last executing test programs: 22.681445794s ago: executing program 1 (id=1179): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = dup(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) 22.637161548s ago: executing program 1 (id=1182): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b00009", 0x2b}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 22.602098782s ago: executing program 1 (id=1184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 22.561132666s ago: executing program 1 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 22.502198621s ago: executing program 1 (id=1188): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 22.048144256s ago: executing program 1 (id=1196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 22.042151056s ago: executing program 32 (id=1196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 5.321160502s ago: executing program 4 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.229696922s ago: executing program 4 (id=1292): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) 4.857260768s ago: executing program 4 (id=1293): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xa0}}, 0x0) 4.856051858s ago: executing program 4 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.806573002s ago: executing program 4 (id=1296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.444246568s ago: executing program 2 (id=1298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='dummy0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb6, 0x1a}, 0x9c) 4.398818142s ago: executing program 2 (id=1299): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007", 0x51}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.32217499s ago: executing program 4 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4004e24}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 4.286165503s ago: executing program 33 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4004e24}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 3.474597292s ago: executing program 2 (id=1303): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) 3.19467661s ago: executing program 2 (id=1308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3.097266429s ago: executing program 3 (id=1312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.096111539s ago: executing program 2 (id=1313): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a29045", 0x54}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.068633812s ago: executing program 3 (id=1315): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x1, 0x0, 0x7582) 2.787992479s ago: executing program 3 (id=1319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x7) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.666415768s ago: executing program 3 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.643191721s ago: executing program 3 (id=1324): unshare(0x2c020400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) 1.491961095s ago: executing program 0 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x200}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.491779195s ago: executing program 2 (id=1330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.44820371s ago: executing program 34 (id=1330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.369435407s ago: executing program 3 (id=1332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x7) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.318928322s ago: executing program 35 (id=1332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x7) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.315585302s ago: executing program 0 (id=1334): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r1, 0x0, 0x0) 1.208822243s ago: executing program 0 (id=1336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.208032003s ago: executing program 0 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.180069435s ago: executing program 0 (id=1338): r0 = syz_open_dev$video(&(0x7f0000000000), 0xd64, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0xa, @pix_mp={0xe, 0x70000000, 0x4b534e4e, 0x6, 0x2, [{0x400, 0x913}, {0x0, 0x7}, {0x1ff, 0x7}, {0x8c24, 0x6a2}, {0x2, 0x1a}, {0xffffffff, 0x227e}, {0x1a0, 0x2}, {0x8, 0x4}], 0xc, 0x0, 0x3, 0x0, 0x6}}) 967.975386ms ago: executing program 5 (id=1340): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a29045", 0x54}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 736.172589ms ago: executing program 0 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x200}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 713.606451ms ago: executing program 36 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x200}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 709.920971ms ago: executing program 5 (id=1343): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r1, 0x0, 0x0) 623.37137ms ago: executing program 5 (id=1344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x18, &(0x7f00000026c0)={@flat=@weak_binder={0x77622a85, 0x101, 0x8000000000}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 556.058876ms ago: executing program 5 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 523.8609ms ago: executing program 5 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 138.24µs ago: executing program 5 (id=1347): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 0s ago: executing program 37 (id=1347): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) kernel console output (not intermixed with test programs): ready [ 34.771747][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.773893][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.775590][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.776862][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.777955][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.779345][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.782812][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.791350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.793052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.794785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.796481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.797939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.799461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.803819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.805384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.806820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.808667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.820271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.822265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.823494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.827252][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.830135][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.836291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.837966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.854861][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.856483][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.858128][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.859619][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.864978][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.866677][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.875417][ T4323] device veth0_vlan entered promiscuous mode [ 34.882259][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.883914][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.891869][ T4323] device veth1_vlan entered promiscuous mode [ 34.893326][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.896478][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.897673][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.909960][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.914615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.916157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.917638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.920345][ T4330] device veth0_vlan entered promiscuous mode [ 34.923717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.925156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.929267][ T4326] device veth0_vlan entered promiscuous mode [ 34.933381][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.934783][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.936334][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.937665][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.949450][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.952899][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.954279][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.956593][ T4330] device veth1_vlan entered promiscuous mode [ 34.959417][ T4326] device veth1_vlan entered promiscuous mode [ 34.970362][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.972317][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.973723][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.975105][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.976853][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.991922][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.993440][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.994973][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.003191][ T4323] device veth0_macvtap entered promiscuous mode [ 35.005585][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.007030][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.008534][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.010366][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.012332][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.013878][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.015463][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.017314][ T4319] device veth0_vlan entered promiscuous mode [ 35.020278][ T4319] device veth1_vlan entered promiscuous mode [ 35.025798][ T4330] device veth0_macvtap entered promiscuous mode [ 35.028461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.030093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.032656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.034195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.037139][ T4323] device veth1_macvtap entered promiscuous mode [ 35.041237][ T4326] device veth0_macvtap entered promiscuous mode [ 35.043760][ T4326] device veth1_macvtap entered promiscuous mode [ 35.052731][ T4330] device veth1_macvtap entered promiscuous mode [ 35.068347][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.071568][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.073006][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.074460][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.075953][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.077377][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.078831][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.080424][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.087727][ T4319] device veth0_macvtap entered promiscuous mode [ 35.090138][ T4319] device veth1_macvtap entered promiscuous mode [ 35.093802][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.095502][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.097732][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.100046][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.102940][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.104276][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.105579][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.106858][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.108980][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.110979][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.112435][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.113854][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.115429][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.116950][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.118555][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.119972][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.126709][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.128431][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.131217][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.135244][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.136865][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.138449][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.140091][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.143191][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.144434][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.146070][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.147614][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.149188][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.153974][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.155591][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.158095][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.159441][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.161534][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.162961][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.170328][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.173019][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.174661][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.176459][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.177935][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.179430][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.182225][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.187787][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.189461][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.193690][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.195491][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.197059][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.198711][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.201261][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.206009][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.207736][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.209271][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.211699][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.213174][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.214842][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.217131][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.218872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.220487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.222286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.223681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.225159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.226783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.236077][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237429][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.238857][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.240199][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.242767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.244192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.248799][ T4329] device veth0_vlan entered promiscuous mode [ 35.256533][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.258011][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.259462][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.261129][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.273273][ T4329] device veth1_vlan entered promiscuous mode [ 35.296619][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.298020][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.306195][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.307723][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.309136][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.333407][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.334674][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.335990][ T4329] device veth0_macvtap entered promiscuous mode [ 35.337532][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.338458][ T4329] device veth1_macvtap entered promiscuous mode [ 35.338985][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.345909][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.347437][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.349044][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.352026][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.353555][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.355228][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.356893][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.358570][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.362010][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.363228][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.364637][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.365934][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.367471][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.368853][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.370290][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.373159][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.379954][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.390769][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.392060][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.394359][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.396012][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.397446][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.398894][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.400447][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.403685][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.405264][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.406788][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.408443][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.411429][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.413314][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.414795][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.428002][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.429686][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.431578][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.432962][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438243][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.439496][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.440032][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.442172][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.442926][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.445515][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.464545][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.466003][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.467813][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.513958][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.515252][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.524686][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.532906][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.534226][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.535953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.557930][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.559256][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.562912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.645324][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.657003][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.973679][ T4445] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 35.977333][ T4445] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 36.391985][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.394926][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.411989][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 36.412963][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 36.413970][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 36.414875][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 36.415839][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 36.535291][ T27] audit: type=1326 audit(36.520:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.3.12" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255b3a8 code=0x0 [ 36.841739][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 36.843432][ T4465] bridge_slave_0: default FDB implementation only supports local addresses [ 36.845600][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 36.847186][ T4468] bridge_slave_0: default FDB implementation only supports local addresses [ 37.230799][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.411874][ T4373] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 37.414689][ T4373] usb 1-1: config 0 has no interfaces? [ 37.417045][ T4373] usb 1-1: config 0 has no interfaces? [ 37.418994][ T4373] usb 1-1: config 0 has no interfaces? [ 37.423249][ T4373] usb 1-1: config 0 has no interfaces? [ 37.426078][ T4373] usb 1-1: config 0 has no interfaces? [ 37.427913][ T4373] usb 1-1: config 0 has no interfaces? [ 37.429847][ T4373] usb 1-1: config 0 has no interfaces? [ 37.432829][ T4373] usb 1-1: config 0 has no interfaces? [ 37.435523][ T4373] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 37.437289][ T4373] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 37.438757][ T4373] usb 1-1: Product: syz [ 37.439631][ T4373] usb 1-1: Manufacturer: syz [ 37.440974][ T4373] usb 1-1: SerialNumber: syz [ 37.455818][ T4373] usb 1-1: config 0 descriptor?? [ 37.574945][ T4542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.579238][ T4542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.695479][ T4373] usb 1-1: USB disconnect, device number 2 [ 38.432666][ T4572] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 38.434000][ T4572] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 38.490893][ T4320] Bluetooth: hci1: command 0x040f tx timeout [ 38.491522][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 38.491987][ T4320] Bluetooth: hci3: command 0x040f tx timeout [ 38.492870][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 38.493752][ T4320] Bluetooth: hci2: command 0x040f tx timeout [ 39.374651][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.377532][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.460718][ T4380] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.553341][ T4632] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 39.597233][ T4632] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 39.641057][ T4380] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 39.649830][ T4380] usb 1-1: config 0 has no interfaces? [ 39.652548][ T4380] usb 1-1: config 0 has no interfaces? [ 39.660100][ T4380] usb 1-1: config 0 has no interfaces? [ 39.662998][ T4380] usb 1-1: config 0 has no interfaces? [ 39.664640][ T4380] usb 1-1: config 0 has no interfaces? [ 39.666194][ T4380] usb 1-1: config 0 has no interfaces? [ 39.666743][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 39.667752][ T4380] usb 1-1: config 0 has no interfaces? [ 39.670154][ T4380] usb 1-1: config 0 has no interfaces? [ 39.673922][ T4380] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 39.675378][ T4380] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 39.676694][ T4380] usb 1-1: Product: syz [ 39.677402][ T4380] usb 1-1: Manufacturer: syz [ 39.678147][ T4380] usb 1-1: SerialNumber: syz [ 39.680764][ T4380] usb 1-1: config 0 descriptor?? [ 39.887525][ T4310] usb 1-1: USB disconnect, device number 3 [ 39.908541][ T4648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.52'. [ 39.952984][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.954618][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.253319][ T4663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 40.376917][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.378558][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.412369][ T4671] Zero length message leads to an empty skb [ 40.570929][ T4320] Bluetooth: hci2: command 0x0419 tx timeout [ 40.571147][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 40.571968][ T4320] Bluetooth: hci3: command 0x0419 tx timeout [ 40.572974][ T4322] Bluetooth: hci4: command 0x0419 tx timeout [ 40.573981][ T4320] Bluetooth: hci1: command 0x0419 tx timeout [ 40.692495][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 40.740721][ T4387] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.923703][ T4387] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 40.925210][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 40.926443][ T4387] usb 1-1: Product: syz [ 40.927179][ T4387] usb 1-1: SerialNumber: syz [ 40.929177][ T4387] usb 1-1: config 0 descriptor?? [ 41.029669][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.032077][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.137886][ T4387] hso 1-1:0.0: Failed to find BULK IN ep [ 41.205184][ T4739] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 41.206647][ T4739] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 41.341797][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.345430][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.346366][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.346876][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.373837][ T4387] usb 1-1: USB disconnect, device number 4 [ 41.509515][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.511380][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.513804][ T4759] syz.3.103 uses obsolete (PF_INET,SOCK_PACKET) [ 41.542314][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.545303][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.578640][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 41.935362][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.936750][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.095201][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.096707][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.177217][ T4789] loop2: detected capacity change from 0 to 40427 [ 42.184629][ T4789] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.185897][ T4789] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.201551][ T4789] F2FS-fs (loop2): invalid crc value [ 42.230605][ T4789] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.254069][ T4789] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.255443][ T4789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.278749][ T4320] Bluetooth: Wrong link type (-22) [ 42.851570][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.853201][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.078332][ T4843] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 43.084931][ T4843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.133534][ T4850] netlink: 'syz.1.141': attribute type 5 has an invalid length. [ 43.168631][ T4854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.172652][ T4854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.313490][ T4858] loop2: detected capacity change from 0 to 40427 [ 43.320216][ T4858] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 43.323957][ T4858] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.333977][ T4858] F2FS-fs (loop2): invalid crc value [ 43.355625][ T4858] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.377757][ T4858] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.378994][ T4858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.890779][ T4310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.350615][ T4310] usb 1-1: Using ep0 maxpacket: 8 [ 44.353436][ T4310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.355546][ T4310] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 44.356801][ T4310] usb 1-1: config 4 has no interface number 0 [ 44.357780][ T4310] usb 1-1: config 4 interface 30 has no altsetting 0 [ 44.361574][ T4310] usb 1-1: string descriptor 0 read error: -22 [ 44.362580][ T4310] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 44.363942][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.368221][ T4310] dw2102: su3000_identify_state [ 44.368951][ T4310] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 44.370003][ T4310] dw2102: su3000_power_ctrl: 1, initialized 0 [ 44.373632][ T4310] dvb-usb: bulk message failed: -22 (2/0) [ 44.376434][ T4310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 44.378212][ T4310] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 44.379484][ T4310] usb 1-1: media controller created [ 44.380437][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.382588][ T4310] dw2102: i2c transfer failed. [ 44.383375][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.384321][ T4310] dw2102: i2c transfer failed. [ 44.385069][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.385952][ T4310] dw2102: i2c transfer failed. [ 44.386633][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.387495][ T4310] dw2102: i2c transfer failed. [ 44.388286][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.389165][ T4310] dw2102: i2c transfer failed. [ 44.389973][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 44.393300][ T4310] dw2102: i2c transfer failed. [ 44.394002][ T4310] dvb-usb: MAC address: 02:02:02:02:02:02 [ 44.398247][ T4310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 44.401893][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 44.402686][ T4310] dw2102: command 0x0e transfer failed. [ 44.403591][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 44.404411][ T4310] dw2102: command 0x0e transfer failed. [ 44.720743][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 44.721698][ T4310] dw2102: command 0x0e transfer failed. [ 44.722609][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 44.723432][ T4310] dw2102: command 0x0e transfer failed. [ 44.724243][ T4310] dvb-usb: bulk message failed: -22 (1/0) [ 44.725220][ T4310] dw2102: command 0x51 transfer failed. [ 44.728666][ T4310] dvb-usb: bulk message failed: -22 (5/0) [ 44.729584][ T4310] dw2102: i2c probe for address 0x68 failed. [ 44.730509][ T4310] dvb-usb: bulk message failed: -22 (5/0) [ 44.731752][ T4310] dw2102: i2c probe for address 0x69 failed. [ 44.732687][ T4310] dvb-usb: bulk message failed: -22 (5/0) [ 44.733630][ T4310] dw2102: i2c probe for address 0x6a failed. [ 44.737406][ T4882] dw2102: i2c wr: len=66 is too big! [ 44.737406][ T4882] [ 44.738819][ T4310] dw2102: probing for demodulator failed. Is the external power switched on? [ 44.740159][ T4310] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 44.750248][ T4310] Registered IR keymap rc-tt-1500 [ 44.751827][ T4310] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 44.753624][ T4310] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input2 [ 44.756200][ T4310] dvb-usb: schedule remote query interval to 250 msecs. [ 44.757258][ T4310] dw2102: su3000_power_ctrl: 0, initialized 1 [ 44.758272][ T4310] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 44.763954][ T4310] usb 1-1: USB disconnect, device number 5 [ 44.779269][ T4922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.780857][ T4922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.863959][ T4310] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 44.871910][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 45.265779][ T4940] device syzkaller0 entered promiscuous mode [ 45.602975][ T4942] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 45.776601][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 45.953632][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 46.004723][ T4971] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 46.018374][ T4971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.045511][ T4973] block device autoloading is deprecated and will be removed. [ 46.164731][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 46.166240][ T4977] bridge_slave_0: default FDB implementation only supports local addresses [ 46.331798][ T4333] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 46.333196][ T4333] Bluetooth: hci1: Injecting HCI hardware error event [ 46.335744][ T4320] Bluetooth: hci1: hardware error 0x00 [ 46.548332][ T5009] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 46.574025][ T5009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.107394][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 47.108960][ T5022] bridge_slave_0: default FDB implementation only supports local addresses [ 47.187830][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.192824][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.354466][ T5041] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 47.361403][ T5041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.449765][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 47.451288][ T5049] bridge_slave_0: default FDB implementation only supports local addresses [ 47.754163][ T5066] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 47.760101][ T5069] loop2: detected capacity change from 0 to 7 [ 47.760738][ T5066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.764013][ T5069] Dev loop2: unable to read RDB block 7 [ 47.765112][ T5069] loop2: unable to read partition table [ 47.766272][ T5069] loop2: partition table beyond EOD, truncated [ 47.775320][ T5069] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.328034][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 48.407627][ T5089] bond3 (unregistering): Released all slaves [ 48.491722][ T4320] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 48.492899][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 48.523901][ T5102] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 48.530174][ T5102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.670644][ T4380] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.748888][ T5123] netlink: 'syz.1.241': attribute type 29 has an invalid length. [ 48.750195][ T5123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.241'. [ 48.776418][ T5123] netlink: 'syz.1.241': attribute type 29 has an invalid length. [ 48.783523][ T5123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.241'. [ 48.787527][ T5120] netlink: 'syz.1.241': attribute type 29 has an invalid length. [ 48.789008][ T5120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.241'. [ 48.864537][ T78] block nbd0: Attempted send on invalid socket [ 48.865508][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 48.870618][ T4380] usb 1-1: Using ep0 maxpacket: 32 [ 48.873362][ T4380] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 48.874484][ T4380] usb 1-1: config 0 has no interface number 0 [ 48.875378][ T4380] usb 1-1: config 0 interface 196 has no altsetting 0 [ 48.878367][ T4380] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 48.879759][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.881151][ T4380] usb 1-1: Product: syz [ 48.881796][ T4380] usb 1-1: Manufacturer: syz [ 48.882485][ T4380] usb 1-1: SerialNumber: syz [ 48.886714][ T4380] usb 1-1: config 0 descriptor?? [ 49.070350][ T5132] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 49.095056][ T4380] ipheth 1-1:0.196: Unable to find endpoints [ 49.097606][ T4380] usb 1-1: USB disconnect, device number 6 [ 49.143163][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 49.418086][ T5139] fuse: Unknown parameter 'åïC€mode' [ 49.772431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 49.940724][ T4310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.302345][ T4310] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 50.306651][ T4310] usb 1-1: config 0 has no interfaces? [ 50.308446][ T4310] usb 1-1: config 0 has no interfaces? [ 50.310153][ T4310] usb 1-1: config 0 has no interfaces? [ 50.314010][ T4310] usb 1-1: config 0 has no interfaces? [ 50.316146][ T4310] usb 1-1: config 0 has no interfaces? [ 50.318019][ T4310] usb 1-1: config 0 has no interfaces? [ 50.323988][ T4310] usb 1-1: config 0 has no interfaces? [ 50.326380][ T4310] usb 1-1: config 0 has no interfaces? [ 50.330050][ T4310] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 50.335467][ T4310] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 50.337033][ T4310] usb 1-1: Product: syz [ 50.337697][ T4310] usb 1-1: Manufacturer: syz [ 50.338632][ T4310] usb 1-1: SerialNumber: syz [ 50.352893][ T4310] usb 1-1: config 0 descriptor?? [ 50.411505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 50.559712][ T14] usb 1-1: USB disconnect, device number 7 [ 50.693545][ T5166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.695064][ T5166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.763210][ T5176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 52.098471][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.099902][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.130750][ T4310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 52.310631][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 52.312782][ T4310] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 52.314141][ T4310] usb 1-1: config 0 has no interface number 0 [ 52.315256][ T4310] usb 1-1: config 0 interface 196 has no altsetting 0 [ 52.326987][ T4310] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 52.328378][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.329545][ T4310] usb 1-1: Product: syz [ 52.330140][ T4310] usb 1-1: Manufacturer: syz [ 52.337442][ T4310] usb 1-1: SerialNumber: syz [ 52.339238][ T4310] usb 1-1: config 0 descriptor?? [ 53.472411][ T5210] loop4: detected capacity change from 0 to 128 [ 53.530190][ T4310] ipheth 1-1:0.196: Unable to find endpoints [ 53.536915][ T4310] usb 1-1: USB disconnect, device number 8 [ 54.668172][ T5245] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 55.790132][ T5250] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 55.850875][ T51] block nbd0: Attempted send on invalid socket [ 55.851977][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 57.792728][ T5290] loop2: detected capacity change from 0 to 128 [ 58.020540][ C1] sched: RT throttling activated [ 59.076022][ T5295] tipc: Started in network mode [ 59.076937][ T5295] tipc: Node identity 4e2703e700dc, cluster identity 4711 [ 59.078028][ T5295] tipc: Enabled bearer , priority 0 [ 59.091052][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.119120][ T5295] tipc: Resetting bearer [ 59.201110][ T5293] tipc: Disabling bearer [ 59.248655][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 59.264579][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 61.079082][ T5340] loop4: detected capacity change from 0 to 128 [ 61.902628][ T5348] loop3: detected capacity change from 0 to 128 [ 63.163748][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 63.252783][ T5348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.266054][ T5354] tipc: Started in network mode [ 63.267033][ T5354] tipc: Node identity bae014b356b2, cluster identity 4711 [ 63.275768][ T5354] tipc: Enabled bearer , priority 0 [ 63.287420][ T5354] tipc: Resetting bearer [ 63.407696][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 63.450982][ T5353] tipc: Disabling bearer [ 63.471464][ T5363] netlink: 'syz.1.322': attribute type 4 has an invalid length. [ 63.488525][ T5366] netlink: 'syz.1.322': attribute type 4 has an invalid length. [ 63.493972][ T5365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.326'. [ 64.492597][ T22] cfg80211: failed to load regulatory.db [ 64.494424][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495387][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.085375][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.086929][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.133643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.160431][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.161802][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.167357][ T5387] loop3: detected capacity change from 0 to 40427 [ 65.181480][ T5387] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 65.182784][ T5387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.189654][ T5387] F2FS-fs (loop3): invalid crc value [ 65.213253][ T5387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.229345][ T5387] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.231981][ T5387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.394519][ T5411] device syzkaller0 entered promiscuous mode [ 65.669657][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 65.772458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 66.413892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.079140][ T5448] +: renamed from syzkaller0 [ 67.399897][ T5452] device syzkaller0 entered promiscuous mode [ 67.417003][ T5461] tipc: Started in network mode [ 67.417845][ T5461] tipc: Node identity 4, cluster identity 4711 [ 67.418833][ T5461] tipc: Node number set to 4 [ 67.490376][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 67.505179][ T5473] netlink: 'syz.4.357': attribute type 3 has an invalid length. [ 67.558729][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.560042][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.590045][ T5481] netlink: 'syz.2.364': attribute type 22 has an invalid length. [ 68.331360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 68.804254][ T5503] netlink: 'syz.4.373': attribute type 3 has an invalid length. [ 68.822492][ T5509] device syzkaller0 entered promiscuous mode [ 68.924029][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 69.474007][ T5550] +: renamed from syzkaller0 [ 69.557864][ T5553] netlink: 'syz.4.392': attribute type 3 has an invalid length. [ 69.626932][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 69.673388][ T5560] device syzkaller0 entered promiscuous mode [ 69.885617][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.890335][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.004435][ T5579] +: renamed from syzkaller0 [ 70.261947][ T5596] device syzkaller0 entered promiscuous mode [ 70.828425][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 70.882078][ T5623] +: renamed from syzkaller0 [ 71.205496][ T5641] device syzkaller0 entered promiscuous mode [ 71.426949][ T5649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.428436][ T5649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.443590][ T5649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.445176][ T5649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.528940][ T5663] +: renamed from syzkaller0 [ 73.164410][ T5688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.165867][ T5688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.302369][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.303726][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.599598][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.602843][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.607844][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.610104][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.080730][ T4373] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 74.740613][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 74.742948][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.744753][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.746174][ T4373] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 74.747482][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.754614][ T4373] usb 1-1: config 0 descriptor?? [ 74.781362][ T5715] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004 [ 75.173390][ T4373] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 75.212675][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.214567][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.442860][ T4364] usb 1-1: USB disconnect, device number 9 [ 75.738030][ T5737] netlink: 'syz.2.465': attribute type 5 has an invalid length. [ 75.760430][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.762559][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.771968][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.774345][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.942022][ T5757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 77.816653][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.818298][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.569489][ T5794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 80.684657][ T5812] tipc: Enabled bearer , priority 0 [ 80.708107][ T5810] tipc: Resetting bearer [ 80.771276][ T5809] tipc: Disabling bearer [ 80.773766][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 80.775254][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 80.776648][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 81.231505][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.390666][ T7] usb 1-1: device descriptor read/64, error -71 [ 82.700714][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 82.850727][ T7] usb 1-1: device descriptor read/64, error -71 [ 82.970980][ T7] usb usb1-port1: attempt power cycle [ 83.390707][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 83.455567][ T7] usb 1-1: device descriptor read/8, error -71 [ 83.582699][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 83.584168][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 83.591448][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 83.720647][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 84.765983][ T7] usb 1-1: device not accepting address 13, error -71 [ 85.030646][ T7] usb usb1-port1: unable to enumerate USB device [ 85.068281][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 85.515778][ T7] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 85.523922][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 85.527932][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 85.536712][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.545102][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.715841][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 85.727934][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.729654][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.732364][ T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.734263][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.037855][ T7] usb 1-1: config 0 descriptor?? [ 86.265484][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 86.339498][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 86.442500][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 86.471257][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 86.472496][ T7] usb 1-1: media controller created [ 86.473570][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.500507][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 87.733906][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 87.740423][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 87.742783][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 87.744217][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 87.747756][ T7] usb 1-1: USB disconnect, device number 14 [ 87.800830][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 87.802319][ T5952] bridge_slave_0: default FDB implementation only supports local addresses [ 87.823894][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 87.894956][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 87.988710][ T5981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.996706][ T5981] bond3: (slave netdevsim0): Enslaving as an active interface with an up link [ 87.998242][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 88.122044][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 88.123839][ T5993] vcan0: Master is either lo or non-ether device [ 89.241815][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 89.247189][ T6006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.250648][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 89.256962][ T6006] device bond_slave_0 entered promiscuous mode [ 89.258067][ T6006] device bond_slave_1 entered promiscuous mode [ 89.259505][ T6006] device wlan1 entered promiscuous mode [ 89.264306][ T6006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.267518][ T6006] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 89.269074][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 89.299267][ T6011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.307781][ T6011] bond4: (slave netdevsim0): Enslaving as an active interface with an up link [ 89.381136][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 89.410614][ T7] usb 1-1: device descriptor read/64, error -71 [ 90.553062][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.559230][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.617061][ T6042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.625652][ T6042] bond4: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.627464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 90.696154][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 90.731589][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 90.840617][ T7] usb 1-1: device descriptor read/64, error -71 [ 90.960694][ T7] usb usb1-port1: attempt power cycle [ 91.119360][ T6069] fuse: Bad value for 'fd' [ 91.163710][ T6071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.175837][ T6071] bond3: (slave netdevsim0): Releasing backup interface [ 91.224942][ T6071] bond4: (slave netdevsim0): Enslaving as an active interface with an up link [ 91.228805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 91.323444][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.325982][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.620673][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 91.759462][ T6093] fuse: Bad value for 'fd' [ 92.389927][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 92.391441][ T6111] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 92.499580][ T6119] fuse: Bad value for 'fd' [ 92.832919][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 93.104338][ T6149] binder: tried to use weak ref as strong ref [ 93.105620][ T6149] binder: 6148:6149 Acquire 1 refcount change on invalid ref 0 ret -22 [ 93.110861][ T6149] binder: 6148:6149 got transaction to invalid handle, 1 [ 93.114436][ T6149] binder: 6149:6148 cannot find target node [ 93.116544][ T6149] binder: 6148:6149 transaction call to 0:0 failed 3/29201/-22, size 20-24 line 3054 [ 93.123312][ T4364] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.265580][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'. [ 93.804893][ T6181] binder: 6180:6181 tried to acquire reference to desc 0, got 1 instead [ 93.806982][ T6181] binder_alloc: 6180: binder_alloc_buf, no vma [ 93.808705][ T6181] binder: cannot allocate buffer: vma cleared, target dead or dying [ 93.808823][ T6181] binder: 6180:6181 transaction call to 6180:0 failed 8/29189/-3, size 20-24 line 3239 [ 93.815299][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 94.088365][ T6199] loop3: detected capacity change from 0 to 40427 [ 94.098216][ T6199] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.099430][ T6199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.104801][ T6199] F2FS-fs (loop3): invalid crc value [ 94.125413][ T6199] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.150680][ T6199] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.151776][ T6199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.253453][ T6220] loop4: detected capacity change from 0 to 7 [ 94.255964][ T4920] Dev loop4: unable to read RDB block 7 [ 94.256989][ T4920] loop4: unable to read partition table [ 94.257983][ T4920] loop4: partition table beyond EOD, truncated [ 94.260167][ T6220] Dev loop4: unable to read RDB block 7 [ 94.262158][ T6220] loop4: unable to read partition table [ 94.263053][ T6220] loop4: partition table beyond EOD, truncated [ 94.269326][ T6220] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.282071][ T3935] Dev loop4: unable to read RDB block 7 [ 94.283080][ T3935] loop4: unable to read partition table [ 94.284006][ T3935] loop4: partition table beyond EOD, truncated [ 94.522387][ T6239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.655'. [ 95.832705][ T6280] loop0: detected capacity change from 0 to 40427 [ 95.841128][ T6280] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 95.843573][ T6280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.848214][ T6280] F2FS-fs (loop0): invalid crc value [ 95.859263][ T6280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.877864][ T6280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.879175][ T6280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.050335][ T6314] netlink: 'syz.2.680': attribute type 6 has an invalid length. [ 96.144091][ T6322] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 96.149878][ T6322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 96.158155][ T6322] bond4: (slave netdevsim0): Releasing backup interface [ 96.203325][ T6322] bond5: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.204926][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 97.230676][ T27] audit: type=1326 audit(97.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa035b3a8 code=0x7ffc0000 [ 97.261097][ T27] audit: type=1326 audit(97.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=185 compat=0 ip=0xffffa035b3a8 code=0x7ffc0000 [ 97.265979][ T27] audit: type=1326 audit(97.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa035b3a8 code=0x7ffc0000 [ 97.522747][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 97.524199][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 97.862920][ T6375] loop1: detected capacity change from 0 to 40427 [ 97.866193][ T6375] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.868021][ T6375] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.870030][ T6375] F2FS-fs (loop1): invalid crc value [ 98.411325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.696693][ T6375] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.725906][ T6375] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.727017][ T6375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.052286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.244291][ T6444] random: crng reseeded on system resumption [ 100.455423][ T6441] loop1: detected capacity change from 0 to 40427 [ 100.458769][ T6441] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.459957][ T6441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.463151][ T6441] F2FS-fs (loop1): invalid crc value [ 100.482127][ T6441] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.495882][ T6441] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 100.497088][ T6441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.971694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.759619][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.763508][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.789411][ T6488] netlink: 'syz.3.746': attribute type 5 has an invalid length. [ 102.266895][ T6509] loop9: detected capacity change from 0 to 7 [ 102.272052][ T4920] Dev loop9: unable to read RDB block 7 [ 102.272927][ T4920] loop9: unable to read partition table [ 102.273864][ T4920] loop9: partition table beyond EOD, truncated [ 102.286506][ T6509] Dev loop9: unable to read RDB block 7 [ 102.287465][ T6509] loop9: unable to read partition table [ 102.288480][ T6509] loop9: partition table beyond EOD, truncated [ 102.289449][ T6509] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.355363][ T6515] tipc: Enabled bearer , priority 0 [ 102.358735][ T6515] device syzkaller0 entered promiscuous mode [ 102.445985][ T6515] tipc: Resetting bearer [ 102.456620][ T6514] tipc: Resetting bearer [ 102.532413][ T6514] tipc: Disabling bearer [ 102.555148][ T6511] loop0: detected capacity change from 0 to 40427 [ 102.558202][ T6511] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.559505][ T6511] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.570196][ T6511] F2FS-fs (loop0): invalid crc value [ 102.584941][ T6511] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.603785][ T6511] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.605120][ T6511] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.645547][ T6528] bond5: (slave netdevsim0): Releasing backup interface [ 102.844949][ T6556] tipc: Enabled bearer , priority 0 [ 102.852949][ T6556] device syzkaller0 entered promiscuous mode [ 102.914645][ T6556] tipc: Resetting bearer [ 102.943532][ T6553] tipc: Resetting bearer [ 102.963887][ T6544] binder: BINDER_SET_CONTEXT_MGR already set [ 102.966260][ T6544] binder: 6543:6544 ioctl 4018620d 20004a80 returned -16 [ 102.992502][ T6553] tipc: Disabling bearer [ 103.060856][ T6572] bond4: (slave netdevsim0): Releasing backup interface [ 103.125293][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 103.418388][ T6591] binder: BINDER_SET_CONTEXT_MGR already set [ 103.419294][ T6591] binder: 6590:6591 ioctl 4018620d 20004a80 returned -16 [ 103.469743][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 103.533420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.556467][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 103.660882][ T4387] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 103.809169][ T6625] binder: BINDER_SET_CONTEXT_MGR already set [ 103.810245][ T6625] binder: 6624:6625 ioctl 4018620d 20004a80 returned -16 [ 103.844569][ T4387] usb 1-1: config 0 has no interfaces? [ 103.847829][ T4387] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.849340][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.851124][ T4387] usb 1-1: Product: syz [ 103.851719][ T4387] usb 1-1: Manufacturer: syz [ 103.852497][ T4387] usb 1-1: SerialNumber: syz [ 103.855966][ T4387] usb 1-1: config 0 descriptor?? [ 103.965989][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 104.049007][ T27] audit: type=1326 audit(104.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.049985][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 104.063690][ T27] audit: type=1326 audit(104.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=92 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.067237][ T27] audit: type=1326 audit(104.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.078787][ T27] audit: type=1326 audit(104.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.092498][ T27] audit: type=1326 audit(104.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.107710][ T27] audit: type=1326 audit(104.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.114134][ T27] audit: type=1326 audit(104.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.119727][ T27] audit: type=1326 audit(104.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.127851][ T27] audit: type=1326 audit(104.070:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.142935][ T27] audit: type=1326 audit(104.070:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffb9b5b3a8 code=0x7ffc0000 [ 104.514399][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.517270][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.523700][ T6672] device syzkaller0 entered promiscuous mode [ 104.586273][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 104.803422][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 104.819636][ T6681] bond5 (unregistering): Released all slaves [ 106.169792][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 106.218713][ T6712] bond5 (unregistering): Released all slaves [ 106.413505][ T4428] usb 1-1: USB disconnect, device number 18 [ 106.559506][ T6735] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 106.591606][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 106.825239][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 107.760332][ T6757] bond4: (slave netdevsim0): Releasing backup interface [ 108.169626][ T6785] fuse: Bad value for 'group_id' [ 109.499654][ T6810] __nla_validate_parse: 3 callbacks suppressed [ 109.499666][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 109.532822][ T6815] fuse: Bad value for 'group_id' [ 109.666206][ T6818] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 109.681257][ T6825] loop9: detected capacity change from 0 to 7 [ 109.687177][ T6825] Dev loop9: unable to read RDB block 7 [ 109.688076][ T6825] loop9: unable to read partition table [ 109.689106][ T6825] loop9: partition table beyond EOD, truncated [ 109.707862][ T6825] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.724927][ T6824] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 109.738210][ T6829] netlink: 104 bytes leftover after parsing attributes in process `syz.1.881'. [ 109.780326][ T6834] capability: warning: `syz.1.884' uses deprecated v2 capabilities in a way that may be insecure [ 109.831127][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.832637][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.836675][ T6843] capability: warning: `syz.3.888' uses 32-bit capabilities (legacy support in use) [ 109.936135][ T6848] +: renamed from syzkaller0 [ 110.853434][ T6857] loop9: detected capacity change from 0 to 7 [ 110.855474][ T4920] Dev loop9: unable to read RDB block 7 [ 110.856429][ T4920] loop9: unable to read partition table [ 110.857351][ T4920] loop9: partition table beyond EOD, truncated [ 110.998084][ T6857] Dev loop9: unable to read RDB block 7 [ 110.999155][ T6857] loop9: unable to read partition table [ 111.000271][ T6857] loop9: partition table beyond EOD, truncated [ 111.001443][ T6857] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.009815][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 111.234548][ T6881] loop9: detected capacity change from 0 to 7 [ 111.237263][ T6881] Dev loop9: unable to read RDB block 7 [ 111.238140][ T6881] loop9: unable to read partition table [ 111.239088][ T6881] loop9: partition table beyond EOD, truncated [ 111.240064][ T6881] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.300023][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.305166][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.307493][ T6890] tipc: Enabled bearer , priority 0 [ 111.310318][ T6888] tipc: Disabling bearer [ 112.315847][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 112.317658][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 112.473436][ T6914] loop9: detected capacity change from 0 to 7 [ 112.480911][ T6914] Dev loop9: unable to read RDB block 7 [ 112.481818][ T6914] loop9: AHDI p3 p4 [ 112.482435][ T6914] loop9: partition table partially beyond EOD, truncated [ 112.483565][ T6914] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 112.501622][ T6915] tipc: Enabled bearer , priority 0 [ 112.507104][ T6912] tipc: Disabling bearer [ 112.516337][ T6919] input: syz1 as /devices/virtual/input/input4 [ 112.543290][ T4920] udevd[4920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 112.621453][ T6923] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004 [ 112.659417][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 112.673356][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 113.627727][ T6949] loop9: detected capacity change from 0 to 7 [ 113.639185][ T6949] Dev loop9: unable to read RDB block 7 [ 113.640042][ T6949] loop9: AHDI p3 p4 [ 113.647248][ T6949] loop9: partition table partially beyond EOD, truncated [ 113.648546][ T6949] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 113.665398][ T6953] tipc: Enabled bearer , priority 0 [ 113.668236][ T6952] tipc: Disabling bearer [ 113.688214][ T4920] udevd[4920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 113.803934][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 113.806031][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 113.980601][ T4398] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 114.161557][ T4398] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 114.164145][ T4398] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.165322][ T4398] usb 1-1: can't read configurations, error -61 [ 114.311049][ T4398] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 114.491946][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.948'. [ 114.493536][ T4398] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 114.496271][ T4398] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.497380][ T4398] usb 1-1: can't read configurations, error -61 [ 114.498392][ T4398] usb usb1-port1: attempt power cycle [ 114.547846][ T6984] tipc: Started in network mode [ 114.548644][ T6984] tipc: Node identity a261838ad3cb, cluster identity 4711 [ 114.549713][ T6984] tipc: Enabled bearer , priority 0 [ 114.557875][ T6983] tipc: Disabling bearer [ 114.634263][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 114.902021][ T4398] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 115.552155][ T4398] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 115.561840][ T4398] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 115.563038][ T4398] usb 1-1: can't read configurations, error -61 [ 115.712924][ T4398] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 115.741666][ T4398] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 115.744278][ T4398] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 115.745424][ T4398] usb 1-1: can't read configurations, error -61 [ 115.746556][ T4398] usb usb1-port1: unable to enumerate USB device [ 115.790096][ T6997] netlink: 104 bytes leftover after parsing attributes in process `syz.3.954'. [ 115.860066][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 115.867517][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 115.896485][ T7009] tipc: Enabled bearer , priority 0 [ 115.899307][ T7008] tipc: Disabling bearer [ 115.931165][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'. [ 115.998214][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.000267][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.094421][ T7025] vhci_hcd: default hub control req: 0300 v0006 i0002 l0 [ 116.893199][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.894569][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.938611][ T7029] netlink: 104 bytes leftover after parsing attributes in process `syz.0.967'. [ 117.101699][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 117.104067][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 117.155336][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 117.230890][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 117.256145][ T7040] tipc: Enabled bearer , priority 0 [ 117.269685][ T7039] tipc: Disabling bearer [ 117.273021][ T7042] fuse: Unknown parameter 'grou00000000000000000000' [ 117.542539][ T7071] fuse: Unknown parameter 'grou00000000000000000000' [ 117.574186][ T7073] device bridge_slave_1 left promiscuous mode [ 118.338582][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.604929][ T4387] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 118.628319][ T7073] device bridge_slave_0 left promiscuous mode [ 118.634617][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.781638][ T4387] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 118.784184][ T4387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.785442][ T4387] usb 1-1: can't read configurations, error -61 [ 118.940933][ T4387] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 119.009784][ T7106] fuse: Unknown parameter 'grou00000000000000000000' [ 119.023617][ T7103] input: syz1 as /devices/virtual/input/input5 [ 119.117615][ T7118] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 119.122639][ T7118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.125144][ T4387] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 119.127649][ T4387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.128836][ T4387] usb 1-1: can't read configurations, error -61 [ 119.129956][ T4387] usb usb1-port1: attempt power cycle [ 119.259740][ T7131] fuse: Unknown parameter 'group_i00000000000000000000' [ 119.449607][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.453955][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.495349][ T7149] binder: 7148:7149 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 119.550974][ T4387] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 119.581481][ T7157] fuse: Unknown parameter 'group_i00000000000000000000' [ 119.581800][ T4387] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 119.585157][ T4387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.586347][ T4387] usb 1-1: can't read configurations, error -61 [ 119.742992][ T4387] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 119.781378][ T4387] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 119.783746][ T4387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.784847][ T4387] usb 1-1: can't read configurations, error -61 [ 119.785981][ T4387] usb usb1-port1: unable to enumerate USB device [ 119.804824][ T7172] binder: 7171:7172 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 119.845155][ T7176] device ip6erspan0 entered promiscuous mode [ 119.955973][ T7189] __nla_validate_parse: 9 callbacks suppressed [ 119.955983][ T7189] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1033'. [ 120.057832][ T7199] binder: 7198:7199 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 120.453731][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.455821][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.589434][ T7226] binder: 7225:7226 ioctl 4018620d 0 returned -22 [ 120.591304][ T7226] binder: 7225:7226 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 120.593940][ T7226] binder: 7225:7226 got transaction to invalid handle, 1 [ 120.594930][ T7226] binder: 7226:7225 cannot find target node [ 120.595922][ T7226] binder: 7225:7226 transaction call to 0:0 failed 20/29201/-22, size 20-24 line 3054 [ 120.597823][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.622108][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1050'. [ 120.695617][ T7232] device syzkaller0 entered promiscuous mode [ 120.909264][ T4398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.915286][ T4398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.203858][ T4398] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 121.222917][ T7256] loop3: detected capacity change from 0 to 128 [ 122.245807][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1061'. [ 122.370822][ T7257] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1057'. [ 122.420705][ T4398] usb 1-1: Using ep0 maxpacket: 16 [ 122.435649][ T7273] device syzkaller0 entered promiscuous mode [ 122.491584][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.499183][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.563570][ T4398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.565085][ T4398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.566646][ T4398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.568305][ T4398] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.569909][ T4398] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.581273][ T4398] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.582622][ T4398] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.584422][ T4398] usb 1-1: Manufacturer: syz [ 122.588960][ T4398] usb 1-1: config 0 descriptor?? [ 122.750870][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1071'. [ 122.824440][ T4398] Registered IR keymap rc-hauppauge [ 122.900647][ T4398] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 122.902274][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.940668][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 122.980936][ T4398] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 122.985805][ T4398] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 122.990260][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.085754][ T7299] loop3: detected capacity change from 0 to 128 [ 123.918858][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'. [ 124.050588][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.090729][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.153973][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.180623][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.210662][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.240646][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.270608][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.300679][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.330657][ T4398] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.361481][ T4398] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 124.362768][ T4398] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.366320][ T4398] usb 1-1: USB disconnect, device number 27 [ 124.476206][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 125.670816][ T7352] loop4: detected capacity change from 0 to 128 [ 125.931925][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933212][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.527432][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 126.527441][ T27] audit: type=1326 audit(126.510:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.1.1094" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5b3a8 code=0x0 [ 126.634013][ T7369] binder: BINDER_SET_CONTEXT_MGR already set [ 126.634997][ T7369] binder: 7368:7369 ioctl 4018620d 20004a80 returned -16 [ 126.758722][ T7379] tipc: Enabled bearer , priority 0 [ 126.762885][ T7379] device syzkaller0 entered promiscuous mode [ 126.792951][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1105'. [ 126.800115][ T7379] tipc: Resetting bearer [ 126.803657][ T7378] tipc: Resetting bearer [ 127.906799][ T4398] tipc: Node number set to 1325073383 [ 127.912181][ T7397] loop1: detected capacity change from 0 to 128 [ 128.647691][ T7399] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1112'. [ 128.714388][ T7403] binder: 7402:7403 ioctl c0306201 0 returned -14 [ 128.729292][ T7403] binder: 7402:7403 got transaction to invalid handle, 1 [ 128.730305][ T7403] binder: 7403:7402 cannot find target node [ 128.750758][ T7403] binder: 7402:7403 transaction call to 0:0 failed 25/29201/-22, size 20-24 line 3054 [ 128.758563][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.936915][ T7378] tipc: Disabling bearer [ 129.095372][ T7429] binder: 7428:7429 ioctl c0306201 0 returned -14 [ 129.104865][ T7429] binder: 7428:7429 got transaction to invalid handle, 1 [ 129.106178][ T7429] binder: 7429:7428 cannot find target node [ 129.107013][ T7429] binder: 7428:7429 transaction call to 0:0 failed 29/29201/-22, size 20-24 line 3054 [ 129.124896][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.100437][ T7454] batman_adv: batadv0: Adding interface: dummy0 [ 130.101104][ T7454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.101130][ T7454] batman_adv: batadv0: Interface activated: dummy0 [ 130.118371][ T7454] batadv0: mtu less than device minimum [ 130.120116][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.121701][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.123174][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.124703][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.126197][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.127678][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.129152][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.130671][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.132185][ T7454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.304510][ T7467] binder: 7466:7467 ioctl c0306201 0 returned -14 [ 130.309707][ T7467] binder: 7466:7467 got transaction to invalid handle, 1 [ 130.313431][ T7467] binder: 7467:7466 cannot find target node [ 130.314292][ T7467] binder: 7466:7467 transaction call to 0:0 failed 33/29201/-22, size 20-24 line 3054 [ 130.318675][ T4398] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.364200][ T7476] fuse: Bad value for 'fd' [ 130.458730][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.460242][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.465194][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 131.593156][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1156'. [ 131.634922][ T7507] binder: 7506:7507 got transaction to invalid handle, 1 [ 131.638509][ T7507] binder: 7507:7506 cannot find target node [ 131.893568][ T7515] loop0: detected capacity change from 0 to 40427 [ 131.903857][ T7515] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 131.905235][ T7515] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.907182][ T7515] F2FS-fs (loop0): invalid crc value [ 131.921333][ T7515] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.936008][ T7515] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.937408][ T7515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.331582][ T27] audit: type=1326 audit(132.320:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.3.1167" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255b3a8 code=0x0 [ 133.168242][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 133.308713][ T7547] binder: 7545:7547 got transaction to invalid handle, 1 [ 133.374421][ T7553] fuse: Invalid rootmode [ 133.445025][ T7555] loop9: detected capacity change from 0 to 7 [ 133.459803][ T7555] Dev loop9: unable to read RDB block 7 [ 133.464643][ T7555] loop9: AHDI p3 p4 [ 133.467347][ T7555] loop9: partition table partially beyond EOD, truncated [ 133.468478][ T7555] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 133.538795][ T4920] udevd[4920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 133.594726][ T7579] binder: 7575:7579 got transaction to invalid handle, 1 [ 133.780707][ T4310] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 133.830709][ T7594] loop9: detected capacity change from 0 to 7 [ 133.832215][ T7594] Dev loop9: unable to read RDB block 7 [ 133.833207][ T7594] loop9: AHDI p3 p4 [ 133.833861][ T7594] loop9: partition table partially beyond EOD, truncated [ 133.835588][ T7594] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 133.885089][ T4920] udevd[4920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 133.961955][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.963858][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.965559][ T4310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.967697][ T4310] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.968997][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.971832][ T4310] usb 1-1: config 0 descriptor?? [ 134.170731][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.172644][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.175908][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.177642][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.179102][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.182120][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.372817][ T5020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.378691][ T4310] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 134.385423][ T4310] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.512569][ T5020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.628757][ T5020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.655174][ T4370] usb 1-1: USB disconnect, device number 28 [ 134.687620][ T7604] chnl_net:caif_netlink_parms(): no params data found [ 135.038831][ T5020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.069698][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.071153][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.073053][ T7604] device bridge_slave_0 entered promiscuous mode [ 135.075333][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.076734][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.078209][ T7604] device bridge_slave_1 entered promiscuous mode [ 135.089184][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.093192][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.104043][ T7604] team0: Port device team_slave_0 added [ 135.106068][ T7604] team0: Port device team_slave_1 added [ 135.113448][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.114555][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.118713][ T7604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.121697][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.122773][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.126617][ T7604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.164067][ T7604] device hsr_slave_0 entered promiscuous mode [ 135.201046][ T7604] device hsr_slave_1 entered promiscuous mode [ 135.240620][ T7604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.242640][ T7604] Cannot create hsr debugfs directory [ 135.331173][ T7604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.372070][ T5020] tipc: Left network mode [ 135.372396][ T7604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.422195][ T7604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.472058][ T7604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.721200][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.722463][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.724005][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.725158][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.874513][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.878631][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.880501][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.886425][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 135.899237][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.905079][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.911178][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.994769][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.996371][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.997505][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.029825][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.031510][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.032672][ T5748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.035571][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.037200][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.123130][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.124785][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.126337][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.130111][ T7712] device syzkaller0 entered promiscuous mode [ 136.138066][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.311299][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 136.662296][ T5020] bond5: (slave gretap1): Releasing backup interface [ 136.702640][ T7604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.716946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.718275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.925295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.926969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.966674][ T7604] device veth0_vlan entered promiscuous mode [ 136.970086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.971751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.974076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.975615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.979206][ T7774] tipc: Enabled bearer , priority 0 [ 137.226236][ T7774] device syzkaller0 entered promiscuous mode [ 137.280946][ T7795] tipc: Resetting bearer [ 137.355790][ T7604] device veth1_vlan entered promiscuous mode [ 137.368607][ T7604] device veth0_macvtap entered promiscuous mode [ 137.376159][ T7773] tipc: Resetting bearer [ 137.422866][ T7773] tipc: Disabling bearer [ 137.424982][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.427161][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.640673][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.330599][ T4320] Bluetooth: hci3: command 0x041b tx timeout [ 138.507833][ T7604] device veth1_macvtap entered promiscuous mode [ 138.509876][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.551957][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.553973][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.563762][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.565334][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.566821][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.568340][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.569836][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.575033][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.579598][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.581608][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.584904][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.587226][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.588926][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.592335][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.594174][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.595685][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.597236][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.598659][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.600277][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.602368][ T7604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.603893][ T7604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.606255][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.608491][ T7604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.609934][ T7604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.612185][ T7604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.613541][ T7604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.678744][ T5020] device hsr_slave_0 left promiscuous mode [ 139.001554][ T5020] device hsr_slave_1 left promiscuous mode [ 139.061945][ T7828] loop3: detected capacity change from 0 to 40427 [ 139.074699][ T7828] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.076469][ T7828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.083428][ T7828] F2FS-fs (loop3): invalid crc value [ 139.089941][ T7828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.098750][ T7828] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.100023][ T7828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.102094][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.106598][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.111212][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.112949][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.114671][ T5020] device bridge_slave_1 left promiscuous mode [ 139.116812][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.192245][ T5020] device bridge_slave_0 left promiscuous mode [ 139.193457][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.350939][ T5020] device veth1_macvtap left promiscuous mode [ 139.352259][ T5020] device veth0_macvtap left promiscuous mode [ 139.353369][ T5020] device veth1_vlan left promiscuous mode [ 139.354510][ T5020] device veth0_vlan left promiscuous mode [ 139.415153][ T5020] bond5 (unregistering): Released all slaves [ 140.041557][ T5020] bond4 (unregistering): Released all slaves [ 140.410695][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 140.691577][ T5020] bond3 (unregistering): Released all slaves [ 140.695048][ T5020] bond2 (unregistering): Released all slaves [ 141.596069][ T5020] bond1 (unregistering): Released all slaves [ 142.500614][ T4320] Bluetooth: hci3: command 0x0419 tx timeout [ 143.874623][ T5020] team0 (unregistering): Port device team_slave_1 removed [ 144.031703][ T5020] team0 (unregistering): Port device team_slave_0 removed [ 144.192151][ T5020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.411719][ T5020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.743654][ T5020] bond0 (unregistering): Released all slaves [ 146.974072][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.975757][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.977346][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.978862][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.989357][ T7840] device vlan2 entered promiscuous mode [ 146.990273][ T7840] device erspan0 entered promiscuous mode [ 147.046972][ T7861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.048331][ T7861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.056128][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.096627][ T5248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.113551][ T5248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.116814][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.237923][ T7889] binder: 7887:7889 got transaction to invalid handle, 1 [ 147.239090][ T7889] binder_debug: 8 callbacks suppressed [ 147.239103][ T7889] binder: 7889:7887 cannot find target node [ 147.270087][ T7889] binder: 7887:7889 transaction call to 0:0 failed 49/29201/-22, size 20-24 line 3054 [ 147.272543][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.314884][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.316654][ T7897] loop6: detected capacity change from 0 to 7 [ 147.322204][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.322814][ T7897] Dev loop6: unable to read RDB block 7 [ 147.324364][ T7897] loop6: AHDI p1 p2 p3 [ 147.325014][ T7897] loop6: partition table partially beyond EOD, truncated [ 147.326234][ T7897] loop6: p1 start 231046032 is beyond EOD, truncated [ 147.329216][ T7897] loop6: p2 start 373273912 is beyond EOD, truncated [ 148.617702][ T7934] binder: 7931:7934 got transaction to invalid handle, 1 [ 148.634348][ T7934] binder: 7934:7931 cannot find target node [ 148.639070][ T7934] binder: 7931:7934 transaction call to 0:0 failed 53/29201/-22, size 20-24 line 3054 [ 148.658714][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.703148][ T7937] binder: 7923:7937 ioctl c0306201 20000080 returned -14 [ 148.707106][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.773487][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.499466][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 149.536417][ T7977] bond6 (unregistering): Released all slaves [ 149.560231][ T7982] input: syz1 as /devices/virtual/input/input13 [ 150.644471][ T8006] binder: 8005:8006 got transaction to invalid handle, 1 [ 150.645738][ T8006] binder: 8006:8005 cannot find target node [ 150.646654][ T8006] binder: 8005:8006 transaction call to 0:0 failed 59/29201/-22, size 20-24 line 3054 [ 150.659405][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.895455][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 150.946173][ T8022] bond4 (unregistering): Released all slaves [ 150.954507][ T8028] input: syz1 as /devices/virtual/input/input14 [ 152.715481][ T8063] input: syz1 as /devices/virtual/input/input15 [ 152.765559][ T8065] binder: 8064:8065 tried to acquire reference to desc 0, got 1 instead [ 152.778130][ T8065] binder: 8064:8065 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.785179][ T8065] binder: 8065 RLIMIT_NICE not set [ 152.787334][ T8065] binder: 8065 RLIMIT_NICE not set [ 152.789882][ T8065] binder: 8065 RLIMIT_NICE not set [ 152.793300][ T8065] binder: 8064:8065 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 152.812040][ T4320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.814227][ T4320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.815842][ T4320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.818330][ T4320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.820244][ T4320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.824458][ T4320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.839642][ T24] binder: undelivered TRANSACTION_COMPLETE [ 152.843219][ T24] binder: undelivered TRANSACTION_COMPLETE [ 152.844148][ T24] binder: undelivered transaction 65, process died. [ 152.945955][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'. [ 153.083909][ T8090] binder: 8089:8090 got transaction to invalid handle, 1 [ 153.085268][ T8090] binder: 8090:8089 cannot find target node [ 153.086230][ T8090] binder: 8089:8090 transaction call to 0:0 failed 68/29201/-22, size 20-24 line 3054 [ 153.091039][ T4428] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.342603][ T5020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.326881][ T8127] input: syz1 as /devices/virtual/input/input16 [ 154.543714][ T5020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.551287][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 154.575344][ T8132] binder: tried to use weak ref as strong ref [ 154.576348][ T8132] binder: 8131:8132 Acquire 1 refcount change on invalid ref 0 ret -22 [ 154.578134][ T8132] binder: 8131:8132 got transaction to invalid handle, 1 [ 154.579468][ T8132] binder: 8132:8131 cannot find target node [ 154.580391][ T8132] binder: 8131:8132 transaction call to 0:0 failed 71/29201/-22, size 20-24 line 3054 [ 154.584645][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.641772][ T5020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.652877][ T8136] device syzkaller1 entered promiscuous mode [ 154.686720][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 154.773290][ T4320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.775332][ T4320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.776748][ T4320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.779099][ T4320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.780503][ T4320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.781821][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.811891][ T5020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.870114][ T8154] input: syz1 as /devices/virtual/input/input17 [ 154.880517][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.881837][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.894454][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 154.896680][ T8067] device bridge_slave_0 entered promiscuous mode [ 154.899421][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1335'. [ 154.901827][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.928029][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.930167][ T4333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.936447][ T4333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.937998][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.940035][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.941579][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.955316][ T8162] binder: 8161:8162 ioctl 4018620d 0 returned -22 [ 154.956748][ T8162] binder: 8162:8161 cannot find target node [ 155.061796][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.064273][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.065487][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.067038][ T8067] device bridge_slave_1 entered promiscuous mode [ 155.088809][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.095726][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.129628][ T8067] team0: Port device team_slave_0 added [ 155.132487][ T8067] team0: Port device team_slave_1 added [ 155.142934][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.144088][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.148372][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.197498][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.198762][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.203341][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.271832][ T8067] device hsr_slave_0 entered promiscuous mode [ 155.320892][ T8067] device hsr_slave_1 entered promiscuous mode [ 155.380638][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.381960][ T8067] Cannot create hsr debugfs directory [ 155.396950][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 155.423248][ T8159] chnl_net:caif_netlink_parms(): no params data found [ 155.477953][ T8186] input: syz1 as /devices/virtual/input/input18 [ 155.484516][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.485734][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.487323][ T8159] device bridge_slave_0 entered promiscuous mode [ 155.495700][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.496902][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.498571][ T8159] device bridge_slave_1 entered promiscuous mode [ 155.514656][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.515872][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.517459][ T8146] device bridge_slave_0 entered promiscuous mode [ 155.519776][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.525516][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.527448][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.528901][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.530470][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.532077][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.533329][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.542581][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.544262][ T8146] device bridge_slave_1 entered promiscuous mode [ 155.573327][ T8192] binder: 8191:8192 ioctl 4018620d 0 returned -22 [ 155.576383][ T8159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.587580][ T8159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.606695][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.609280][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.613611][ T8159] team0: Port device team_slave_0 added [ 155.641546][ T8159] team0: Port device team_slave_1 added [ 155.657676][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.659181][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.663598][ T8159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.672433][ T8146] team0: Port device team_slave_0 added [ 155.674921][ T8159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.676048][ T8159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.680331][ T8159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.695262][ T8146] team0: Port device team_slave_1 added [ 155.721925][ T8159] device hsr_slave_0 entered promiscuous mode [ 155.760930][ T8159] device hsr_slave_1 entered promiscuous mode [ 155.800645][ T8159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.801908][ T8159] Cannot create hsr debugfs directory [ 155.809780][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.811325][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.815194][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.818503][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.819648][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.824440][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.826578][ T8067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.865335][ T8067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.972493][ T8067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.014825][ T8067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.101980][ T8146] device hsr_slave_0 entered promiscuous mode [ 156.160899][ T8146] device hsr_slave_1 entered promiscuous mode [ 156.210344][ T4320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.211681][ T8146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.211738][ T8146] Cannot create hsr debugfs directory [ 156.214994][ T4320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.216883][ T4320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.218894][ T4320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.220389][ T4320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.221937][ T4320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.334090][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 156.485292][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.486497][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.488012][ T8187] device bridge_slave_0 entered promiscuous mode [ 156.506804][ T8159] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 156.543988][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.545465][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.546561][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.548066][ T8187] device bridge_slave_1 entered promiscuous mode [ 156.555002][ T8159] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 156.601082][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.700745][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.702279][ T8159] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 156.754030][ T8159] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 156.806172][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.810687][ T4320] Bluetooth: hci1: command 0x0409 tx timeout [ 156.812681][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.814234][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.906912][ T8146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.934001][ T8187] team0: Port device team_slave_0 added [ 156.936176][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.937782][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.939106][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.940278][ T5341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.946253][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.970673][ T4320] Bluetooth: hci2: command 0x0409 tx timeout [ 156.971982][ T4320] Bluetooth: hci4: command 0x041b tx timeout [ 156.994193][ T8146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.022964][ T8187] team0: Port device team_slave_1 added [ 157.024025][ T8146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.063311][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.065075][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.066560][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.067654][ T8121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.123608][ T8146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.160786][ T8159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.163117][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 157.177467][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.178600][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.183642][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.220002][ T8067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.222555][ T8067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.224861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.226510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.228056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.230031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.231810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.233957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.235502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.236935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.239296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.241223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.242792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.244334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.253648][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.254728][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.258582][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.319168][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.320765][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.322605][ T8200] device bridge_slave_0 entered promiscuous mode [ 157.371912][ T8187] device hsr_slave_0 entered promiscuous mode [ 157.410901][ T8187] device hsr_slave_1 entered promiscuous mode [ 157.450594][ T8187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.451904][ T8187] Cannot create hsr debugfs directory [ 157.454691][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.456149][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.458255][ T8200] device bridge_slave_1 entered promiscuous mode [ 157.471423][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.473049][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.594377][ T8159] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.610662][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 157.627658][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.629420][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.632232][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.633442][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.634862][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.636561][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.637969][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.639086][ T5249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.640385][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.647458][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.650128][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.708847][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.735975][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.737876][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.739734][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.741920][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.743414][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.744617][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.794821][ T8200] team0: Port device team_slave_0 added [ 157.798229][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.799960][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.804730][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.814774][ T8200] team0: Port device team_slave_1 added [ 157.824490][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.826161][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.873313][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.878831][ T8159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.891489][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.893876][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.895500][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.911255][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.912579][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.916283][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.161421][ T5020] bond0: (slave wlan1): Releasing backup interface [ 158.204127][ T5020] ------------[ cut here ]------------ [ 158.205141][ T5020] WARNING: CPU: 1 PID: 5020 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x16c/0x19c [ 158.206842][ T5020] Modules linked in: [ 158.207451][ T5020] CPU: 1 PID: 5020 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 158.208671][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.210336][ T5020] Workqueue: netns cleanup_net [ 158.211169][ T5020] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 158.212367][ T5020] pc : ieee80211_link_release_channel+0x16c/0x19c [ 158.213351][ T5020] lr : ieee80211_link_release_channel+0x16c/0x19c [ 158.214337][ T5020] sp : ffff800024347540 [ 158.214978][ T5020] x29: ffff800024347540 x28: ffff800024347640 x27: ffff0000f5bf0060 [ 158.216218][ T5020] x26: ffff8000243477c0 x25: ffff0000f5bf0010 x24: 1fffe0001eb7e183 [ 158.217500][ T5020] x23: 1fffe0001eb7e2b5 x22: dfff800000000000 x21: 0000000000000000 [ 158.218631][ T5020] x20: ffff0000f5bf2258 x19: ffff0000f5bf15a8 x18: ffff800011abbcc0 [ 158.219781][ T5020] x17: ffff8000181f9000 x16: ffff8000082d1108 x15: ffff80000d3c4524 [ 158.220939][ T5020] x14: ffff800011170ce8 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 158.222220][ T5020] x11: ff00800011297000 x10: 0000000000000000 x9 : ffff800011297000 [ 158.223504][ T5020] x8 : ffff0000cee28000 x7 : ffff800011296f00 x6 : 0000000000000000 [ 158.224745][ T5020] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c98ac [ 158.226042][ T5020] x2 : ffff0000cee28000 x1 : 0000000000000000 x0 : 0000000000000000 [ 158.227292][ T5020] Call trace: [ 158.227774][ T5020] ieee80211_link_release_channel+0x16c/0x19c [ 158.228742][ T5020] ieee80211_link_stop+0x9c/0xc4 [ 158.229546][ T5020] ieee80211_uninit+0x98/0xd0 [ 158.230354][ T5020] unregister_netdevice_many+0x10a4/0x1740 [ 158.231332][ T5020] ieee80211_remove_interfaces+0x38c/0x5ec [ 158.232279][ T5020] ieee80211_unregister_hw+0x60/0x278 [ 158.233092][ T5020] mac80211_hwsim_del_radio+0x210/0x3a8 [ 158.233977][ T5020] hwsim_exit_net+0x49c/0x558 [ 158.234751][ T5020] cleanup_net+0x5c4/0xa74 [ 158.235497][ T5020] process_one_work+0x7f4/0x13a8 [ 158.236370][ T5020] worker_thread+0x8c8/0xfbc [ 158.237114][ T5020] kthread+0x250/0x2d8 [ 158.237786][ T5020] ret_from_fork+0x10/0x20 [ 158.238492][ T5020] irq event stamp: 1870866 [ 158.239221][ T5020] hardirqs last enabled at (1870865): [] __cancel_work_timer+0x2b0/0x448 [ 158.240800][ T5020] hardirqs last disabled at (1870866): [] el1_dbg+0x24/0x80 [ 158.242260][ T5020] softirqs last enabled at (1869480): [] dev_mc_flush+0x1b0/0x1f4 [ 158.243826][ T5020] softirqs last disabled at (1869478): [] local_bh_disable+0x10/0x34 [ 158.245364][ T5020] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.251364][ T4320] Bluetooth: hci3: command 0x0409 tx timeout [ 158.267312][ T5020] ------------[ cut here ]------------ [ 158.268274][ T5020] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 158.269654][ T5020] WARNING: CPU: 1 PID: 5020 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x358/0x63c [ 158.271251][ T5020] Modules linked in: [ 158.271938][ T5020] CPU: 1 PID: 5020 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 158.273387][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.275006][ T5020] Workqueue: netns cleanup_net [ 158.275833][ T5020] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 158.277073][ T5020] pc : drv_unassign_vif_chanctx+0x358/0x63c [ 158.278018][ T5020] lr : drv_unassign_vif_chanctx+0x358/0x63c [ 158.278892][ T5020] sp : ffff8000243473f0 [ 158.279517][ T5020] x29: ffff8000243473f0 x28: 0000000000000000 x27: ffff0000f5bf0c80 [ 158.280723][ T5020] x26: ffff0000f5bf2698 x25: dfff800000000000 x24: ffff0000f5bf27e8 [ 158.282071][ T5020] x23: 0000000000000000 x22: ffff0000dbf9b200 x21: ffff0000f5bf27e8 [ 158.283466][ T5020] x20: ffff800017a8b000 x19: ffff0000f5bf0c80 x18: ffff800011abbcc0 [ 158.284739][ T5020] x17: 0000000000000000 x16: ffff8000082d25b8 x15: 0000000000000000 [ 158.286072][ T5020] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 158.287424][ T5020] x11: ff00800008191ca8 x10: 0000000000000000 x9 : ac97ef367baa3e00 [ 158.288693][ T5020] x8 : ac97ef367baa3e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 158.290005][ T5020] x5 : ffff800024346e78 x4 : ffff8000151a4920 x3 : ffff80000852e428 [ 158.291211][ T5020] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 158.292437][ T5020] Call trace: [ 158.292992][ T5020] drv_unassign_vif_chanctx+0x358/0x63c [ 158.293921][ T5020] ieee80211_assign_link_chanctx+0x140/0x82c [ 158.294839][ T5020] __ieee80211_link_release_channel+0x29c/0x55c [ 158.295901][ T5020] ieee80211_link_release_channel+0x130/0x19c [ 158.296942][ T5020] ieee80211_link_stop+0x9c/0xc4 [ 158.297755][ T5020] ieee80211_uninit+0x98/0xd0 [ 158.298541][ T5020] unregister_netdevice_many+0x10a4/0x1740 [ 158.299447][ T5020] ieee80211_remove_interfaces+0x38c/0x5ec [ 158.300324][ T5020] ieee80211_unregister_hw+0x60/0x278 [ 158.301123][ T5020] mac80211_hwsim_del_radio+0x210/0x3a8 [ 158.301945][ T5020] hwsim_exit_net+0x49c/0x558 [ 158.302749][ T5020] cleanup_net+0x5c4/0xa74 [ 158.303398][ T5020] process_one_work+0x7f4/0x13a8 [ 158.304199][ T5020] worker_thread+0x8c8/0xfbc [ 158.304853][ T5020] kthread+0x250/0x2d8 [ 158.305439][ T5020] ret_from_fork+0x10/0x20 [ 158.306106][ T5020] irq event stamp: 1871022 [ 158.306723][ T5020] hardirqs last enabled at (1871021): [] __up_console_sem+0xb4/0x100 [ 158.308220][ T5020] hardirqs last disabled at (1871022): [] el1_dbg+0x24/0x80 [ 158.309718][ T5020] softirqs last enabled at (1870994): [] handle_softirqs+0xaf8/0xc6c [ 158.311347][ T5020] softirqs last disabled at (1870869): [] __do_softirq+0x14/0x20 [ 158.312843][ T5020] ---[ end trace 0000000000000000 ]--- [ 158.315324][ T5020] ------------[ cut here ]------------ [ 158.316143][ T5020] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 158.317430][ T5020] WARNING: CPU: 1 PID: 5020 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 158.318949][ T5020] Modules linked in: [ 158.319494][ T5020] CPU: 1 PID: 5020 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 158.320761][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.322426][ T5020] Workqueue: netns cleanup_net [ 158.323230][ T5020] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 158.324567][ T5020] pc : ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 158.325576][ T5020] lr : ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 158.326606][ T5020] sp : ffff8000243473f0 [ 158.327174][ T5020] x29: ffff8000243473f0 x28: ffff8000150c0000 x27: ffff8000150c0584 [ 158.328315][ T5020] x26: ffff0000dbf9b220 x25: 0000000000000000 x24: dfff800000000000 [ 158.329617][ T5020] x23: 0000000000000000 x22: ffff0000f5bf2790 x21: ffff0000f5b90ea0 [ 158.330925][ T5020] x20: ffff800017a8b000 x19: ffff0000f5bf0c80 x18: ffff800011abbcc0 [ 158.332241][ T5020] x17: 0000000000000000 x16: ffff8000082d25b8 x15: 0000000000000000 [ 158.333577][ T5020] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 158.334915][ T5020] x11: ff00800008191ca8 x10: 0000000000000000 x9 : ac97ef367baa3e00 [ 158.336207][ T5020] x8 : ac97ef367baa3e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 158.337556][ T5020] x5 : ffff800024346e78 x4 : ffff8000151a4920 x3 : ffff800008311fd8 [ 158.338821][ T5020] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 158.340028][ T5020] Call trace: [ 158.340598][ T5020] ieee80211_vif_cfg_change_notify+0x21c/0x25c [ 158.341543][ T5020] ieee80211_assign_link_chanctx+0x6e8/0x82c [ 158.342405][ T5020] __ieee80211_link_release_channel+0x29c/0x55c [ 158.343414][ T5020] ieee80211_link_release_channel+0x130/0x19c [ 158.344326][ T5020] ieee80211_link_stop+0x9c/0xc4 [ 158.345114][ T5020] ieee80211_uninit+0x98/0xd0 [ 158.345857][ T5020] unregister_netdevice_many+0x10a4/0x1740 [ 158.346857][ T5020] ieee80211_remove_interfaces+0x38c/0x5ec [ 158.347862][ T5020] ieee80211_unregister_hw+0x60/0x278 [ 158.348816][ T5020] mac80211_hwsim_del_radio+0x210/0x3a8 [ 158.349696][ T5020] hwsim_exit_net+0x49c/0x558 [ 158.350388][ T5020] cleanup_net+0x5c4/0xa74 [ 158.351139][ T5020] process_one_work+0x7f4/0x13a8 [ 158.351978][ T5020] worker_thread+0x8c8/0xfbc [ 158.352738][ T5020] kthread+0x250/0x2d8 [ 158.353391][ T5020] ret_from_fork+0x10/0x20 [ 158.354080][ T5020] irq event stamp: 1871244 [ 158.354840][ T5020] hardirqs last enabled at (1871243): [] __up_console_sem+0xb4/0x100 [ 158.356517][ T5020] hardirqs last disabled at (1871244): [] el1_dbg+0x24/0x80 [ 158.357948][ T5020] softirqs last enabled at (1871218): [] handle_softirqs+0xaf8/0xc6c [ 158.359435][ T5020] softirqs last disabled at (1871025): [] __do_softirq+0x14/0x20 [ 158.360953][ T5020] ---[ end trace 0000000000000000 ]--- [ 158.363011][ T5020] ------------[ cut here ]------------ [ 158.363839][ T5020] WARNING: CPU: 1 PID: 5020 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 [ 158.365378][ T5020] Modules linked in: [ 158.365992][ T5020] CPU: 1 PID: 5020 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 158.367534][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.369161][ T5020] Workqueue: netns cleanup_net [ 158.369944][ T5020] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 158.371255][ T5020] pc : ieee80211_recalc_idle+0x298/0x338 [ 158.372136][ T5020] lr : ieee80211_recalc_idle+0x298/0x338 [ 158.373126][ T5020] sp : ffff8000243473e0 [ 158.373772][ T5020] x29: ffff8000243473e0 x28: 0000000000000000 x27: ffff8000150c0000 [ 158.375115][ T5020] x26: ffff0000dbf9b220 x25: 0000000000000000 x24: dfff800000000000 [ 158.376425][ T5020] x23: 000000000000096c x22: 1fffe0001eb721db x21: dfff800000000000 [ 158.377685][ T5020] x20: 0000000000000000 x19: ffff0000f5b90ea0 x18: ffff800011abbcc0 [ 158.379010][ T5020] x17: 0000000000000000 x16: ffff8000082d1108 x15: 0000000000000000 [ 158.380264][ T5020] x14: 0000000000000007 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 158.381511][ T5020] x11: ff008000111d1128 x10: 0000000000000000 x9 : ffff8000111d1128 [ 158.382927][ T5020] x8 : ffff0000cee28000 x7 : ffff800011171388 x6 : 0000000000000000 [ 158.384224][ T5020] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 158.385556][ T5020] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 158.386879][ T5020] Call trace: [ 158.387424][ T5020] ieee80211_recalc_idle+0x298/0x338 [ 158.388287][ T5020] ieee80211_del_chanctx+0x35c/0x710 [ 158.389202][ T5020] ieee80211_free_chanctx+0x250/0x334 [ 158.390024][ T5020] __ieee80211_link_release_channel+0x3d4/0x55c [ 158.390994][ T5020] ieee80211_link_release_channel+0x130/0x19c [ 158.391910][ T5020] ieee80211_link_stop+0x9c/0xc4 [ 158.392680][ T5020] ieee80211_uninit+0x98/0xd0 [ 158.393415][ T5020] unregister_netdevice_many+0x10a4/0x1740 [ 158.394306][ T5020] ieee80211_remove_interfaces+0x38c/0x5ec [ 158.395264][ T5020] ieee80211_unregister_hw+0x60/0x278 [ 158.396125][ T5020] mac80211_hwsim_del_radio+0x210/0x3a8 [ 158.396941][ T5020] hwsim_exit_net+0x49c/0x558 [ 158.397735][ T5020] cleanup_net+0x5c4/0xa74 [ 158.398470][ T5020] process_one_work+0x7f4/0x13a8 [ 158.399270][ T5020] worker_thread+0x8c8/0xfbc [ 158.400038][ T5020] kthread+0x250/0x2d8 [ 158.400732][ T5020] ret_from_fork+0x10/0x20 [ 158.401407][ T5020] irq event stamp: 1871412 [ 158.402079][ T5020] hardirqs last enabled at (1871411): [] exit_to_kernel_mode+0xcc/0xfc [ 158.403547][ T5020] hardirqs last disabled at (1871412): [] el1_dbg+0x24/0x80 [ 158.404834][ T5020] softirqs last enabled at (1871406): [] handle_softirqs+0xaf8/0xc6c [ 158.406415][ T5020] softirqs last disabled at (1871247): [] __do_softirq+0x14/0x20 [ 158.407905][ T5020] ---[ end trace 0000000000000000 ]--- [ 158.424793][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.425937][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.430179][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.450792][ T5020] ------------[ cut here ]------------ [ 158.451725][ T5020] ODEBUG: free active (active state 0) object type: timer_list hint: ieee80211_mesh_housekeeping_timer+0x0/0xa0 [ 158.453634][ T5020] WARNING: CPU: 0 PID: 5020 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 158.455180][ T5020] Modules linked in: [ 158.455772][ T5020] CPU: 0 PID: 5020 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 158.457019][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.458539][ T5020] Workqueue: netns cleanup_net [ 158.459222][ T5020] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 158.460534][ T5020] pc : debug_check_no_obj_freed+0x38c/0x46c [ 158.461502][ T5020] lr : debug_check_no_obj_freed+0x38c/0x46c [ 158.462422][ T5020] sp : ffff8000243473f0 [ 158.463067][ T5020] x29: ffff800024347430 x28: ffff0000f5bf4000 x27: 0000000000000000 [ 158.464384][ T5020] x26: ffff800011adace0 x25: ffff0000f5bf1a28 x24: ffff8000113424a0 [ 158.465752][ T5020] x23: ffff0000d598c850 x22: 1fffe0001b0a0343 x21: dfff800000000000 [ 158.467037][ T5020] x20: 0000000000000004 x19: ffff0000f5bf0000 x18: ffff800011abbcc0 [ 158.468321][ T5020] x17: 6e6968207473696c x16: ffff8000082d25b8 x15: 0000000000000000 [ 158.469682][ T5020] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 158.471030][ T5020] x11: ff00800008191ca8 x10: 0000000000000000 x9 : ac97ef367baa3e00 [ 158.472429][ T5020] x8 : ac97ef367baa3e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 158.473749][ T5020] x5 : ffff800024346e78 x4 : ffff8000151a4920 x3 : ffff80000852e428 [ 158.475071][ T5020] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 158.476468][ T5020] Call trace: [ 158.476993][ T5020] debug_check_no_obj_freed+0x38c/0x46c [ 158.477931][ T5020] free_unref_page_prepare+0x71c/0xb18 [ 158.478772][ T5020] free_unref_page+0x7c/0x3a0 [ 158.479476][ T5020] __free_pages+0x1a4/0x1d0 [ 158.480141][ T5020] free_large_kmalloc+0xc8/0x15c [ 158.480910][ T5020] kfree+0xf4/0x1ac [ 158.481553][ T5020] kvfree+0x40/0x50 [ 158.482174][ T5020] netdev_freemem+0x4c/0x64 [ 158.482862][ T5020] netdev_release+0x88/0xb0 [ 158.483543][ T5020] device_release+0x8c/0x1ac [ 158.484305][ T5020] kobject_put+0x2b0/0x438 [ 158.485011][ T5020] netdev_run_todo+0xbe4/0xd08 [ 158.485767][ T5020] rtnl_unlock+0x14/0x20 [ 158.486407][ T5020] ieee80211_unregister_hw+0xfc/0x278 [ 158.487160][ T5020] mac80211_hwsim_del_radio+0x210/0x3a8 [ 158.487996][ T5020] hwsim_exit_net+0x49c/0x558 [ 158.488743][ T5020] cleanup_net+0x5c4/0xa74 [ 158.489503][ T5020] process_one_work+0x7f4/0x13a8 [ 158.490310][ T5020] worker_thread+0x8c8/0xfbc [ 158.491062][ T5020] kthread+0x250/0x2d8 [ 158.491698][ T5020] ret_from_fork+0x10/0x20 [ 158.492416][ T5020] irq event stamp: 1872158 [ 158.493150][ T5020] hardirqs last enabled at (1872157): [] __up_console_sem+0xb4/0x100 [ 158.494662][ T5020] hardirqs last disabled at (1872158): [] el1_dbg+0x24/0x80 [ 158.496022][ T5020] softirqs last enabled at (1871460): [] handle_softirqs+0xaf8/0xc6c [ 158.497629][ T5020] softirqs last disabled at (1871415): [] __do_softirq+0x14/0x20 [ 158.499113][ T5020] ---[ end trace 0000000000000000 ]--- [ 159.187019][ T5020] device hsr_slave_0 left promiscuous mode [ 159.201261][ T5020] device hsr_slave_1 left promiscuous mode [ 159.290673][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.291850][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.293235][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.294335][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.295812][ T5020] device bridge_slave_1 left promiscuous mode [ 159.296875][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.321121][ T5020] device bridge_slave_0 left promiscuous mode [ 159.322277][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.388882][ T5020] device bond_slave_0 left promiscuous mode [ 159.390040][ T5020] device bond_slave_1 left promiscuous mode [ 159.480706][ T5020] device veth1_macvtap left promiscuous mode [ 159.481765][ T5020] device veth0_macvtap left promiscuous mode [ 159.482736][ T5020] device veth1_vlan left promiscuous mode [ 159.483660][ T5020] device veth0_vlan left promiscuous mode [ 160.232173][ T5020] bond5 (unregistering): Released all slaves [ 160.924812][ T5020] bond4 (unregistering): Released all slaves [ 160.984189][ T5020] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 161.745189][ T5020] bond3 (unregistering): Released all slaves [ 161.749686][ T5020] bond2 (unregistering): Released all slaves [ 162.483117][ T5020] bond1 (unregistering): Released all slaves [ 164.192882][ T5020] team0 (unregistering): Port device team_slave_1 removed [ 164.352482][ T5020] team0 (unregistering): Port device team_slave_0 removed [ 164.541441][ T5020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.746252][ T5020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.066531][ T5020] bond0 (unregistering): Released all slaves