last executing test programs: 14.730816132s ago: executing program 2 (id=271): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.414729484s ago: executing program 2 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, &(0x7f00000000c0)="9522", 0x2) 12.831613392s ago: executing program 2 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, 0x0) 10.734474771s ago: executing program 2 (id=283): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.419517743s ago: executing program 3 (id=284): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) socket$nl_netfilter(0x10, 0x3, 0xc) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x10000001, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000005, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9.195900204s ago: executing program 0 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 9.188487654s ago: executing program 1 (id=287): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) socket(0x1e, 0x4, 0x0) poll(0x0, 0x0, 0x7f) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x8, 0x4, 0x20, @local, @private1, 0x40, 0x80, 0x6, 0x8}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 7.827558099s ago: executing program 0 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 7.555251772s ago: executing program 3 (id=289): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 7.543764843s ago: executing program 4 (id=290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(&(0x7f0000000100)='jffs2\x00', 0x1) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 7.283735585s ago: executing program 1 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 6.516281041s ago: executing program 0 (id=292): memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) inotify_init() bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x400, 0x2100, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.161263778s ago: executing program 4 (id=293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x13, 0x20, 0xbc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002eef56"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8010, 0x3b, 0x500, 0x5, 0x18c0012}) r5 = socket$key(0xf, 0x3, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x5, 0x6, 0x2, 0x0, 0x60bd27, 0x25dfdbfc}, 0x10}}, 0x24008880) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x20}, 0x38) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) 6.160850698s ago: executing program 0 (id=294): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a020032090581"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 6.143333498s ago: executing program 3 (id=295): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.945248975s ago: executing program 3 (id=296): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 4.165271023s ago: executing program 1 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) syz_socket_connect_nvme_tcp() mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 4.150453143s ago: executing program 4 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 4.023630229s ago: executing program 2 (id=299): unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'caif0\x00', {0xfffffffffffffffc, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x3, 0x4, 0x5}, {0x4, 0x2, 0x4}, 0x80000000, 0x8001}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 3.093586343s ago: executing program 4 (id=300): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) socket$nl_netfilter(0x10, 0x3, 0xc) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x10000001, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000005, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.892173883s ago: executing program 1 (id=301): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.719688411s ago: executing program 0 (id=302): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) 1.459963741s ago: executing program 1 (id=303): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000002300)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x6, 0x3c, 0x65, 0x0, 0xa7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x6, 0x7, 0x0, 0x4e22, 0x4e24, 0x1, 0x1}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.340803516s ago: executing program 3 (id=304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) 1.119664627s ago: executing program 0 (id=305): bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 1.067114259s ago: executing program 4 (id=306): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 983.258863ms ago: executing program 3 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 963.073464ms ago: executing program 2 (id=308): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffdfff, 0xffffffff, 0x0, 0x4000001, 0xffffff7f, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x402, 0x0, 0xfffffffe, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x5, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x3, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000580)='./file0\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\n', 0x2) 339.757373ms ago: executing program 1 (id=309): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24004010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000670f0000", @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r2], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xff, 0x2}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x1, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) 0s ago: executing program 4 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 76.382227][ T4262] cgroup: Unknown subsys name 'net' [ 76.543967][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.054000][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.650953][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.650953][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.653024][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.660303][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.667773][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.676712][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.684157][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.687872][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.695828][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.702539][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.708824][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.715968][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.722112][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.729534][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.737297][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.747024][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.750194][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.759585][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.770929][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.780114][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.785177][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.792383][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.798684][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.809012][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.813188][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.826184][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.833662][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.842174][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.877732][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.886963][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.330448][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 80.429351][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.460666][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.495752][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 80.544632][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.553171][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.561743][ T4276] device bridge_slave_0 entered promiscuous mode [ 80.570969][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 80.594480][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.603095][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.612513][ T4276] device bridge_slave_1 entered promiscuous mode [ 80.701552][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.711788][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.719331][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.727840][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.751657][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.761206][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.770705][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.779465][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.792237][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.799478][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.807501][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.849234][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.856409][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.864767][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.887092][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.897541][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.905741][ T4281] device bridge_slave_0 entered promiscuous mode [ 80.928808][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.943768][ T4276] team0: Port device team_slave_0 added [ 80.956282][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.963636][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.972383][ T4281] device bridge_slave_1 entered promiscuous mode [ 80.987549][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.996810][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.004259][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.012434][ T4277] device bridge_slave_0 entered promiscuous mode [ 81.021852][ T4276] team0: Port device team_slave_1 added [ 81.039755][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.062775][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.070008][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.079020][ T4277] device bridge_slave_1 entered promiscuous mode [ 81.093312][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.118753][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.137553][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.144552][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.170657][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.190580][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.202735][ T4275] team0: Port device team_slave_0 added [ 81.215179][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.225694][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.251991][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.278426][ T4275] team0: Port device team_slave_1 added [ 81.286674][ T4274] team0: Port device team_slave_0 added [ 81.295562][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.335640][ T4274] team0: Port device team_slave_1 added [ 81.343332][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.365834][ T4281] team0: Port device team_slave_0 added [ 81.405052][ T4281] team0: Port device team_slave_1 added [ 81.411667][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.421653][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.448032][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.466014][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.473333][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.499900][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.512746][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.519975][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.546165][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.560378][ T4277] team0: Port device team_slave_0 added [ 81.573076][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.580375][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.606686][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.630986][ T4277] team0: Port device team_slave_1 added [ 81.644100][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.651394][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.677501][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.708131][ T4276] device hsr_slave_0 entered promiscuous mode [ 81.715002][ T4276] device hsr_slave_1 entered promiscuous mode [ 81.728695][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.735694][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.762995][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.802991][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.810518][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.836874][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.859116][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.866075][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.873335][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.885414][ T4274] Cannot create hsr debugfs directory [ 81.904813][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.909470][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 81.912378][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 81.919111][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 81.924687][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.956359][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.971647][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.979487][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.986093][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.988449][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 81.993899][ T4275] Cannot create hsr debugfs directory [ 82.000240][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 82.061185][ T4281] device hsr_slave_0 entered promiscuous mode [ 82.071660][ T4281] device hsr_slave_1 entered promiscuous mode [ 82.078536][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.086107][ T4281] Cannot create hsr debugfs directory [ 82.180395][ T4277] device hsr_slave_0 entered promiscuous mode [ 82.187113][ T4277] device hsr_slave_1 entered promiscuous mode [ 82.196011][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.205615][ T4277] Cannot create hsr debugfs directory [ 82.511534][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.533436][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.555635][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.569029][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.603613][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.642164][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.653787][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.663325][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.700251][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.733917][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.743305][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.760979][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.820546][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.833998][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.843872][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.873692][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.936032][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.949100][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.964128][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.982773][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.992169][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.004227][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.015583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.030033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.051130][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.096334][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.105244][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.117052][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.154490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.167105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.177901][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.185235][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.228871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.238918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.248565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.257031][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.264231][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.273386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.282491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.292323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.303002][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.310268][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.318258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.327647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.336134][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.343322][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.353629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.381242][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.398894][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.422366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.435422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.444590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.454419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.464327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.474045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.482869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.491516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.512194][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.523149][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.535568][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.550397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.564509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.575203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.584956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.594103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.621254][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.630879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.639669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.650181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.659945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.669460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.681137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.691109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.716907][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.741302][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.759355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.773196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.782160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.796957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.824012][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.840873][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.865842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.875133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.891988][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.899216][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.915026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.951039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.975833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.988298][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 83.994966][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.996812][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 84.002292][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.008151][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 84.038434][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.058553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.067841][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 84.070152][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 84.075698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.112497][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.127053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.158164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.174203][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.181365][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.194947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.204666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.219889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.232663][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.239862][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.255903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.265644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.284680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.309970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.320137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.329417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.339421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.348961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.394386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.412305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.428886][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.443727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.453259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.468157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.476658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.492043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.501377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.516174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.525671][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.533373][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.556388][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.574649][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.594276][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.603163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.613875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.622102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.630120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.638349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.648654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.657288][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.664411][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.672639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.681867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.690982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.699479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.708688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.733425][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.756542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.798229][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.805752][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.833104][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.851182][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.864510][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.881747][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.892257][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.914430][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.926962][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.962412][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.971567][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.988911][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.004484][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.013585][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.028932][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.043858][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.053681][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.124456][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.145165][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.155267][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.165603][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.184120][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.195028][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.212813][ T4274] device veth0_vlan entered promiscuous mode [ 85.244826][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.287612][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.311361][ T4274] device veth1_vlan entered promiscuous mode [ 85.327740][ T4275] device veth0_vlan entered promiscuous mode [ 85.344713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.359604][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.373775][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.408376][ T4275] device veth1_vlan entered promiscuous mode [ 85.424671][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.441944][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.465207][ T4274] device veth0_macvtap entered promiscuous mode [ 85.496459][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.507589][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.546036][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.563654][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.598158][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.620062][ T4274] device veth1_macvtap entered promiscuous mode [ 85.645892][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.662849][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.672132][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.684117][ T4275] device veth0_macvtap entered promiscuous mode [ 85.706053][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.721066][ T4275] device veth1_macvtap entered promiscuous mode [ 85.732969][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.756477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.778021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.786040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.796630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.814877][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.835297][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.847062][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.864433][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.885445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.895002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.905403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.915160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.924748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.934362][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.958296][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.984901][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.000130][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.017821][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.036788][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.054951][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.068252][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 86.074334][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 86.080959][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 86.095305][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.108707][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.124000][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.133180][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.146844][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.154699][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 86.154708][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 86.177912][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186883][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.195876][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.205545][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.222903][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.236128][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.246027][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.260610][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.309858][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.338757][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.348734][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.362820][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.405586][ T4276] device veth0_vlan entered promiscuous mode [ 86.425036][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.451227][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.485547][ T4276] device veth1_vlan entered promiscuous mode [ 86.546276][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.563202][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.575916][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.584867][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.599118][ T4281] device veth0_vlan entered promiscuous mode [ 86.635339][ T4276] device veth0_macvtap entered promiscuous mode [ 86.659301][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.674070][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.709588][ T27] cfg80211: failed to load regulatory.db [ 86.744059][ T4281] device veth1_vlan entered promiscuous mode [ 86.760982][ T4276] device veth1_macvtap entered promiscuous mode [ 86.788589][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.796852][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.811279][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.825996][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.835644][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.862197][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.884450][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.892856][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.942977][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.960375][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.997604][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.005509][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.016477][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.029754][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.042680][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.061475][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.075676][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.092054][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.108787][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.126188][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.149401][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.170570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.190994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.199325][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.219128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.228901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.262832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.275231][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.286962][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.299822][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.315510][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.330859][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.354279][ T4281] device veth0_macvtap entered promiscuous mode [ 87.378552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.386835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.418094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.426930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.458202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.469327][ T4277] device veth0_vlan entered promiscuous mode [ 87.490047][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.510715][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.528159][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.550943][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.570099][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.587983][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.606801][ T4281] device veth1_macvtap entered promiscuous mode [ 87.649991][ T4277] device veth1_vlan entered promiscuous mode [ 87.741316][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.787906][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.850828][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.882117][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.905325][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.929543][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.946081][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.966952][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.990236][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.008114][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.031975][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.059039][ T4277] device veth0_macvtap entered promiscuous mode [ 88.086889][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.108920][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.120869][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.132642][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.143338][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.154141][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 88.154174][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 88.160561][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 88.166783][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.211927][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.227395][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 88.236235][ T4277] device veth1_macvtap entered promiscuous mode [ 88.243900][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 88.266387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.275852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.284873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.294222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.320359][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.331451][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344217][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.357283][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.398670][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.406645][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.479644][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.517344][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.647202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.667186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.677184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.687193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.697195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.707187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.717196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.727179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.737196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.747198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.127370][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.167806][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.188474][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.199841][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.210128][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.220928][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.245160][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.252980][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.267295][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.288155][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.304515][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.364401][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.387929][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.399220][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.409972][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.420183][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.430998][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.447392][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.464486][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.478956][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.497460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.498180][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.515844][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.526479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.536571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.562830][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.600841][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.611505][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622739][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756644][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.810358][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.965382][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.984755][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.028780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.049933][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.699273][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.920508][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.097555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.186800][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.209763][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.231076][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.311038][ T4387] binder: 4385:4387 unknown command 1074553619 [ 92.317437][ T4387] binder: 4385:4387 ioctl c0306201 200000000140 returned -22 [ 93.947419][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.245484][ T4323] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.408958][ T4323] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 95.657335][ T4323] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 95.671505][ T4410] Zero length message leads to an empty skb [ 95.777304][ T4323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.787075][ T4323] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.939337][ T4323] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 96.050541][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.211488][ T4323] usb 4-1: can't set config #1, error -71 [ 96.285365][ T4323] usb 4-1: USB disconnect, device number 2 [ 98.353079][ T4441] Config c/1 of g1 needs at least one function. [ 98.360757][ T4441] udc dummy_udc.0: failed to start g1: -22 [ 98.366681][ T4441] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 98.379843][ T4441] UDC core: g1: couldn't find an available UDC or it's busy [ 99.287376][ T3599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.364804][ T4449] binder: 4447:4449 unknown command 1074553619 [ 99.371204][ T4449] binder: 4447:4449 ioctl c0306201 200000000140 returned -22 [ 99.465456][ T4453] NILFS (nullb0): couldn't find nilfs on the device [ 99.616223][ T3599] usb 1-1: Using ep0 maxpacket: 16 [ 100.211217][ T3599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.285924][ T3599] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 100.335203][ T3599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.489322][ T3599] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.498499][ T3599] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.507864][ T3599] usb 1-1: Manufacturer: syz [ 100.547471][ T3599] usb 1-1: config 0 descriptor?? [ 101.445166][ T3599] usb 1-1: USB disconnect, device number 2 [ 104.417823][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 104.469107][ T4483] binder: 4478:4483 ioctl c0306201 0 returned -14 [ 104.596452][ T4491] binder: 4490:4491 unknown command 1074553619 [ 104.603135][ T4491] binder: 4490:4491 ioctl c0306201 200000000140 returned -22 [ 104.815129][ T4496] loop8: detected capacity change from 0 to 7 [ 104.827371][ T4391] Dev loop8: unable to read RDB block 7 [ 104.833680][ T4391] loop8: unable to read partition table [ 104.846667][ T4391] loop8: partition table beyond EOD, truncated [ 104.963802][ T4496] Dev loop8: unable to read RDB block 7 [ 104.976849][ T4496] loop8: unable to read partition table [ 104.983999][ T4496] loop8: partition table beyond EOD, truncated [ 105.007049][ T4496] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 106.096508][ T4506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 106.118937][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 107.882583][ T4511] gfs2: gfs2 mount does not exist [ 108.555254][ T4517] overlayfs: failed to resolve './file0': -2 [ 111.089200][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 112.687654][ T4556] netlink: 72 bytes leftover after parsing attributes in process `syz.1.49'. [ 112.747331][ T4559] netlink: 72 bytes leftover after parsing attributes in process `syz.1.49'. [ 113.077270][ T3599] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 113.289148][ T3599] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.327221][ T3599] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.395682][ T3599] usb 2-1: config 1 interface 0 has no altsetting 0 [ 113.420673][ T3599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.453834][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.488229][ T3599] usb 2-1: SerialNumber: syz [ 113.532814][ T3599] hub 2-1:1.0: bad descriptor, ignoring hub [ 113.558032][ T3599] hub: probe of 2-1:1.0 failed with error -5 [ 113.584854][ T3599] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 113.736314][ T3599] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 113.839104][ T3599] usb 2-1: USB disconnect, device number 2 [ 114.276507][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 114.763591][ T4594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.56'. [ 114.776286][ T4574] syz.2.53 (4574) used greatest stack depth: 18176 bytes left [ 114.803659][ T4577] syz.2.53 (4577) used greatest stack depth: 16656 bytes left [ 114.853784][ T4594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.56'. [ 114.928656][ T4597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 114.939469][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 115.930978][ T4322] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.199396][ T4322] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.215526][ T4322] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.393406][ T4322] usb 4-1: config 1 interface 0 has no altsetting 0 [ 116.420333][ T4322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.198205][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.206297][ T4322] usb 4-1: SerialNumber: syz [ 117.255457][ T4322] hub 4-1:1.0: bad descriptor, ignoring hub [ 117.285452][ T4322] hub: probe of 4-1:1.0 failed with error -5 [ 117.310459][ T4322] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 117.452020][ T4322] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 117.492558][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.507867][ T4322] usb 4-1: USB disconnect, device number 3 [ 117.689120][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.737817][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 117.798594][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 117.832140][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.852867][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.864850][ T27] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 117.885222][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.916074][ T4614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.944429][ T4614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.980902][ T4614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.079296][ T27] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 118.286162][ T27] usb 3-1: mos7720: usb_control_msg() failed: -32 [ 118.345765][ T27] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 118.424583][ T27] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 118.502965][ T27] usb 3-1: USB disconnect, device number 2 [ 118.503031][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 118.678952][ T27] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 119.637688][ T4647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.71'. [ 119.657522][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 121.277709][ T27] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 121.288966][ T27] mos7720 3-1:1.0: device disconnected [ 124.778612][ T4672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.79'. [ 124.913573][ T4676] binder: 4674:4676 unknown command 1074553619 [ 124.920001][ T4676] binder: 4674:4676 ioctl c0306201 200000000140 returned -22 [ 126.078319][ T3599] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.198930][ T4681] NILFS (nullb0): couldn't find nilfs on the device [ 127.001548][ T3599] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.033637][ T3599] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.081387][ T3599] usb 1-1: config 1 interface 0 has no altsetting 0 [ 127.128490][ T3599] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.157207][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.177294][ T3599] usb 1-1: SerialNumber: syz [ 127.206041][ T3599] hub 1-1:1.0: bad descriptor, ignoring hub [ 127.232566][ T3599] hub: probe of 1-1:1.0 failed with error -5 [ 127.250005][ T3599] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 127.267244][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.424924][ T3599] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 127.477993][ T4321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.489850][ T3599] usb 1-1: USB disconnect, device number 3 [ 127.523363][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 127.583278][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.803837][ T4321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.925671][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.943342][ T4321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 127.955986][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.183467][ T4321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 128.234363][ T4321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.247765][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.282178][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.294147][ T4321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.304555][ T27] usb 3-1: Manufacturer: syz [ 128.314310][ T4321] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 129.838262][ T27] usb 3-1: config 0 descriptor?? [ 129.846515][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.878990][ T4687] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 129.888167][ T4687] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 129.933840][ T4687] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 129.954991][ T4321] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 130.021875][ T14] usb 3-1: USB disconnect, device number 3 [ 130.205264][ T4321] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 130.236224][ T4321] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 131.807147][ C0] sched: RT throttling activated [ 131.931787][ T4321] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 132.025350][ T4321] usb 2-1: USB disconnect, device number 3 [ 132.025426][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 132.128508][ T4321] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 132.196739][ T4321] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 132.232283][ T4321] mos7720 2-1:1.0: device disconnected [ 132.791141][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.330185][ T4731] syz.3.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.467335][ T4323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.288411][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 135.298449][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.325130][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.355393][ T4323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.393949][ T4323] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.412552][ T4323] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.441298][ T4323] usb 2-1: Manufacturer: syz [ 135.462422][ T4323] usb 2-1: config 0 descriptor?? [ 135.890004][ T4323] usb 2-1: USB disconnect, device number 4 [ 137.115825][ T4754] binder: 4753:4754 unknown command 1074553619 [ 137.122285][ T4754] binder: 4753:4754 ioctl c0306201 200000000140 returned -22 [ 138.692382][ T4762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'. [ 139.217848][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 142.438563][ T4795] binder: 4793:4795 unknown command 1074553619 [ 142.444804][ T4795] binder: 4793:4795 ioctl c0306201 200000000140 returned -22 [ 144.473021][ T4810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.125'. [ 144.514034][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 144.554269][ T4812] FAULT_INJECTION: forcing a failure. [ 144.554269][ T4812] name failslab, interval 1, probability 0, space 0, times 1 [ 144.568714][ T4812] CPU: 1 PID: 4812 Comm: syz.2.116 Not tainted syzkaller #0 [ 144.576075][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.586188][ T4812] Call Trace: [ 144.589511][ T4812] [ 144.592487][ T4812] dump_stack_lvl+0x188/0x24e [ 144.597251][ T4812] ? show_regs_print_info+0x12/0x12 [ 144.602496][ T4812] ? load_image+0x410/0x410 [ 144.607074][ T4812] ? __might_sleep+0xd0/0xd0 [ 144.611711][ T4812] ? __lock_acquire+0x7c40/0x7c40 [ 144.616808][ T4812] should_fail_ex+0x390/0x4c0 [ 144.621551][ T4812] should_failslab+0x5/0x20 [ 144.626125][ T4812] slab_pre_alloc_hook+0x59/0x300 [ 144.631198][ T4812] ? lockdep_softirqs_off+0x430/0x430 [ 144.636641][ T4812] kmem_cache_alloc+0x56/0x2f0 [ 144.641450][ T4812] ? security_inode_alloc+0x30/0x110 [ 144.646786][ T4812] security_inode_alloc+0x30/0x110 [ 144.651967][ T4812] inode_init_always+0x910/0xc90 [ 144.656963][ T4812] new_inode_pseudo+0x91/0x1c0 [ 144.661792][ T4812] __sock_create+0x129/0x940 [ 144.666455][ T4812] __sys_socketpair+0x232/0x540 [ 144.671377][ T4812] __x64_sys_socketpair+0x97/0xb0 [ 144.676464][ T4812] do_syscall_64+0x4c/0xa0 [ 144.680937][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 144.685665][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 144.690394][ T4812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.696365][ T4812] RIP: 0033:0x7f4ae759e159 [ 144.700832][ T4812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.720515][ T4812] RSP: 002b:00007f4ae83fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 144.729012][ T4812] RAX: ffffffffffffffda RBX: 00007f4ae7825fa0 RCX: 00007f4ae759e159 [ 144.737035][ T4812] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 144.745050][ T4812] RBP: 00007f4ae763506b R08: 0000000000000000 R09: 0000000000000000 [ 144.753065][ T4812] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 144.761088][ T4812] R13: 00007f4ae7826038 R14: 00007f4ae7825fa0 R15: 00007ffcea98f4b8 [ 144.769124][ T4812] [ 144.882619][ T4812] socket: no more sockets [ 148.441422][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 148.484460][ T4838] binder: 4835:4838 unknown command 1074553619 [ 148.491129][ T4838] binder: 4835:4838 ioctl c0306201 200000000140 returned -22 [ 148.636287][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 148.647282][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 155.125621][ T4875] netlink: 52 bytes leftover after parsing attributes in process `syz.4.145'. [ 155.183897][ T4875] netlink: 52 bytes leftover after parsing attributes in process `syz.4.145'. [ 155.497365][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 155.550989][ T4880] bond0: option arp_interval: invalid value () [ 155.567643][ T4880] bond0: option arp_interval: allowed values 0 - 2147483647 [ 155.708769][ T7] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.737357][ T7] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.782032][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 155.792261][ T4886] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 155.802004][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.950808][ T4889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 155.961972][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 156.546016][ T4886] team0: Port device dummy0 added [ 156.617550][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.627069][ T7] usb 5-1: SerialNumber: syz [ 156.638306][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 156.644290][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 156.651219][ T7] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 156.844083][ T7] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 156.887765][ T7] usb 5-1: USB disconnect, device number 2 [ 156.923245][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 157.103433][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.927630][ T126] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.411622][ T126] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 158.497253][ T126] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 158.581381][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.636277][ T126] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.676055][ T126] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 158.917494][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.326529][ T4891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.336051][ T4891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.345278][ T4891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.355097][ T126] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 159.775129][ T126] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 159.896377][ T126] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 159.948175][ T126] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 160.361339][ T126] usb 4-1: USB disconnect, device number 4 [ 160.367296][ C1] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 160.416466][ T126] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 160.455106][ T126] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 160.502273][ T126] mos7720 4-1:1.0: device disconnected [ 162.467614][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 162.593296][ T4957] netlink: 52 bytes leftover after parsing attributes in process `syz.4.168'. [ 162.703705][ T4961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.168'. [ 163.032563][ T4378] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 163.229460][ T4378] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.292237][ T4378] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.357587][ T4378] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.838149][ T4378] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.857631][ T4378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.865719][ T4378] usb 5-1: SerialNumber: syz [ 164.918699][ T4378] hub 5-1:1.0: bad descriptor, ignoring hub [ 164.924694][ T4378] hub: probe of 5-1:1.0 failed with error -5 [ 164.979565][ T4378] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 165.171094][ T4378] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 165.607484][ T4378] usb 5-1: USB disconnect, device number 3 [ 168.144968][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 169.677707][ T5046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.194'. [ 169.717829][ T5046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.194'. [ 170.098031][ T126] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 170.289206][ T126] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.363042][ T126] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.417784][ T126] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.448820][ T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.477267][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.485618][ T126] usb 1-1: SerialNumber: syz [ 171.092367][ T126] hub 1-1:1.0: bad descriptor, ignoring hub [ 171.098912][ T126] hub: probe of 1-1:1.0 failed with error -5 [ 171.110567][ T126] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 171.133428][ T126] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 171.768107][ T126] usb 1-1: USB disconnect, device number 4 [ 172.552320][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 173.404570][ T5089] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.089257][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 181.918851][ T5177] bond0: option arp_interval: invalid value (•") [ 181.960399][ T5177] bond0: option arp_interval: allowed values 0 - 2147483647 [ 183.867247][ T14] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 184.065453][ T14] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.093872][ T14] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 184.164884][ T14] usb 4-1: config 1 interface 0 has no altsetting 0 [ 184.219037][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.247291][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.278068][ T14] usb 4-1: SerialNumber: syz [ 184.465464][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 184.492673][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 184.559944][ T14] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 184.708116][ T14] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 184.829692][ T14] usb 4-1: USB disconnect, device number 5 [ 188.049616][ T5228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 188.075313][ T5233] bond0: option arp_interval: invalid value (•") [ 188.279138][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 188.294881][ T5233] bond0: option arp_interval: allowed values 0 - 2147483647 [ 190.483576][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 190.567176][ T4321] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 190.829420][ T4321] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.867336][ T4321] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.937211][ T4321] usb 1-1: config 1 interface 0 has no altsetting 0 [ 190.978954][ T4321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.010576][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 191.039006][ T4321] usb 1-1: SerialNumber: syz [ 192.052050][ T4321] hub 1-1:1.0: bad descriptor, ignoring hub [ 192.067206][ T4321] hub: probe of 1-1:1.0 failed with error -5 [ 192.073848][ T4321] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 192.262609][ T4321] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 192.307804][ T4321] usb 1-1: USB disconnect, device number 5 [ 192.327255][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.527207][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 192.535150][ T14] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 192.554609][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.588762][ T14] usb 3-1: config 0 descriptor?? [ 192.646846][ T14] as10x_usb: device has been detected [ 192.653279][ T14] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 192.691943][ T14] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 192.810735][ T14] as10x_usb: error during firmware upload part1 [ 192.840498][ T14] Registered device nBox DVB-T Dongle [ 192.842340][ T14] usb 3-1: USB disconnect, device number 4 [ 193.102861][ T5279] binder: 5278:5279 unknown command 1074553619 [ 193.133962][ T14] Unregistered device nBox DVB-T Dongle [ 193.149575][ T5279] binder: 5278:5279 ioctl c0306201 200000000140 returned -22 [ 193.164368][ T14] as10x_usb: device has been disconnected [ 193.253687][ T5285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.261'. [ 193.264938][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 194.229589][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.750293][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 195.932196][ T5293] binder: 5290:5293 unknown command 1074553619 [ 195.973165][ T5293] binder: 5290:5293 ioctl c0306201 200000000140 returned -22 [ 198.778539][ T126] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 199.082747][ T126] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.104567][ T126] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.118944][ T126] usb 2-1: config 1 interface 0 has no altsetting 0 [ 199.135095][ T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.223861][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.232344][ T126] usb 2-1: SerialNumber: syz [ 199.264710][ T5327] binder: 5326:5327 unknown command 1074553619 [ 199.272588][ T126] hub 2-1:1.0: bad descriptor, ignoring hub [ 199.278811][ T126] hub: probe of 2-1:1.0 failed with error -5 [ 199.286368][ T126] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 199.969481][ T5327] binder: 5326:5327 ioctl c0306201 200000000140 returned -22 [ 200.002093][ T126] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 200.572423][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 200.583717][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 200.767787][ T126] usb 2-1: USB disconnect, device number 5 [ 201.153600][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 202.463390][ T5348] binder: 5345:5348 unknown command 1074553619 [ 202.502994][ T5348] binder: 5345:5348 ioctl c0306201 200000000140 returned -22 [ 205.525107][ T5377] binder: 5373:5377 unknown command 1074553619 [ 205.535879][ T5377] binder: 5373:5377 ioctl c0306201 200000000140 returned -22 [ 205.667500][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.677324][ T5205] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 205.821234][ T5387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 205.832853][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 205.877234][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 205.886376][ T5205] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.916061][ T5205] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.151688][ T1182] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.169988][ T5205] usb 2-1: config 1 interface 0 has no altsetting 0 [ 206.403457][ T5205] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.436680][ T5205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.466461][ T5205] usb 2-1: SerialNumber: syz [ 206.547361][ T1182] usb 1-1: Using ep0 maxpacket: 16 [ 206.566611][ T1182] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.603538][ T5205] hub 2-1:1.0: bad descriptor, ignoring hub [ 206.625521][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 206.625528][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 206.625561][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 206.628502][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 206.634346][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 206.649203][ T5205] hub: probe of 2-1:1.0 failed with error -5 [ 206.666446][ T1182] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.695642][ T1182] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.724015][ T5205] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 206.748586][ T1182] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.919320][ T5205] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 206.971041][ T1182] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.094626][ T1182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.110402][ T5205] usb 2-1: USB disconnect, device number 6 [ 207.247531][ T1182] usb 1-1: Product: syz [ 207.297036][ T1182] usb 1-1: Manufacturer: syz [ 207.384252][ T1182] usb 1-1: SerialNumber: syz [ 207.745530][ T1182] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 207.750934][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 207.760173][ T27] usb 3-1: can't read configurations, error -71 [ 207.854421][ T1182] cdc_ncm 1-1:1.0: bind() failure [ 207.870293][ T1182] usb 1-1: USB disconnect, device number 6 [ 209.054351][ T5394] binder: 5392:5394 unknown command 1074553619 [ 209.178062][ T5411] xt_hashlimit: max too large, truncated to 1048576 [ 209.184960][ T5411] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 210.297470][ T5394] binder: 5392:5394 ioctl c0306201 200000000140 returned -22 [ 210.782558][ T5422] NILFS (nullb0): couldn't find nilfs on the device [ 211.680697][ T5425] binder: 5424:5425 unknown command 1074553619 [ 211.728771][ T5425] binder: 5424:5425 ioctl c0306201 200000000140 returned -22 [ 211.889027][ T5430] nvmet: adding nsid 1 to subsystem testsubsys [ 211.943131][ T5430] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 211.955011][ T5430] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 211.963428][ T5430] CPU: 1 PID: 5430 Comm: syz.2.308 Not tainted syzkaller #0 [ 211.970736][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.980821][ T5430] RIP: 0010:strlen+0x25/0x60 [ 211.985465][ T5430] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 212.005133][ T5430] RSP: 0018:ffffc900033479c0 EFLAGS: 00010246 [ 212.011230][ T5430] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 212.019320][ T5430] RDX: ffffc9000e1eb000 RSI: 0000000000000587 RDI: 0000000000000000 [ 212.027324][ T5430] RBP: ffffc90003347af8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 212.035331][ T5430] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 1ffff92000668f48 [ 212.043330][ T5430] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 212.051435][ T5430] FS: 00007f4ae83fc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 212.060567][ T5430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.067181][ T5430] CR2: 00007ffc7599ed68 CR3: 00000000254d5000 CR4: 00000000003506e0 [ 212.075179][ T5430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.083170][ T5430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.091164][ T5430] Call Trace: [ 212.094470][ T5430] [ 212.097431][ T5430] getname_kernel+0x24/0x2f0 [ 212.102142][ T5430] filp_open+0x84/0x1e0 [ 212.106328][ T5430] ? file_open_name+0x1b0/0x1b0 [ 212.111219][ T5430] ? nvmet_ns_enable+0x49/0x8c0 [ 212.116103][ T5430] ? mutex_lock_nested+0x10/0x10 [ 212.121071][ T5430] nvmet_file_ns_enable+0x70/0x330 [ 212.126216][ T5430] ? rwsem_write_trylock+0x135/0x1c0 [ 212.131537][ T5430] nvmet_ns_enable+0xf0/0x8c0 [ 212.136270][ T5430] nvmet_ns_enable_store+0xd4/0x170 [ 212.141495][ T5430] ? nvmet_ns_enable_show+0x60/0x60 [ 212.146732][ T5430] ? down_read+0x1a8/0x2d0 [ 212.151189][ T5430] configfs_write_iter+0x30b/0x400 [ 212.156355][ T5430] ? nvmet_ns_enable_show+0x60/0x60 [ 212.161576][ T5430] vfs_write+0x482/0x9a0 [ 212.165850][ T5430] ? file_end_write+0x250/0x250 [ 212.170741][ T5430] ? __fget_files+0x3fc/0x460 [ 212.175455][ T5430] ? __fdget_pos+0x2ae/0x360 [ 212.180076][ T5430] ? ksys_write+0x70/0x260 [ 212.184523][ T5430] ksys_write+0x14d/0x260 [ 212.188883][ T5430] ? __ia32_sys_read+0x80/0x80 [ 212.193681][ T5430] ? lockdep_hardirqs_on+0x94/0x140 [ 212.198913][ T5430] do_syscall_64+0x4c/0xa0 [ 212.203357][ T5430] ? clear_bhb_loop+0x60/0xb0 [ 212.208062][ T5430] ? clear_bhb_loop+0x60/0xb0 [ 212.212765][ T5430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.218691][ T5430] RIP: 0033:0x7f4ae759e159 [ 212.223161][ T5430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.242979][ T5430] RSP: 002b:00007f4ae83fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.251422][ T5430] RAX: ffffffffffffffda RBX: 00007f4ae7825fa0 RCX: 00007f4ae759e159 [ 212.259420][ T5430] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 000000000000000c [ 212.267415][ T5430] RBP: 00007f4ae763506b R08: 0000000000000000 R09: 0000000000000000 [ 212.275402][ T5430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.283409][ T5430] R13: 00007f4ae7826038 R14: 00007f4ae7825fa0 R15: 00007ffcea98f4b8 [ 212.291587][ T5430] [ 212.294633][ T5430] Modules linked in: [ 212.450040][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 212.489260][ T5430] ---[ end trace 0000000000000000 ]--- [ 212.617188][ T27] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 212.861326][ T27] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.886807][ T27] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.932059][ T27] usb 4-1: config 1 interface 0 has no altsetting 0 [ 212.951551][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.974947][ T5430] RIP: 0010:strlen+0x25/0x60 [ 212.985476][ T5430] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 212.997203][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.005876][ T5430] RSP: 0018:ffffc900033479c0 EFLAGS: 00010246 [ 213.020146][ T5430] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 213.027314][ T27] usb 4-1: SerialNumber: syz [ 213.028471][ T5430] RDX: ffffc9000e1eb000 RSI: 0000000000000587 RDI: 0000000000000000 [ 213.041883][ T5430] RBP: ffffc90003347af8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 213.051219][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 213.057309][ T5430] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 1ffff92000668f48 [ 213.057329][ T5430] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 213.057346][ T5430] FS: 00007f4ae83fc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 213.057366][ T5430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.057381][ T5430] CR2: 00007f870b883e9c CR3: 00000000254d5000 CR4: 00000000003506f0 [ 213.057399][ T5430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.057412][ T5430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.074778][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 213.113755][ T5430] Kernel panic - not syncing: Fatal exception [ 213.119606][ T5430] Kernel Offset: disabled [ 213.130026][ T5430] Rebooting in 86400 seconds..