][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.559964][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.565591][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.567400][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.569464][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.571086][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.572786][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.575545][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.577209][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.578797][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.580455][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.582722][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.586673][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.588286][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.589879][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.591515][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.593749][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.595476][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.600650][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.602135][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.604457][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.605846][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.609155][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.610875][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.612439][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.614748][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.616966][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.620334][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.622033][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.623671][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.625266][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.630626][ T4328] device veth0_macvtap entered promiscuous mode [ 33.638640][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.640206][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.641592][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.643925][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646145][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.647783][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.649245][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.650761][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.652332][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.655039][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.657251][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.664086][ T4328] device veth1_macvtap entered promiscuous mode [ 33.668119][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.669762][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.671158][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.672655][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.677991][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.679348][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.680794][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.682305][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.702159][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.705658][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.707153][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.708969][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710504][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.712246][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.714491][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.716077][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.718269][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.731876][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.733828][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.736929][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.738907][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.740372][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.742090][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.744290][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.745974][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.747433][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.749137][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.751270][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.757673][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.759315][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.771825][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.773506][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.775911][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.779329][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.780638][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.781808][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.789731][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791167][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.792512][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.798254][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.844577][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.845847][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.848088][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.849392][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.850731][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.854787][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.857765][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.860578][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.865394][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.866947][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.868214][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.869537][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.886383][ T1700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.887730][ T1700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.890110][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.909495][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.910838][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.912519][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.921015][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.922449][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.924603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.932249][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.933966][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.935243][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.969562][ T4409] random: crng reseeded on system resumption [ 33.996835][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.003941][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.029406][ T4417] autofs4:pid:4417:autofs_fill_super: called with bogus options [ 34.084292][ T4420] device gtp0 entered promiscuous mode [ 34.102495][ T4423] Bluetooth: (null): Out-of-order packet arrived (3 != 0) [ 34.280900][ T4441] random: crng reseeded on system resumption [ 34.302998][ T4443] device syzkaller0 entered promiscuous mode [ 34.310218][ T27] audit: type=1326 audit(34.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.314819][ T27] audit: type=1326 audit(34.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.321441][ T27] audit: type=1326 audit(34.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.328796][ T27] audit: type=1326 audit(34.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.336076][ T27] audit: type=1326 audit(34.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.339938][ T27] audit: type=1326 audit(34.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.347970][ T27] audit: type=1326 audit(34.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8b177b68 code=0x7ffc0000 [ 34.432558][ T4443] tipc: Started in network mode [ 34.435852][ T4443] tipc: Node identity ca7a5c830319, cluster identity 4711 [ 34.437454][ T4443] tipc: Enabled bearer , priority 0 [ 34.448016][ T4442] tipc: Resetting bearer [ 34.544772][ T4442] tipc: Disabling bearer [ 34.571632][ T4460] device syzkaller0 entered promiscuous mode [ 34.744478][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 34.744493][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 34.745569][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 34.746636][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 34.849207][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 35.177960][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 35.273749][ T4510] block device autoloading is deprecated and will be removed. [ 35.276542][ T4509] md2: error: failed to get bitmap file [ 35.312841][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.314870][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.579174][ T4524] device syzkaller0 entered promiscuous mode [ 36.263713][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 36.562564][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.562691][ T4546] random: crng reseeded on system resumption [ 36.566797][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.598174][ T4548] random: crng reseeded on system resumption [ 36.701195][ T4554] IPVS: Scheduler module ip_vs_ not found [ 36.812448][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.816355][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.817707][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.823352][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.824429][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 36.825372][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 36.826288][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 36.881247][ T4569] device syzkaller0 entered promiscuous mode [ 36.886576][ T4569] tipc: Enabled bearer , priority 0 [ 36.891687][ T4569] tipc: Resetting bearer [ 36.894755][ T4568] tipc: Resetting bearer [ 36.984278][ T4568] tipc: Disabling bearer [ 37.172454][ T4576] block device autoloading is deprecated and will be removed. [ 37.299732][ T4586] 9pnet_virtio: no channels available for device syz [ 37.674324][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 37.697796][ T4625] autofs4:pid:4625:autofs_fill_super: called with bogus options [ 37.950788][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.952293][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.343493][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 38.433266][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.613268][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 38.617951][ T22] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 38.619233][ T22] usb 1-1: config 0 has no interface number 0 [ 38.620167][ T22] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 38.621550][ T22] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 38.623679][ T22] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.625772][ T22] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 38.627177][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.631084][ T22] usb 1-1: config 0 descriptor?? [ 38.634871][ T22] ldusb 1-1:0.55: Interrupt in endpoint not found [ 38.838497][ T7] usb 1-1: USB disconnect, device number 2 [ 38.913353][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 38.914590][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 38.915567][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 38.916441][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 47.820199][ T4634] tipc: Failed to obtain node identity [ 47.821201][ T4634] tipc: Enabling of bearer rejected, failed to enable media [ 47.862691][ T4669] device syzkaller0 entered promiscuous mode [ 47.874057][ T4670] autofs4:pid:4670:autofs_fill_super: called with bogus options [ 48.117185][ T4695] 9pnet_fd: Insufficient options for proto=fd [ 48.408227][ T4702] autofs4:pid:4702:autofs_fill_super: called with bogus options [ 48.759476][ T4675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.760976][ T4675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.764319][ T4675] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 48.766725][ T4675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.767885][ T4675] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.769560][ T4675] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 48.770776][ T4675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.771779][ T4675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.773623][ T4675] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 48.774864][ T4675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.775875][ T4675] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.777409][ T4675] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 48.778521][ T4675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 48.779484][ T4675] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 48.780697][ T4675] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 48.782254][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.794579][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.889693][ T4713] device syzkaller0 entered promiscuous mode [ 48.904625][ T4718] device syzkaller0 entered promiscuous mode [ 48.909157][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.911793][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.099727][ T4726] Zero length message leads to an empty skb [ 49.105663][ T4376] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 49.145416][ T4728] Bluetooth: MGMT ver 1.22 [ 49.271508][ T4736] autofs4:pid:4736:autofs_fill_super: called with bogus options [ 49.309244][ T4376] usb 1-1: Using ep0 maxpacket: 16 [ 49.311690][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 49.315555][ T4376] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 49.317073][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.318432][ T4376] usb 1-1: Product: syz [ 49.319066][ T4376] usb 1-1: Manufacturer: syz [ 49.319798][ T4376] usb 1-1: SerialNumber: syz [ 49.331808][ T4376] usb 1-1: config 0 descriptor?? [ 49.332920][ T4742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.335759][ T4742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.338352][ T4376] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 49.339791][ T4376] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 49.346959][ T4745] 9pnet_fd: Insufficient options for proto=fd [ 49.488039][ T4756] device syzkaller0 entered promiscuous mode [ 49.565279][ T4762] autofs4:pid:4762:autofs_fill_super: called with bogus options [ 49.709319][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.715056][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.755183][ T4775] device syzkaller0 entered promiscuous mode [ 49.938417][ T4376] em28xx 1-1:0.0: chip ID is em2765 [ 50.074251][ T4790] autofs4:pid:4790:autofs_fill_super: called with bogus options [ 50.112148][ T4794] device syzkaller0 entered promiscuous mode [ 50.113843][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 50.285504][ T4344] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 50.310046][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.311560][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.545417][ T4376] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 50.547207][ T4376] em28xx 1-1:0.0: board has no eeprom [ 50.823209][ T4344] Bluetooth: hci4: command 0x0c1a tx timeout [ 50.824333][ T4344] Bluetooth: hci3: command 0x0c1a tx timeout [ 50.825326][ T4344] Bluetooth: hci2: command 0x0c1a tx timeout [ 50.826847][ T4376] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 50.828280][ T4376] em28xx 1-1:0.0: dvb set to bulk mode. [ 50.851491][ T4376] usb 1-1: USB disconnect, device number 3 [ 50.860082][ T4376] em28xx 1-1:0.0: Disconnecting em28xx [ 50.865452][ T113] em28xx 1-1:0.0: Binding DVB extension [ 50.918094][ T113] em28xx 1-1:0.0: Registering input extension [ 50.920445][ T4376] em28xx 1-1:0.0: Closing input extension [ 50.938488][ T4376] em28xx 1-1:0.0: Freeing device [ 51.002053][ T4822] autofs4:pid:4822:autofs_fill_super: called with bogus options [ 51.012604][ T4824] netlink: 188 bytes leftover after parsing attributes in process `syz.2.165'. [ 51.053859][ T4336] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 51.127201][ T4836] device syzkaller0 entered promiscuous mode [ 51.130127][ T4838] 9pnet_virtio: no channels available for device syz [ 51.255701][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 51.278285][ T4847] autofs4:pid:4847:autofs_fill_super: called with bogus options [ 51.309999][ T4336] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 51.426157][ T4862] device syzkaller0 entered promiscuous mode [ 51.436554][ T4862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 51.438290][ T4862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 51.448807][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.450367][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.487113][ T4867] fuse: root generation should be zero [ 51.537593][ T4871] autofs4:pid:4871:autofs_fill_super: called with bogus options [ 51.566647][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.568328][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.628711][ T4876] device syzkaller0 entered promiscuous mode [ 51.785206][ T4880] device syzkaller0 entered promiscuous mode [ 51.980830][ T4900] device syzkaller0 entered promiscuous mode [ 52.002632][ T39] nci: nci_rsp_packet: unknown rsp opcode 0x105 [ 52.159730][ T4906] autofs4:pid:4906:autofs_fill_super: called with bogus options [ 52.183657][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 52.748921][ T4916] device syzkaller0 entered promiscuous mode [ 52.903567][ T4344] Bluetooth: hci2: command 0x0406 tx timeout [ 52.904756][ T4344] Bluetooth: hci4: command 0x0406 tx timeout [ 54.941311][ T4895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.983198][ T4336] Bluetooth: hci2: command 0x2016 tx timeout [ 55.005050][ T4937] device bridge0 entered promiscuous mode [ 55.006055][ T4937] device macvlan2 entered promiscuous mode [ 55.049823][ T4942] autofs4:pid:4942:autofs_fill_super: called with bogus options [ 55.093385][ T4947] device syzkaller0 entered promiscuous mode [ 55.298824][ T4978] autofs4:pid:4978:autofs_fill_super: called with bogus options [ 55.519324][ T5011] autofs4:pid:5011:autofs_fill_super: called with bogus options [ 55.546902][ T5013] device syzkaller0 entered promiscuous mode [ 55.722451][ T5038] autofs4:pid:5038:autofs_fill_super: called with bogus options [ 55.829674][ T5047] capability: warning: `syz.2.258' uses 32-bit capabilities (legacy support in use) [ 56.073460][ T5066] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.399941][ T5071] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 56.404916][ T5073] device syzkaller0 entered promiscuous mode [ 56.407867][ T5075] autofs4:pid:5075:autofs_fill_super: called with bogus options [ 57.388440][ T27] audit: type=1326 audit(57.360:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.394287][ T27] audit: type=1326 audit(57.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.703236][ T27] audit: type=1326 audit(57.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.711996][ T27] audit: type=1326 audit(57.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.739393][ T27] audit: type=1326 audit(57.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.756908][ T27] audit: type=1326 audit(57.660:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.775729][ T27] audit: type=1326 audit(57.690:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.779999][ T27] audit: type=1326 audit(57.690:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.789398][ T27] audit: type=1326 audit(57.690:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.794146][ T27] audit: type=1326 audit(57.690:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.273" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbb377b68 code=0x7ffc0000 [ 57.807473][ T5092] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 57.908331][ T5098] device syzkaller0 entered promiscuous mode [ 58.156040][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.277'. [ 64.505405][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506575][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.965768][ T5132] device syzkaller0 entered promiscuous mode [ 69.273268][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.428150][ T5143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.483739][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 69.487427][ T7] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.488927][ T7] usb 1-1: config 0 has no interface number 0 [ 69.490005][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 69.491758][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 69.493420][ T7] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.495637][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.497096][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.506372][ T7] usb 1-1: config 0 descriptor?? [ 69.510948][ T7] ldusb 1-1:0.55: Interrupt in endpoint not found [ 69.575037][ T5149] binder: 5148:5149 tried to acquire reference to desc 0, got 1 instead [ 69.577997][ T7] binder: release 5148:5149 transaction 5 out, still active [ 69.601076][ T5151] batman_adv: batadv0: Adding interface: dummy0 [ 69.602355][ T5151] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.604454][ T7] binder: undelivered TRANSACTION_COMPLETE [ 69.606925][ T5151] batman_adv: batadv0: Interface activated: dummy0 [ 69.623695][ T5151] batadv0: mtu less than device minimum [ 69.624693][ T14] cfg80211: failed to load regulatory.db [ 69.626591][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.629941][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.633061][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.634697][ T7] binder: send failed reply for transaction 5, target dead [ 69.636244][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.639341][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.642323][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.645408][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.648379][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.651420][ T5151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.717051][ T7] usb 1-1: USB disconnect, device number 4 [ 69.848508][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.856621][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.878354][ T5159] ======================================================= [ 69.878354][ T5159] WARNING: The mand mount option has been deprecated and [ 69.878354][ T5159] and is ignored by this kernel. Remove the mand [ 69.878354][ T5159] option from the mount to silence this warning. [ 69.878354][ T5159] ======================================================= [ 70.092239][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.094129][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.182463][ T5178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 70.926719][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 71.352266][ T5194] binder: tried to use weak ref as strong ref [ 71.353727][ T5194] binder: 5192:5194 Acquire 1 refcount change on invalid ref 0 ret -22 [ 71.355384][ T5194] binder: 5192:5194 got transaction to invalid handle, 1 [ 71.356694][ T5194] binder: 5194:5192 cannot find target node [ 71.357693][ T5194] binder: 5192:5194 transaction call to 0:0 failed 10/29201/-22, size 104-0 line 3045 [ 71.360044][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.408983][ T5203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.410584][ T5203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.524497][ T5214] binder: 5213:5214 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 71.597038][ T5218] fuse: Invalid rootmode [ 71.601999][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.614400][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.629464][ T5222] binder: tried to use weak ref as strong ref [ 71.630726][ T5222] binder: 5221:5222 Acquire 1 refcount change on invalid ref 0 ret -22 [ 71.632425][ T5222] binder: 5221:5222 got transaction to invalid handle, 1 [ 71.634395][ T5222] binder: 5222:5221 cannot find target node [ 71.635405][ T5222] binder: 5221:5222 transaction call to 0:0 failed 14/29201/-22, size 104-0 line 3045 [ 71.642355][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.620324][ T5242] binder: 5241:5242 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.215937][ T5263] input: syz1 as /devices/virtual/input/input4 [ 74.417180][ T5266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 75.892822][ T5298] binder: 5296:5298 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 76.970845][ T5322] binder: 5320:5322 got transaction to invalid handle, 1 [ 76.972086][ T5322] binder: 5322:5320 cannot find target node [ 76.973043][ T5322] binder: 5320:5322 transaction call to 0:0 failed 20/29201/-22, size 104-0 line 3045 [ 77.125419][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.190962][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.192477][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.194457][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.195969][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.408565][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.410426][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.463222][ T4375] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.643231][ T4375] usb 1-1: Using ep0 maxpacket: 32 [ 77.646312][ T4375] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 77.647817][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.649661][ T4375] usb 1-1: config 0 has no interface number 0 [ 77.652105][ T4375] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.654769][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.656365][ T4375] usb 1-1: Product: syz [ 77.657000][ T4375] usb 1-1: Manufacturer: syz [ 77.657884][ T4375] usb 1-1: SerialNumber: syz [ 77.659876][ T4375] usb 1-1: config 0 descriptor?? [ 77.662775][ T4375] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.747818][ T5344] binder: 5342:5344 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 77.783643][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.786610][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.863602][ T4375] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 77.865022][ T4375] quatech2: probe of 1-1:0.51 failed with error -8 [ 77.889579][ T5352] binder: tried to use weak ref as strong ref [ 77.890697][ T5352] binder: 5351:5352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 77.892466][ T5352] binder: 5351:5352 got transaction to invalid handle, 1 [ 77.895181][ T5352] binder: 5352:5351 cannot find target node [ 77.896113][ T5352] binder: 5351:5352 transaction call to 0:0 failed 24/29201/-22, size 104-0 line 3045 [ 77.923558][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.065727][ T5299] usb 1-1: USB disconnect, device number 5 [ 78.604006][ T5373] binder: 5372:5373 ioctl 4018620d 0 returned -22 [ 78.606051][ T5373] binder: 5372:5373 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 78.609365][ T5373] binder: 5372:5373 got transaction to invalid handle, 1 [ 78.610794][ T5373] binder: 5373:5372 cannot find target node [ 78.611971][ T5373] binder: 5372:5373 transaction call to 0:0 failed 27/29201/-22, size 0-24 line 3045 [ 78.618193][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.119368][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.125458][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.252903][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.259330][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.788684][ T5406] binder: 5405:5406 ioctl 4018620d 0 returned -22 [ 79.790587][ T5406] binder: 5405:5406 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 79.793809][ T5406] binder: 5405:5406 got transaction to invalid handle, 1 [ 79.795234][ T5406] binder: 5406:5405 cannot find target node [ 80.445057][ T5421] netlink: 64 bytes leftover after parsing attributes in process `syz.0.389'. [ 80.841918][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.888984][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.935259][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.941523][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.043256][ T5299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.235699][ T5299] usb 1-1: Using ep0 maxpacket: 32 [ 82.242266][ T5299] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 82.244078][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.253193][ T5299] usb 1-1: config 0 descriptor?? [ 82.518490][ T5299] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 82.520859][ T5299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.522877][ T5299] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 82.524729][ T5299] usb 1-1: media controller created [ 82.548144][ T5299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.746724][ T5299] az6027: usb out operation failed. (-71) [ 82.751078][ T5299] az6027: usb out operation failed. (-71) [ 82.752170][ T5299] stb0899_attach: Driver disabled by Kconfig [ 82.755916][ T5299] az6027: no front-end attached [ 82.755916][ T5299] [ 82.757807][ T5299] az6027: usb out operation failed. (-71) [ 82.758979][ T5299] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 82.769382][ T5299] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 82.780174][ T5299] dvb-usb: schedule remote query interval to 400 msecs. [ 82.788485][ T5299] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 82.903288][ T5299] usb 1-1: USB disconnect, device number 6 [ 82.953449][ T5425] net_ratelimit: 11 callbacks suppressed [ 82.953463][ T5425] Set syz1 is full, maxelem 65536 reached [ 83.088522][ T5299] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 83.815574][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.817392][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.886235][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.889737][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.355587][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:1) [ 85.449478][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 85.462037][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.491436][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.513895][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.656558][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.658106][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.047039][ T5577] fuse: Bad value for 'fd' [ 87.177082][ T5582] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.442078][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.449818][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.546644][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.548185][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.011897][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 89.190281][ T5628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.609712][ T5633] device gtp0 entered promiscuous mode [ 89.792758][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 90.076662][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 90.584892][ T5260] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.641511][ T5668] device gtp0 entered promiscuous mode [ 90.666520][ T5670] binder: 5669:5670 tried to acquire reference to desc 0, got 1 instead [ 90.668802][ T7] binder_debug: 2 callbacks suppressed [ 90.668810][ T7] binder: release 5669:5670 transaction 38 out, still active [ 90.671077][ T7] binder: undelivered TRANSACTION_COMPLETE [ 90.678025][ T24] binder: send failed reply for transaction 38, target dead [ 90.763233][ T5260] usb 1-1: Using ep0 maxpacket: 32 [ 90.765867][ T5260] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 90.767326][ T5260] usb 1-1: config 0 has no interface number 0 [ 90.768378][ T5260] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.770038][ T5260] usb 1-1: config 0 interface 89 has no altsetting 0 [ 90.772947][ T5260] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 90.774810][ T5260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.776187][ T5260] usb 1-1: Product: syz [ 90.776927][ T5260] usb 1-1: Manufacturer: syz [ 90.780012][ T5260] usb 1-1: SerialNumber: syz [ 90.782905][ T5260] usb 1-1: config 0 descriptor?? [ 90.787588][ T5260] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 90.789429][ T5260] em28xx 1-1:0.89: Video interface 89 found: [ 90.792668][ T5676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.797832][ T5676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.802419][ T5676] hpfs: Bad magic ... probably not HPFS [ 91.014123][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.017286][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.022405][ T5685] device syzkaller0 entered promiscuous mode [ 91.055486][ T5687] binder: 5686:5687 ioctl 4018620d 0 returned -22 [ 91.059151][ T5687] binder: 5686:5687 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 91.063042][ T5687] binder: 5686:5687 got transaction to invalid handle, 1 [ 91.065017][ T5687] binder: 5687:5686 cannot find target node [ 91.066028][ T5687] binder: 5686:5687 transaction call to 0:0 failed 41/29201/-22, size 0-24 line 3045 [ 91.068926][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.548218][ T5260] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 91.576668][ T5707] device gtp1 entered promiscuous mode [ 91.918177][ T5715] device syzkaller0 entered promiscuous mode [ 91.967343][ T5260] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 91.969176][ T5260] em28xx 1-1:0.89: board has no eeprom [ 92.033195][ T5260] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 92.034525][ T5260] em28xx 1-1:0.89: analog set to bulk mode. [ 92.038861][ T5260] usb 1-1: USB disconnect, device number 7 [ 92.040172][ T5260] em28xx 1-1:0.89: Disconnecting em28xx [ 92.042997][ T4375] em28xx 1-1:0.89: Registering V4L2 extension [ 92.059056][ T4375] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 92.060323][ T4375] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 92.061605][ T4375] em28xx 1-1:0.89: No AC97 audio processor [ 92.183376][ T5721] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.347865][ T4375] usb 1-1: Decoder not found [ 92.348755][ T4375] em28xx 1-1:0.89: failed to create media graph [ 92.349742][ T4375] em28xx 1-1:0.89: V4L2 device video11 deregistered [ 92.352863][ T4375] em28xx 1-1:0.89: Registering snapshot button... [ 92.360548][ T4375] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 92.365324][ T4375] em28xx 1-1:0.89: Remote control support is not available for this card. [ 92.366793][ T5260] em28xx 1-1:0.89: Closing input extension [ 92.368155][ T5260] em28xx 1-1:0.89: Deregistering snapshot button [ 92.482044][ T5260] em28xx 1-1:0.89: Freeing device [ 92.515127][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.516873][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.838659][ T5751] device syzkaller0 entered promiscuous mode [ 93.633212][ T5784] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.751265][ T5260] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.889745][ T5792] device syzkaller0 entered promiscuous mode [ 93.933232][ T5260] usb 1-1: Using ep0 maxpacket: 8 [ 93.937464][ T5260] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 93.938886][ T5260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.940163][ T5260] usb 1-1: Product: syz [ 93.940870][ T5260] usb 1-1: Manufacturer: syz [ 93.941571][ T5260] usb 1-1: SerialNumber: syz [ 93.944445][ T5260] usb 1-1: config 0 descriptor?? [ 93.951910][ T5260] gspca_main: se401-2.14.0 probing 047d:5003 [ 94.094397][ T5805] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 94.099356][ T5805] netlink: 'syz.4.539': attribute type 2 has an invalid length. [ 94.254024][ T5812] binder: 5809:5812 tried to acquire reference to desc 0, got 1 instead [ 94.263763][ T5810] binder: 5809:5810 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.265679][ T5810] binder: 5810 RLIMIT_NICE not set [ 94.272157][ T4377] binder: release 5809:5810 transaction 46 out, still active [ 94.273428][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 94.290241][ T1516] binder: send failed reply for transaction 46, target dead [ 94.359220][ T5260] gspca_se401: Bayer format not supported! [ 94.520633][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.531362][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.572945][ T5260] usb 1-1: USB disconnect, device number 8 [ 95.047598][ T5832] device syzkaller0 entered promiscuous mode [ 95.781088][ T5861] device syzkaller0 entered promiscuous mode [ 96.064676][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.068683][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.163187][ T4377] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.298070][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 96.365774][ T4377] usb 1-1: Using ep0 maxpacket: 32 [ 96.368592][ T4377] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.369952][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.375511][ T4377] usb 1-1: config 0 descriptor?? [ 96.520271][ T5907] device syzkaller0 entered promiscuous mode [ 96.585331][ T4377] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.588829][ T4377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.593803][ T4377] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.594994][ T4377] usb 1-1: media controller created [ 96.601984][ T4377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.089254][ T5939] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.664796][ T4377] az6027: usb out operation failed. (-71) [ 98.665846][ T4377] stb0899_attach: Driver disabled by Kconfig [ 98.669089][ T4377] az6027: no front-end attached [ 98.669089][ T4377] [ 98.672233][ T4377] az6027: usb out operation failed. (-71) [ 98.674424][ T4377] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 98.676564][ T4377] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 98.679063][ T4377] dvb-usb: schedule remote query interval to 400 msecs. [ 98.680292][ T4377] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 98.696250][ T4377] usb 1-1: USB disconnect, device number 9 [ 98.764112][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.777269][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.807744][ T4377] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 98.887506][ T5949] device syzkaller0 entered promiscuous mode [ 99.993263][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 100.163350][ T5973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.420819][ T5982] device syzkaller0 entered promiscuous mode [ 100.450830][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 100.458428][ T7] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 100.461508][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.463224][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.464721][ T7] usb 1-1: Product: syz [ 100.465374][ T7] usb 1-1: Manufacturer: syz [ 100.466302][ T7] usb 1-1: SerialNumber: syz [ 100.467663][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 100.798548][ T7] r8152-cfgselector 1-1: Needed 1 retries to read version [ 100.799919][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 100.801063][ T7] r8152-cfgselector 1-1: bad CDC descriptors [ 100.842742][ T5986] device syzkaller0 entered promiscuous mode [ 101.001845][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 101.003912][ T7] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 112.271486][ T6021] fuse: Bad value for 'fd' [ 112.324073][ T6024] device syzkaller0 entered promiscuous mode [ 112.567830][ T6033] binder: 6032:6033 ioctl c0306201 200003c0 returned -14 [ 112.569401][ T6033] binder: 6032:6033 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 112.796748][ T6039] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.871610][ T6035] device syzkaller0 entered promiscuous mode [ 112.933999][ T6046] binder: BINDER_SET_CONTEXT_MGR already set [ 112.935930][ T6046] binder: 6045:6046 ioctl 4018620d 20004a80 returned -16 [ 113.472914][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.475769][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.526358][ T6063] binder: 6062:6063 tried to acquire reference to desc 0, got 1 instead [ 113.528570][ T5299] binder: release 6062:6063 transaction 54 out, still active [ 113.529963][ T5299] binder: undelivered TRANSACTION_COMPLETE [ 113.537666][ T14] binder: send failed reply for transaction 54, target dead [ 113.545256][ T6061] device syzkaller0 entered promiscuous mode [ 114.490393][ T6078] binder: BINDER_SET_CONTEXT_MGR already set [ 114.494876][ T6078] binder: 6077:6078 ioctl 4018620d 20004a80 returned -16 [ 124.888521][ T6115] binder: 6114:6115 tried to acquire reference to desc 0, got 1 instead [ 124.890885][ T5299] binder: release 6114:6115 transaction 60 out, still active [ 124.892038][ T5299] binder: undelivered TRANSACTION_COMPLETE [ 124.899737][ T5299] binder: send failed reply for transaction 60, target dead [ 125.104281][ T6125] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.319079][ T6128] binder: BINDER_SET_CONTEXT_MGR already set [ 125.320332][ T6128] binder: 6127:6128 ioctl 4018620d 20004a80 returned -16 [ 125.516480][ T6143] binder: 6142:6143 tried to acquire reference to desc 0, got 1 instead [ 125.518500][ T4380] binder: release 6142:6143 transaction 66 out, still active [ 125.519769][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 125.823568][ T6148] device syzkaller0 entered promiscuous mode [ 125.826511][ T4380] binder: send failed reply for transaction 66, target dead [ 125.850836][ T6150] device syzkaller0 entered promiscuous mode [ 125.946756][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948043][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.083178][ T6169] binder: 6168:6169 ioctl c0306201 0 returned -14 [ 126.086038][ T6169] binder: 6168:6169 got transaction to invalid handle, 1 [ 126.087328][ T6169] binder: 6169:6168 cannot find target node [ 126.088273][ T6169] binder: 6168:6169 transaction call to 0:0 failed 70/29201/-22, size 0-24 line 3045 [ 126.090649][ T5299] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.678781][ T6182] tipc: Enabling of bearer rejected, failed to enable media [ 136.700807][ T6195] binder: 6194:6195 tried to acquire reference to desc 0, got 1 instead [ 136.706421][ T6195] binder_alloc: 6194: binder_alloc_buf, no vma [ 136.707514][ T6195] binder: cannot allocate buffer: vma cleared, target dead or dying [ 136.707551][ T6195] binder: 6194:6195 transaction call to 6194:0 failed 75/29189/-3, size 104-0 line 3230 [ 136.911800][ T6214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.160185][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.188100][ T6218] raw_sendmsg: syz.3.670 forgot to set AF_INET. Fix it! [ 137.255724][ T4344] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 137.371704][ T6218] ceph: No mds server is up or the cluster is laggy [ 137.387142][ T5299] libceph: connect (1)[c::]:6789 error -22 [ 137.398560][ T5299] libceph: mon0 (1)[c::]:6789 connect error [ 137.557554][ T6229] binder: 6228:6229 ioctl c0306201 0 returned -14 [ 137.560401][ T6229] binder: 6228:6229 got transaction to invalid handle, 1 [ 137.561753][ T6229] binder: 6229:6228 cannot find target node [ 137.562690][ T6229] binder: 6228:6229 transaction call to 0:0 failed 79/29201/-22, size 0-24 line 3045 [ 137.569107][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.710706][ T6243] device syzkaller0 entered promiscuous mode [ 138.088930][ T6250] binder: 6249:6250 tried to acquire reference to desc 0, got 1 instead [ 138.091085][ T6250] binder_alloc: 6249: binder_alloc_buf, no vma [ 138.092877][ T6250] binder: cannot allocate buffer: vma cleared, target dead or dying [ 138.092916][ T6250] binder: 6249:6250 transaction call to 6249:0 failed 84/29189/-3, size 104-0 line 3230 [ 138.143574][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 138.664210][ T6285] binder: 6284:6285 ioctl c0306201 0 returned -14 [ 138.667324][ T6285] binder: 6284:6285 got transaction to invalid handle, 1 [ 138.668618][ T6285] binder: 6285:6284 cannot find target node [ 138.991844][ T6292] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.221249][ T6281] tipc: Enabling of bearer rejected, failed to enable media [ 149.261397][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.262946][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.356170][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.357623][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.434749][ T6311] binder: 6308:6311 tried to acquire reference to desc 0, got 1 instead [ 149.439537][ T6311] binder_alloc: 6308: binder_alloc_buf, no vma [ 149.440696][ T6311] binder_debug: 2 callbacks suppressed [ 149.440709][ T6311] binder: cannot allocate buffer: vma cleared, target dead or dying [ 149.441588][ T6311] binder: 6308:6311 transaction call to 6308:0 failed 93/29189/-3, size 104-0 line 3230 [ 149.458478][ T6317] binder: BINDER_SET_CONTEXT_MGR already set [ 149.459562][ T6317] binder: 6316:6317 ioctl 4018620d 20004a80 returned -16 [ 149.464761][ T6317] binder: 6316:6317 got transaction to invalid handle, 1 [ 149.466129][ T6317] binder: 6317:6316 cannot find target node [ 149.467076][ T6317] binder: 6316:6317 transaction call to 0:0 failed 96/29201/-22, size 0-24 line 3045 [ 149.894123][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.895402][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.074488][ T6336] device syzkaller0 entered promiscuous mode [ 150.154885][ T6336] tipc: Started in network mode [ 150.155793][ T6336] tipc: Node identity ca61b1dd56a6, cluster identity 4711 [ 150.157332][ T6336] tipc: Enabled bearer , priority 0 [ 150.195311][ T6335] tipc: Resetting bearer [ 150.349585][ T6335] tipc: Disabling bearer [ 150.519823][ T6355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.659021][ T6338] device syzkaller0 entered promiscuous mode [ 150.791262][ T6366] binder: tried to use weak ref as strong ref [ 150.792620][ T6366] binder: 6365:6366 Acquire 1 refcount change on invalid ref 0 ret -22 [ 150.794850][ T6366] binder: 6365:6366 got transaction to invalid handle, 1 [ 150.796066][ T6366] binder: 6366:6365 cannot find target node [ 150.797147][ T6366] binder: 6365:6366 transaction call to 0:0 failed 99/29201/-22, size 104-0 line 3045 [ 150.823279][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.833878][ T6368] binder: 6367:6368 got transaction to invalid handle, 1 [ 150.835332][ T6368] binder: 6368:6367 cannot find target node [ 153.623378][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 153.624482][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 153.625443][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 153.626644][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 153.627540][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 154.416265][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.418246][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.024351][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 155.024363][ T27] audit: type=1326 audit(155.000:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.029082][ T27] audit: type=1326 audit(155.000:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.032731][ T27] audit: type=1326 audit(155.000:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.037129][ T27] audit: type=1326 audit(155.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.041044][ T27] audit: type=1326 audit(155.000:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.045176][ T27] audit: type=1326 audit(155.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.048843][ T27] audit: type=1326 audit(155.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.052476][ T27] audit: type=1326 audit(155.000:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.1.720" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e577b68 code=0x7ffc0000 [ 155.703142][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 161.452140][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.454206][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.492885][ T6413] binder: 6411:6413 got transaction to invalid handle, 1 [ 161.495714][ T6413] binder_debug: 2 callbacks suppressed [ 161.495722][ T6413] binder: 6413:6411 cannot find target node [ 161.498270][ T6413] binder: 6411:6413 transaction call to 0:0 failed 107/29201/-22, size 0-24 line 3045 [ 161.498909][ T6404] device syzkaller0 entered promiscuous mode [ 161.500526][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.532379][ T6417] binder: tried to use weak ref as strong ref [ 161.535826][ T6417] binder: 6416:6417 Acquire 1 refcount change on invalid ref 0 ret -22 [ 161.537439][ T6417] binder: 6416:6417 got transaction to invalid handle, 1 [ 161.539050][ T6417] binder: 6417:6416 cannot find target node [ 161.540118][ T6417] binder: 6416:6417 transaction call to 0:0 failed 110/29201/-22, size 104-0 line 3045 [ 161.554928][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.578920][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.732'. [ 162.237223][ T6453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.541231][ T6457] binder: 6456:6457 got transaction to invalid handle, 1 [ 162.542552][ T6457] binder: 6457:6456 cannot find target node [ 162.544438][ T6457] binder: 6456:6457 transaction call to 0:0 failed 114/29201/-22, size 0-24 line 3045 [ 162.547253][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.651449][ T6466] binder: tried to use weak ref as strong ref [ 162.652650][ T6466] binder: 6465:6466 Acquire 1 refcount change on invalid ref 0 ret -22 [ 162.659477][ T6470] device syzkaller0 entered promiscuous mode [ 162.660207][ T6466] binder: 6465:6466 got transaction to invalid handle, 1 [ 162.665099][ T6466] binder: 6466:6465 cannot find target node [ 162.709545][ T6476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.747'. [ 162.930428][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.931925][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.994662][ T6484] binder: 6483:6484 got transaction to invalid handle, 1 [ 163.388242][ T6502] binder: BINDER_SET_CONTEXT_MGR already set [ 163.389548][ T6502] binder: 6501:6502 ioctl 4018620d 20000040 returned -16 [ 163.496937][ T6515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.760'. [ 163.620419][ T6522] device syzkaller0 entered promiscuous mode [ 163.734536][ T6523] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.013938][ T6525] binder: 6524:6525 got transaction to invalid handle, 1 [ 164.078801][ T6534] binder: BINDER_SET_CONTEXT_MGR already set [ 164.079857][ T6534] binder: 6533:6534 ioctl 4018620d 20000040 returned -16 [ 164.209969][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 164.730105][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.747679][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.771456][ T6575] binder: BINDER_SET_CONTEXT_MGR already set [ 164.772524][ T6575] binder: 6573:6575 ioctl 4018620d 20000040 returned -16 [ 164.789540][ T6577] device syzkaller0 entered promiscuous mode [ 164.805542][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 164.935935][ T6577] tipc: Enabled bearer , priority 0 [ 164.939789][ T6586] tipc: Started in network mode [ 164.940613][ T6586] tipc: Node identity 8a54ea0c34aa, cluster identity 4711 [ 164.941907][ T6586] tipc: Enabled bearer , priority 0 [ 164.943665][ T6586] device syzkaller0 entered promiscuous mode [ 164.993839][ T6576] tipc: Resetting bearer [ 165.064325][ T6576] tipc: Disabling bearer [ 165.066763][ T6586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.787'. [ 165.071875][ T6587] tipc: Resetting bearer [ 165.075044][ T6585] tipc: Resetting bearer [ 165.176553][ T6585] tipc: Disabling bearer [ 165.408153][ T6607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.602717][ T6612] input: syz1 as /devices/virtual/input/input11 [ 165.838721][ T6626] device syzkaller0 entered promiscuous mode [ 166.194814][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 166.204385][ T6626] tipc: Started in network mode [ 166.205511][ T6626] tipc: Node identity 82263ad4dab, cluster identity 4711 [ 166.206979][ T6626] tipc: Enabled bearer , priority 0 [ 166.235594][ T6625] tipc: Resetting bearer [ 166.328239][ T6646] input: syz1 as /devices/virtual/input/input12 [ 166.354244][ T6625] tipc: Disabling bearer [ 166.416073][ T6650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.781718][ T6658] binder_user_error: 10 callbacks suppressed [ 166.781728][ T6658] binder: 6656:6658 got transaction to invalid handle, 1 [ 166.792491][ T6658] binder_debug: 20 callbacks suppressed [ 166.792508][ T6658] binder: 6658:6656 cannot find target node [ 166.804192][ T6658] binder: 6656:6658 transaction call to 0:0 failed 148/29201/-22, size 104-0 line 3045 [ 166.843340][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.909708][ T6672] binder: 6670:6672 ioctl 4018620d 0 returned -22 [ 166.911236][ T6672] binder: tried to use weak ref as strong ref [ 166.912249][ T6672] binder: 6670:6672 Acquire 1 refcount change on invalid ref 0 ret -22 [ 166.916718][ T6672] binder: 6670:6672 got transaction to invalid handle, 1 [ 166.917946][ T6672] binder: 6672:6670 cannot find target node [ 166.918873][ T6672] binder: 6670:6672 transaction call to 0:0 failed 151/29201/-22, size 0-24 line 3045 [ 166.928715][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.042514][ T6685] input: syz1 as /devices/virtual/input/input13 [ 167.058359][ T6687] device syzkaller0 entered promiscuous mode [ 167.404889][ T6687] tipc: Enabled bearer , priority 0 [ 167.427184][ T6697] binder: 6696:6697 got transaction to invalid handle, 1 [ 167.428414][ T6697] binder: 6697:6696 cannot find target node [ 167.429423][ T6697] binder: 6696:6697 transaction call to 0:0 failed 155/29201/-22, size 104-0 line 3045 [ 167.450826][ T6686] tipc: Resetting bearer [ 167.456829][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.514913][ T6686] tipc: Disabling bearer [ 167.517331][ T6703] netlink: 'syz.3.827': attribute type 12 has an invalid length. [ 167.520046][ T6703] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.622500][ T6711] binder: 6710:6711 ioctl 4018620d 0 returned -22 [ 167.626790][ T6711] binder: tried to use weak ref as strong ref [ 167.627859][ T6711] binder: 6710:6711 Acquire 1 refcount change on invalid ref 0 ret -22 [ 167.629368][ T6711] binder: 6710:6711 got transaction to invalid handle, 1 [ 167.630508][ T6711] binder: 6711:6710 cannot find target node [ 167.636969][ T6714] mmap: syz.3.827 (6714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.739280][ T6721] input: syz1 as /devices/virtual/input/input14 [ 167.979380][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.982207][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.360461][ T6736] binder: BINDER_SET_CONTEXT_MGR already set [ 168.361523][ T6736] binder: 6735:6736 ioctl 4018620d 20000040 returned -16 [ 168.653182][ T5299] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.675795][ T6751] binder: 6750:6751 ioctl 4018620d 0 returned -22 [ 168.677900][ T6751] binder: tried to use weak ref as strong ref [ 168.679075][ T6751] binder: 6750:6751 Acquire 1 refcount change on invalid ref 0 ret -22 [ 168.783619][ T6755] device syzkaller0 entered promiscuous mode [ 168.871779][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.873762][ T5299] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.875450][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.882255][ T5299] usb 1-1: config 0 descriptor?? [ 168.893429][ T6761] tipc: Started in network mode [ 168.894461][ T6761] tipc: Node identity 76bc3b11025c, cluster identity 4711 [ 168.895679][ T6761] tipc: Enabled bearer , priority 0 [ 168.901282][ T6754] tipc: Resetting bearer [ 169.237911][ T5299] usbhid 1-1:0.0: can't add hid device: -71 [ 169.238947][ T5299] usbhid: probe of 1-1:0.0 failed with error -71 [ 169.240755][ T5299] usb 1-1: USB disconnect, device number 11 [ 169.253942][ T6764] input: syz1 as /devices/virtual/input/input15 [ 169.284399][ T6754] tipc: Disabling bearer [ 169.317107][ T6766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.378127][ T6770] binder: BINDER_SET_CONTEXT_MGR already set [ 169.379003][ T6770] binder: 6769:6770 ioctl 4018620d 20000040 returned -16 [ 169.417546][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.420997][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.698055][ T6784] binder: 6783:6784 ioctl c0306201 0 returned -14 [ 169.793216][ T5299] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.818182][ T6792] input: syz1 as /devices/virtual/input/input16 [ 169.967330][ T6799] device syzkaller0 entered promiscuous mode [ 169.974464][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.976309][ T5299] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 169.977820][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.986221][ T5299] usb 1-1: config 0 descriptor?? [ 171.274632][ T6803] tipc: Enabled bearer , priority 0 [ 171.277645][ T6798] tipc: Resetting bearer [ 171.394672][ T6798] tipc: Disabling bearer [ 171.698823][ T5299] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 171.700534][ T5299] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 171.722556][ C1] ================================================================================ [ 171.724118][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 171.725552][ C1] index 20872 is out of range for type 'const int[34]' [ 171.726935][ C1] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 171.728207][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 171.729773][ C1] Call trace: [ 171.730343][ C1] dump_backtrace+0x1c4/0x1f0 [ 171.731353][ C1] show_stack+0x2c/0x3c [ 171.732082][ C1] __dump_stack+0x30/0x40 [ 171.732785][ C1] dump_stack_lvl+0xf4/0x15c [ 171.733541][ C1] dump_stack+0x1c/0x5c [ 171.734265][ C1] ubsan_epilogue+0x14/0x48 [ 171.735012][ C1] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 171.735847][ C1] aiptek_irq+0x19a0/0x2360 [ 171.736541][ C1] __usb_hcd_giveback_urb+0x2ec/0x50c [ 171.737428][ C1] usb_hcd_giveback_urb+0x100/0x3a4 [ 171.738342][ C1] dummy_timer+0x7c8/0x2840 [ 171.739100][ C1] __hrtimer_run_queues+0x444/0xc58 [ 171.739938][ C1] hrtimer_run_softirq+0x164/0x408 [ 171.740797][ C1] handle_softirqs+0x318/0xc90 [ 171.741617][ C1] __do_softirq+0x14/0x20 [ 171.742276][ C1] ____do_softirq+0x14/0x20 [ 171.742925][ C1] call_on_irq_stack+0x30/0x48 [ 171.743714][ C1] do_softirq_own_stack+0x20/0x2c [ 171.744478][ C1] do_softirq+0xf8/0x1a0 [ 171.744493][ T6823] binder: BINDER_SET_CONTEXT_MGR already set [ 171.745134][ C1] __local_bh_enable_ip+0x250/0x37c [ 171.746247][ T6823] binder: 6822:6823 ioctl 4018620d 20000040 returned -16 [ 171.747043][ C1] local_bh_enable+0x28/0x34 [ 171.748795][ C1] fpsimd_update_current_state+0x158/0x378 [ 171.749697][ C1] __arm64_sys_rt_sigreturn+0x1f0c/0x1f1c [ 171.750611][ C1] invoke_syscall+0x98/0x290 [ 171.751354][ C1] el0_svc_common+0x13c/0x258 [ 171.752109][ C1] do_el0_svc+0x5c/0x134 [ 171.752851][ C1] el0_svc+0x58/0x128 [ 171.753532][ C1] el0t_64_sync_handler+0x84/0xf0 [ 171.754375][ C1] el0t_64_sync+0x18c/0x190 [ 171.755179][ C1] ================================================================================ [ 171.756751][ C1] ================================================================================ [ 171.758272][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 171.759722][ C1] index 20873 is out of range for type 'const int[34]' [ 171.760852][ C1] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 171.762054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 171.763694][ C1] Call trace: [ 171.764213][ C1] dump_backtrace+0x1c4/0x1f0 [ 171.765000][ C1] show_stack+0x2c/0x3c [ 171.765728][ C1] __dump_stack+0x30/0x40 [ 171.766511][ C1] dump_stack_lvl+0xf4/0x15c [ 171.767241][ C1] dump_stack+0x1c/0x5c [ 171.767918][ C1] ubsan_epilogue+0x14/0x48 [ 171.768673][ C1] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 171.769672][ C1] aiptek_irq+0x186c/0x2360 [ 171.770542][ C1] __usb_hcd_giveback_urb+0x2ec/0x50c [ 171.771437][ C1] usb_hcd_giveback_urb+0x100/0x3a4 [ 171.772324][ C1] dummy_timer+0x7c8/0x2840 [ 171.773091][ C1] __hrtimer_run_queues+0x444/0xc58 [ 171.774056][ C1] hrtimer_run_softirq+0x164/0x408 [ 171.774944][ C1] handle_softirqs+0x318/0xc90 [ 171.775877][ C1] __do_softirq+0x14/0x20 [ 171.776629][ C1] ____do_softirq+0x14/0x20 [ 171.777438][ C1] call_on_irq_stack+0x30/0x48 [ 171.777980][ T6825] binder: BINDER_SET_CONTEXT_MGR already set [ 171.778180][ C1] do_softirq_own_stack+0x20/0x2c [ 171.779290][ T6825] binder: 6824:6825 ioctl 4018620d 20004a80 returned -16 [ 171.780152][ C1] do_softirq+0xf8/0x1a0 [ 171.782139][ C1] __local_bh_enable_ip+0x250/0x37c [ 171.782284][ T6825] binder: 6824:6825 ioctl c0306201 0 returned -14 [ 171.782968][ C1] local_bh_enable+0x28/0x34 [ 171.784873][ C1] fpsimd_update_current_state+0x158/0x378 [ 171.785841][ C1] __arm64_sys_rt_sigreturn+0x1f0c/0x1f1c [ 171.786901][ C1] invoke_syscall+0x98/0x290 [ 171.787660][ C1] el0_svc_common+0x13c/0x258 [ 171.788489][ C1] do_el0_svc+0x5c/0x134 [ 171.789223][ C1] el0_svc+0x58/0x128 [ 171.789900][ C1] el0t_64_sync_handler+0x84/0xf0 [ 171.790734][ C1] el0t_64_sync+0x18c/0x190 [ 171.791439][ C1] ================================================================================ [ 171.818643][ T6827] device syzkaller0 entered promiscuous mode [ 171.823667][ T7] binder_debug: 10 callbacks suppressed [ 171.823674][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.060990][ T14] usb 1-1: USB disconnect, device number 12 [ 172.061115][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19