last executing test programs: 23.416339016s ago: executing program 0 (id=141): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000500)={r2, &(0x7f0000000240)='-{$%}\x88:@^d(*!\x00', 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xe}) openat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x8800000, 0x1, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r4, &(0x7f0000001600)='dummy_udc.0', 0xb) unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r5, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) 19.745838056s ago: executing program 0 (id=147): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000270000042cbd7000fedbdf253e6c4f5934af26ef87440d1b0c1fd427f3651013fffc8be2f5abcd99697d1e34c658f4d90f70a2651ceaef4c76f6879b836c783902bbd563d151136446e02382bc49e476b760ad9a51db43ea445d0505eb938e8ff24d005980ce7c669dd37638aa"], 0xc4}], 0x1}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008894) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 19.374244515s ago: executing program 4 (id=153): write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) 17.361686304s ago: executing program 4 (id=155): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x1, {0xa, 0xe2b, 0x7fffffff, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20020830) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) 16.184084543s ago: executing program 1 (id=157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x32, r2}, {0x1ef, 0xffffffffffffffff, 0xfffffffffffffffa, 0x400000, 0x1ff, 0xa3, 0x3, 0x2}, {0x8, 0x1, 0x67ff, 0x9}, 0x1ac5, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@local, 0x3504, 0x3, 0x3, 0x3, 0x0, 0x5, 0xffff0001}}, 0xe4) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)="3756608a8ae6d9f0c40d177f41e18ced9b897f067166d3d922d32b27c5cfccea4541553eeb9175494019ea6bff76840d022eb91af6ba326898fc1f94f5a8de74167a6b0192d6", 0x46) recvmsg(0xffffffffffffffff, 0x0, 0x123) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 15.989416028s ago: executing program 4 (id=158): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000011140100000100000000020000009f51de53865a080001000000000008004b0028000000e4ff03000100000000004a00020000008bcfea1774331b0047fe0dfaffff231e73882ef1e0b31ca4f2c528b86662a3d8c09ba78f6733d344f22836de57b541104123def98cea31e0ec291760a4957d23893b08a255d91eccaa26afe5fb298a7ff2073543eb2482832b465f05025a6b89946a84cb86878ffd1d6b7b929970fca875c8b66f1d968ec1d1a220"], 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25180000000500572bd1ac82bad54c930a290000000000eeff00000083c700000001bf3c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xa}, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13.250947365s ago: executing program 1 (id=161): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000180)='./file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) getdents(r0, 0x0, 0x0) 13.176510377s ago: executing program 3 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)="300a384a5afa3e03bf0a64cfebc3b33c352aa04016e0926526dc921d67a10e885e6aa280acc85541ae9e1533592103fba5aeab1525b15d997041aa960acab3ca3f1ab8f34e977a68217431a64238abd8d03871d9b6455f5e4bcc3bb353532c99039270ef3a7c54a1224ca31e4d7ba8dec1c030fc6f69a5756f06cc7d8f4404e2f78b86a7577f79f1fc00c25cc4aee65d55fca0c900", 0x95) 12.192379721s ago: executing program 2 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, 0x0, 0x8080) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12.063272524s ago: executing program 3 (id=164): socket(0x1d, 0x2, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12.046471165s ago: executing program 0 (id=165): write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) 12.029891405s ago: executing program 2 (id=166): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0xfffffffc, 0x0, 0xfffffeff, 0x3, 0x1, 0x2, 0x5, 0x7fff}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 11.893640579s ago: executing program 1 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 11.803600021s ago: executing program 0 (id=168): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x1, {0xa, 0xe2b, 0x7fffffff, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20020830) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) 9.935159466s ago: executing program 3 (id=169): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.902270808s ago: executing program 2 (id=170): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x3c, r5, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804) 9.598858735s ago: executing program 3 (id=171): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000500)={r2, &(0x7f0000000240)='-{$%}\x88:@^d(*!\x00', 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r3, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) 9.598170725s ago: executing program 2 (id=172): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) 7.157769375s ago: executing program 0 (id=173): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1011e0, 0x1000, 0xfffffffc, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) 5.975238824s ago: executing program 2 (id=174): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x20040800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b0a4c532395fc7786ead8d57a2231c4"}]}}}}}}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x719467cd]}, 0x8) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000000000)) 5.946470475s ago: executing program 4 (id=175): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0x7fffffff], 0x0, 0x1}) 4.413677542s ago: executing program 1 (id=176): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x81, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000140)='1', 0x1, 0x10b, 0x0, 0x0, r2}]) dup3(r2, r0, 0x80000) 3.974367293s ago: executing program 3 (id=177): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 3.954931923s ago: executing program 4 (id=178): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) 3.900883925s ago: executing program 1 (id=179): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)}], 0x2, 0x0, 0x0, 0x900}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="c72cab3d189370e24543d3120100feffffffffffffff00083a0000b17e03"], 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000c40)=ANY=[@ANYBLOB="40178200000001ba43a265dec06959bff45b82c72984fe26544a6052482ac6c85d079206b5877f91c73b58f0f9b97314b251"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000013c0)={0x2c, &(0x7f0000001180)={0x40, 0x2, 0xe9, {0xe9, 0x6, "39ccfd2831254e756462990c935f08161cecb9a7719de99b9f99a4b2a5abb4b65d893c5aafb37be7535f5d47a68d9b4fa1f44d421528cc013b81b98d7a26ae22e76d0429afed9b0e9f685b944ebe65164bac54db10509fc5d9d0a0aafb331f7ef4534355bcbb93b100c2486363d625a07c297a051a8263dd1a0603140e64bccc1f9d2571ce77acdb0c94ca6f9096338f61ded42edd76c7ecf3148ee57226a0740f8007a21ea07bc2ef7bde5f899e1ef8dbd64d694efbd3b2abe847a9fd34d9158a4c572b389ca2e13250d35fcb1008562a3b1f974253cf9deccb2ea85b1556b7ef1785b0153662"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x186d}}, &(0x7f00000012c0)=ANY=[@ANYBLOB="000f4a000000050f4a000614100a0da20000000fff02000000002835ffb352678e540f20001000000f010403100b071002041052ff00141004049790a5499892894003ab5a67"], 0x0, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7a, 0x3, 0x7, 0xe, 0xcf, 0x0, 0xa0}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb893ad7f863c3d83}}, &(0x7f0000000b00), &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa91e, 0x2a, 0x1, {0x22, 0xda3}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x40, 0x11, 0xbe, "1f1f45ef418ac53618fd86a4750b26da7cb926dbcd7e7a9ef3ef9b56a00082e876e5d9776136bc4b12784c09edb922fad4f9cb198ed4c8ba74b46dfc99caa951bd4a0a78d2ea07fa407e5c9b5ecd43d24ffc13d7bacb9cd7f69be0f96492c89a9851548fc05db0678d78ab8c1364af6051bf5c1b77c6355fae93402868b8b8b1da6b785f70ed3d10f4aa150a26e5b8a37caaf1985c0d8c34fa3da45c3e2f18e01b08120e751f526c7f1f7326e00197c44edd4d2378a55819439be4b1dabd"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000bc0)={0x20, 0x1, 0x39, "7b7790ea5abefd4a81002cf143871f2a3a1fe02864b7501afd750355dca8d518a531c85960d8690b2c069f0248890ef5fe6b0634d515c7cb66"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x1}}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) r4 = socket(0x10, 0x803, 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x14, 0x2, 0xffff, 0x7, 0x0, 0x17e3}, 0x9c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)=@multiplanar_overlay={0xffffff85, 0x1, 0x4, 0x10, 0x42, {}, {0x4, 0x8, 0xbe, 0x5, 0x9, 0x6, "b5430185"}, 0x6, 0x3, {0x0}, 0x1}) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 3.69568633s ago: executing program 0 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, 0x0) r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000001000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a59c701be740490a49368e63242e7567df8ff00000000bfa200000000000007020000f8fff752b703000008000000b70400000000000085000000030000009500000000000000f61da189c70a2f49a35b2acb97b10b7fb1f8369ac2b93c7b8a81e9b2e25fde44f3cd1d28c19730096767ca384dd5b417eb682295b4f63ec1c6d34bcfecda6a18f826f5fcf7b1df0a3310b79b32e2cc1523f9fb691f5bb199f026b7dcd8336749b8de0b0c336a4a2cfffdabf01d90e887ba01183cf550b991a409414dcf4522a57d269d38fcd59d17ea21b9730b26e9258797a85a639bcd0cb3c9256a2dacabe41dc653185b9c82eb96ecbab4476ee766c34b57ed785a845127c13798bc43b33f1cd6fea0e8eaedb15d9db99a9d2fa8739f16a1101a7ea6773fa65979ed20938c0024256cff05e65dfb32"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(r1, 0x0, 0x0, 0x80800) 2.823702631s ago: executing program 3 (id=181): socket(0x1d, 0x2, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 963.546177ms ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, 0x0, 0x8080) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 689.708524ms ago: executing program 1 (id=183): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000001c0)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000200"], 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x108, 0x8206, 0x1, 0x9c}, &(0x7f0000000040)=0x9) 0s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x7, 0x80000001, 0xa6d8, 0x2, 0x1, 0x40000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x80000003, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4001, 0x10000, 0x0, 0x8, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x3, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x3, 0x0, 0x40, 0x1, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x1, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0x7ffd, 0x7, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000200000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 66.859174][ T4260] cgroup: Unknown subsys name 'net' [ 66.958685][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.469784][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.939499][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.943202][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.947557][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.956015][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.962394][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.969558][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.975787][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.983421][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.990212][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.998108][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.003758][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.012087][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.022248][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.026429][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.039757][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.039873][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.047465][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.063840][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.108391][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.118794][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.125427][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.132559][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.134139][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.147952][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.151428][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.162565][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.177509][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.181780][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.185888][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.205080][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.551497][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 70.654299][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 70.690638][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 70.742679][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 70.783097][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 70.798294][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.805981][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.814290][ T4280] device bridge_slave_0 entered promiscuous mode [ 70.846127][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.854457][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.864612][ T4280] device bridge_slave_1 entered promiscuous mode [ 70.932836][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.958755][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.999462][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.006701][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.015039][ T4274] device bridge_slave_0 entered promiscuous mode [ 71.030477][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.039034][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.047099][ T4274] device bridge_slave_1 entered promiscuous mode [ 71.055722][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.064627][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.073697][ T4287] device bridge_slave_0 entered promiscuous mode [ 71.087902][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.097848][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.105852][ T4287] device bridge_slave_1 entered promiscuous mode [ 71.141067][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.148309][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.156720][ T4273] device bridge_slave_0 entered promiscuous mode [ 71.171999][ T4280] team0: Port device team_slave_0 added [ 71.178089][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185425][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.193309][ T4279] device bridge_slave_0 entered promiscuous mode [ 71.202350][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.214889][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.222511][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.230336][ T4273] device bridge_slave_1 entered promiscuous mode [ 71.248008][ T4280] team0: Port device team_slave_1 added [ 71.253939][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.261067][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.269490][ T4279] device bridge_slave_1 entered promiscuous mode [ 71.277697][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.310307][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.327902][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.350986][ T4274] team0: Port device team_slave_0 added [ 71.377433][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.388756][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.402430][ T4274] team0: Port device team_slave_1 added [ 71.416622][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.424132][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.451129][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.465495][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.475444][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481977][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492453][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.510866][ T4287] team0: Port device team_slave_0 added [ 71.527432][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.534721][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.561501][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.590068][ T4287] team0: Port device team_slave_1 added [ 71.623092][ T4279] team0: Port device team_slave_0 added [ 71.629383][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.637309][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.663699][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.678025][ T4273] team0: Port device team_slave_0 added [ 71.695253][ T4279] team0: Port device team_slave_1 added [ 71.704938][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.717341][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.743756][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.755498][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.765645][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.795254][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.814009][ T4273] team0: Port device team_slave_1 added [ 71.828061][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.835260][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.861555][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.894213][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.901219][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.927595][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.954519][ T4280] device hsr_slave_0 entered promiscuous mode [ 71.961613][ T4280] device hsr_slave_1 entered promiscuous mode [ 71.969166][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.979052][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.005475][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.056499][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.064178][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.090629][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.112443][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 72.112460][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 72.130454][ T4274] device hsr_slave_0 entered promiscuous mode [ 72.137522][ T4274] device hsr_slave_1 entered promiscuous mode [ 72.145209][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.153344][ T4274] Cannot create hsr debugfs directory [ 72.162937][ T4287] device hsr_slave_0 entered promiscuous mode [ 72.169843][ T4287] device hsr_slave_1 entered promiscuous mode [ 72.176869][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.184674][ T4287] Cannot create hsr debugfs directory [ 72.190749][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.198008][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 72.204684][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.231217][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.271447][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 72.271472][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 72.290160][ T4279] device hsr_slave_0 entered promiscuous mode [ 72.297548][ T4279] device hsr_slave_1 entered promiscuous mode [ 72.307739][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.315862][ T4279] Cannot create hsr debugfs directory [ 72.425629][ T4273] device hsr_slave_0 entered promiscuous mode [ 72.432644][ T4273] device hsr_slave_1 entered promiscuous mode [ 72.439101][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.446850][ T4273] Cannot create hsr debugfs directory [ 72.728077][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.747310][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.768965][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.784178][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.814839][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.829632][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.839711][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.865318][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.930009][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.940700][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.950838][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.962655][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.074220][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.089135][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.101222][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.120095][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.138914][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.150990][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.164612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.174798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.195581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.205797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.215421][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.222735][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.260922][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.270514][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.294586][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.304101][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.313302][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.320478][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.330632][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.341587][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.353355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.372946][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.382116][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.410018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.432564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.445594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.454204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.464006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.485470][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.499559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.509722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.519199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.538797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.547731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.562838][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.575721][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.590402][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.615394][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.624614][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.633633][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.641889][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.649702][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.658958][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.667543][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.674850][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.698555][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.718825][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.728017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.738695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.754920][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.762700][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.783589][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.820908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.839687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.851167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.866994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.878866][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.886075][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.895609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.904337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.913446][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.920519][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.928396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.937595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.949280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.983343][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.000919][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.010693][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.029150][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.038899][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.048327][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.057545][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.065777][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.089127][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.110960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.133671][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.142804][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.152329][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.160659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.169371][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.178737][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.187911][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.196541][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 74.201852][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 74.207427][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.219926][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.233966][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.249104][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.262583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.271552][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 74.278395][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.288703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.300649][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.309581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.321353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.329992][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.337126][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.351055][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.358679][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 74.361556][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 74.403616][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.416108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.433289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.448642][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.455849][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.474459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.488261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.500162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.514432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.526285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.539730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.556125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.568520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.607679][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.620396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.637237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.649116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.663537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.673949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.693651][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.705766][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.721818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.732823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.803556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.817076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.826861][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.834068][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.868888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.909076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.919744][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.926948][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.943219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.990025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.016785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.046262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.059147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.068840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.078728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.095462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.105825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.115021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.155911][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.168146][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.179272][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.194228][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.202683][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.210226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.224705][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.243840][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.266718][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.281887][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.301050][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.315715][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.348653][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.379418][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.400492][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.438100][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.460936][ T4279] device veth0_vlan entered promiscuous mode [ 75.498396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.510435][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.541045][ T4279] device veth1_vlan entered promiscuous mode [ 75.571594][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.606359][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.615947][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.660643][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.737076][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.749188][ T4274] device veth0_vlan entered promiscuous mode [ 75.772772][ T4279] device veth0_macvtap entered promiscuous mode [ 75.780396][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.790750][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.810300][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.827004][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.838827][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.846740][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.854796][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.866449][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.900950][ T4274] device veth1_vlan entered promiscuous mode [ 75.912848][ T4279] device veth1_macvtap entered promiscuous mode [ 75.930320][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.939995][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.960476][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.973053][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.989623][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.028241][ T4287] device veth0_vlan entered promiscuous mode [ 76.040057][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.055007][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.063973][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.073919][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.083450][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.092187][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.100240][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.112353][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.132451][ T4287] device veth1_vlan entered promiscuous mode [ 76.152684][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.160898][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.170727][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.209510][ T4274] device veth0_macvtap entered promiscuous mode [ 76.223706][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.235278][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.245060][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.254265][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.271614][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 76.272640][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 76.300023][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.308898][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.317435][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.328516][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.337741][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.345966][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.354648][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 76.361788][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.370783][ T4273] device veth0_vlan entered promiscuous mode [ 76.380579][ T4274] device veth1_macvtap entered promiscuous mode [ 76.394677][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.405001][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.414278][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423293][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.432500][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 76.441607][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 76.480733][ T4273] device veth1_vlan entered promiscuous mode [ 76.495471][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.505064][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.514387][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.523207][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.532455][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.540934][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.553950][ T4280] device veth0_vlan entered promiscuous mode [ 76.572067][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.584752][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.596799][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.608977][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.622220][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.633785][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.641634][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.650046][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.659013][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.667955][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.677623][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.686553][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.697345][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.707195][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.719204][ T4287] device veth0_macvtap entered promiscuous mode [ 76.746023][ T4280] device veth1_vlan entered promiscuous mode [ 76.756645][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.768188][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.777347][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.786336][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.799312][ T4287] device veth1_macvtap entered promiscuous mode [ 76.854646][ T4273] device veth0_macvtap entered promiscuous mode [ 76.874242][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.889000][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.899004][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.914227][ T4273] device veth1_macvtap entered promiscuous mode [ 76.943486][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.955512][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.966602][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.977316][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.989203][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.010107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.022227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.033170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.044291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.055047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.066343][ T4280] device veth0_macvtap entered promiscuous mode [ 77.083362][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.096718][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.106946][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.118409][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.130159][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.147029][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.150891][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.165486][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.177594][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.179252][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.195696][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.205694][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.216593][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.227867][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.242665][ T4280] device veth1_macvtap entered promiscuous mode [ 77.255808][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.264300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.273416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.282741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.291576][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.299349][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.308559][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.326714][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.340971][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.349990][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.359365][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.379968][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.393815][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.404965][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.415595][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.426710][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.437699][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.450182][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.489249][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.504326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.525113][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.534590][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543910][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.555471][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.594003][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.606121][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.618561][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.629630][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.640731][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.652164][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.663374][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.676194][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.687741][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.713195][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.724379][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.734640][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.743163][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.755795][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.767193][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.777524][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.788292][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.799042][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.809590][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.819610][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.830297][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.843272][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.863942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.873905][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.878594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.884582][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.897350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.906722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.938478][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956941][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.966364][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.975263][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014125][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.024416][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.072807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.108037][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.122658][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.140471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.165631][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.219706][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.262266][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.284822][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.312113][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321054][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.342803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.350417][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.358963][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 78.358979][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 78.375298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.432096][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 78.501432][ T4361] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.512753][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 78.518822][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 78.547443][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.557477][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.590663][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.629165][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.659323][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.866386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.921185][ T4368] jffs2: notice: (4368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.946837][ T4362] lo speed is unknown, defaulting to 1000 [ 78.961521][ T4362] lo speed is unknown, defaulting to 1000 [ 79.002957][ T4362] lo speed is unknown, defaulting to 1000 [ 79.011065][ T4362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.127060][ T4362] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.222174][ T4374] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 79.344997][ T4362] lo speed is unknown, defaulting to 1000 [ 79.418065][ T4362] lo speed is unknown, defaulting to 1000 [ 79.445838][ T4362] lo speed is unknown, defaulting to 1000 [ 79.672837][ T4362] lo speed is unknown, defaulting to 1000 [ 79.713682][ T4362] lo speed is unknown, defaulting to 1000 [ 80.560260][ T4364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.917178][ T4409] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 80.923578][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.124648][ T4319] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 81.124726][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.127576][ T4319] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.838651][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.838670][ T4319] usb 2-1: Product: syz [ 82.838680][ T4319] usb 2-1: Manufacturer: syz [ 82.838688][ T4319] usb 2-1: SerialNumber: syz [ 83.074826][ T4319] usb 2-1: config 0 descriptor?? [ 83.076435][ T4400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.107744][ T4319] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 83.135919][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.409628][ T4423] ======================================================= [ 83.409628][ T4423] WARNING: The mand mount option has been deprecated and [ 83.409628][ T4423] and is ignored by this kernel. Remove the mand [ 83.409628][ T4423] option from the mount to silence this warning. [ 83.409628][ T4423] ======================================================= [ 83.444688][ T4322] usb 2-1: USB disconnect, device number 2 [ 83.547614][ T4428] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 83.623139][ T4430] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21'. [ 83.691378][ T4319] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.699763][ T4432] sctp: [Deprecated]: syz.0.22 (pid 4432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.699763][ T4432] Use struct sctp_sack_info instead [ 83.906719][ T4319] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.957556][ T4319] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 83.970177][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.991353][ T4352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.998955][ T4319] usb 5-1: Product: syz [ 84.004199][ T4319] usb 5-1: Manufacturer: syz [ 84.009735][ T4435] lo speed is unknown, defaulting to 1000 [ 84.035140][ T4319] usb 5-1: SerialNumber: syz [ 84.040871][ T4435] lo speed is unknown, defaulting to 1000 [ 84.058916][ T4319] usb 5-1: config 0 descriptor?? [ 84.077888][ T4435] lo speed is unknown, defaulting to 1000 [ 84.097171][ T4425] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.113918][ T4319] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 84.140014][ T4435] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.196559][ T4438] capability: warning: `syz.1.24' uses 32-bit capabilities (legacy support in use) [ 84.196792][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 84.241830][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.253583][ T4435] lo speed is unknown, defaulting to 1000 [ 84.268131][ T4435] lo speed is unknown, defaulting to 1000 [ 84.282789][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.297955][ T4435] lo speed is unknown, defaulting to 1000 [ 84.305893][ T4352] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 84.343147][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.359153][ T4435] lo speed is unknown, defaulting to 1000 [ 84.372185][ T4352] usb 1-1: Product: syz [ 84.385590][ T4352] usb 1-1: Manufacturer: syz [ 84.398969][ T4435] lo speed is unknown, defaulting to 1000 [ 84.410580][ T4352] usb 1-1: SerialNumber: syz [ 84.438232][ T4352] usb 1-1: config 0 descriptor?? [ 84.673093][ T4352] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 85.224435][ T14] usb 1-1: USB disconnect, device number 2 [ 86.204583][ T4466] netlink: 'syz.3.33': attribute type 3 has an invalid length. [ 86.368369][ T4286] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 86.383319][ T14] usb 5-1: USB disconnect, device number 2 [ 86.451862][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.487918][ T4473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.36'. [ 86.504804][ T4474] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 86.682755][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 86.699420][ T4321] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 86.845053][ T26] cfg80211: failed to load regulatory.db [ 87.383617][ T4321] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.439636][ T4321] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.590937][ T4321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.634718][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.710760][ T4321] usbtmc 3-1:16.0: bulk endpoints not found [ 87.935200][ T4478] device syzkaller0 entered promiscuous mode [ 90.346882][ T14] usb 3-1: USB disconnect, device number 2 [ 90.590983][ T4487] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.799919][ T4491] siw: device registration error -23 [ 91.441314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.071408][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.273473][ T4262] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.303122][ T4262] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.314633][ T4262] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.324136][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.359729][ T4494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.460183][ T14] usb 2-1: USB disconnect, device number 3 [ 95.965906][ T4506] netlink: 'syz.2.46': attribute type 3 has an invalid length. [ 97.401476][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.587857][ T4528] jffs2: notice: (4528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.631693][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 97.659782][ T4321] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 97.767359][ T4321] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.916361][ T4321] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.058379][ T4321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.147735][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.363155][ T4321] usbtmc 3-1:16.0: bulk endpoints not found [ 98.497096][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.512714][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.535273][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.627017][ T4531] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.676830][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.701569][ T4536] netlink: 152 bytes leftover after parsing attributes in process `syz.4.57'. [ 98.715132][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.726263][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.739413][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.748666][ T4531] wlan0 speed is unknown, defaulting to 1000 [ 98.756148][ T4536] siw: device registration error -23 [ 99.915667][ T4548] netlink: 'syz.1.60': attribute type 3 has an invalid length. [ 100.158307][ T26] usb 3-1: USB disconnect, device number 3 [ 100.361289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 100.381287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 100.421288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 100.451288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 100.511294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 100.551290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 100.591291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 100.621288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 100.661285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 104.199571][ T4577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.69'. [ 104.266554][ T4577] siw: device registration error -23 [ 104.469897][ T4582] netlink: 'syz.4.72': attribute type 12 has an invalid length. [ 104.527884][ T4584] netlink: 'syz.2.74': attribute type 3 has an invalid length. [ 104.981367][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.091346][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 106.728083][ T4317] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.736472][ T4317] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.746891][ T4317] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.756891][ T4317] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.766848][ T4317] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.781950][ T4317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.791439][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.807642][ T4317] usbtmc 5-1:16.0: bulk endpoints not found [ 107.401992][ T4277] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.654945][ T4277] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 107.701223][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 107.823435][ T4277] usb 4-1: Product: syz [ 107.870920][ T4277] usb 4-1: Manufacturer: syz [ 107.902723][ T4277] usb 4-1: SerialNumber: syz [ 107.973869][ T4277] usb 4-1: config 0 descriptor?? [ 108.096439][ T4618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.82'. [ 108.162662][ T4618] siw: device registration error -23 [ 108.447165][ T4626] overlayfs: unrecognized mount option "uuid=null" or missing value [ 110.426470][ T4321] usb 5-1: USB disconnect, device number 3 [ 110.555196][ T4628] netlink: 'syz.1.86': attribute type 3 has an invalid length. [ 110.646934][ T4262] usb 4-1: USB disconnect, device number 2 [ 111.828871][ T4647] device syzkaller0 entered promiscuous mode [ 112.017705][ T4653] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 112.846306][ T4661] Zero length message leads to an empty skb [ 115.413410][ T4674] random: crng reseeded on system resumption [ 116.395122][ T4682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.103'. [ 116.537778][ T4684] siw: device registration error -23 [ 117.273874][ T4687] sctp: [Deprecated]: syz.3.104 (pid 4687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.273874][ T4687] Use struct sctp_sack_info instead [ 117.314483][ T4690] netlink: 152 bytes leftover after parsing attributes in process `syz.2.102'. [ 118.287947][ T4694] siw: device registration error -23 [ 118.861022][ T4705] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 119.001464][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.031670][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.257896][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 119.330072][ T4707] device syzkaller0 entered promiscuous mode [ 119.345004][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.432321][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 119.552451][ T4322] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 119.600597][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.619184][ T4322] usb 4-1: Product: syz [ 119.634224][ T4322] usb 4-1: Manufacturer: syz [ 119.638987][ T4322] usb 4-1: SerialNumber: syz [ 119.650438][ T4322] usb 4-1: config 0 descriptor?? [ 119.682893][ T4712] fuse: Bad value for 'fd' [ 119.701575][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 119.708690][ T4321] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 119.728935][ T4321] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.739855][ T4321] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.751015][ T4321] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.761902][ T4321] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.775580][ T4321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.785120][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.810210][ T4321] usbtmc 3-1:16.0: bulk endpoints not found [ 119.863227][ T4322] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 120.065761][ T4277] usb 4-1: USB disconnect, device number 3 [ 122.294151][ T4262] usb 3-1: USB disconnect, device number 4 [ 122.444713][ T4726] netlink: 152 bytes leftover after parsing attributes in process `syz.3.116'. [ 122.512340][ T4729] netlink: 152 bytes leftover after parsing attributes in process `syz.0.118'. [ 123.442322][ T4729] siw: device registration error -23 [ 126.494737][ T4751] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 128.733572][ T4765] jffs2: notice: (4765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.001187][ T4770] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 129.852191][ T27] audit: type=1800 audit(1786190576.515:2): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="memory_backed" dev="configfs" ino=35493 res=0 errno=0 [ 130.058086][ T27] audit: type=1800 audit(1786190576.545:3): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="zone_nr_conv" dev="configfs" ino=35866 res=0 errno=0 [ 130.272020][ T4277] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.504075][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 130.565047][ T4277] usb 1-1: config 0 has no interfaces? [ 130.650055][ T27] audit: type=1800 audit(1786190576.545:4): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="power" dev="configfs" ino=35867 res=0 errno=0 [ 130.735910][ T4277] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.903165][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.033291][ T4277] usb 1-1: Product: syz [ 131.101600][ T4277] usb 1-1: Manufacturer: syz [ 131.611112][ T4277] usb 1-1: SerialNumber: syz [ 132.106031][ T4277] usb 1-1: config 0 descriptor?? [ 132.916063][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.923692][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.033559][ T4774] null_blk: disk nullb1 created [ 133.064325][ T4321] usb 1-1: USB disconnect, device number 3 [ 133.248575][ T4800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.136'. [ 133.289249][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 133.406669][ T4802] siw: device registration error -23 [ 134.316900][ T4816] sctp: [Deprecated]: syz.3.138 (pid 4816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.316900][ T4816] Use struct sctp_sack_info instead [ 134.345737][ T4811] netlink: 'syz.4.140': attribute type 3 has an invalid length. [ 134.701414][ T4277] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.619307][ T4817] jffs2: notice: (4817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.873579][ T4817] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 137.028724][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.201685][ T4815] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 137.717788][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.727810][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.819078][ T4277] usb 4-1: string descriptor 0 read error: -71 [ 137.827677][ T4277] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 137.837681][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.853402][ T4277] usb 4-1: config 0 descriptor?? [ 137.859042][ T4277] usb 4-1: can't set config #0, error -71 [ 137.880523][ T4277] usb 4-1: USB disconnect, device number 4 [ 138.033275][ T27] audit: type=1800 audit(1786190584.705:5): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="memory_backed" dev="configfs" ino=35687 res=0 errno=0 [ 138.119372][ T27] audit: type=1800 audit(1786190584.735:6): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="zone_nr_conv" dev="configfs" ino=35692 res=0 errno=0 [ 138.281382][ T27] audit: type=1800 audit(1786190584.735:7): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="power" dev="configfs" ino=35693 res=0 errno=0 [ 138.431574][ T4846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.151'. [ 139.301321][ T4262] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.441431][ T4262] usb 2-1: Using ep0 maxpacket: 32 [ 140.452769][ T4262] usb 2-1: config 0 has no interfaces? [ 140.681490][ T4262] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.764299][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.791485][ T4859] netlink: 'syz.4.155': attribute type 3 has an invalid length. [ 140.861317][ T4860] jffs2: notice: (4860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.997482][ T4262] usb 2-1: Product: syz [ 141.591602][ T4262] usb 2-1: Manufacturer: syz [ 141.596270][ T4262] usb 2-1: SerialNumber: syz [ 143.626244][ T4262] usb 2-1: config 0 descriptor?? [ 143.735173][ T4871] sctp: [Deprecated]: syz.4.158 (pid 4871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.735173][ T4871] Use struct sctp_sack_info instead [ 143.969984][ T4262] usb 2-1: can't set config #0, error -71 [ 144.146337][ T4865] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 144.161088][ T4262] usb 2-1: USB disconnect, device number 4 [ 144.541475][ T4855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.477700][ T4884] overlayfs: failed to resolve './bus': -2 [ 145.497606][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.508806][ T27] audit: type=1800 audit(1786190592.175:8): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="memory_backed" dev="configfs" ino=35799 res=0 errno=0 [ 145.547359][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.590198][ T27] audit: type=1800 audit(1786190592.175:9): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="zone_nr_conv" dev="configfs" ino=35800 res=0 errno=0 [ 145.618183][ T4855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 145.646583][ T4855] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 145.665805][ T27] audit: type=1800 audit(1786190592.175:10): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="power" dev="configfs" ino=35801 res=0 errno=0 [ 145.687989][ T4855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.716711][ T4855] usb 5-1: Product: syz [ 145.728311][ T4855] usb 5-1: Manufacturer: syz [ 145.741572][ T4855] usb 5-1: SerialNumber: syz [ 145.748100][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 145.784154][ T4855] usb 5-1: config 0 descriptor?? [ 147.284771][ T4855] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 147.861923][ T4855] usb 5-1: USB disconnect, device number 4 [ 147.871456][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.938377][ T4902] netlink: 'syz.0.168': attribute type 3 has an invalid length. [ 148.091677][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 148.861663][ T4320] usb 2-1: config 0 has no interfaces? [ 150.201081][ T4320] usb 2-1: string descriptor 0 read error: -71 [ 150.228153][ T4320] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.327851][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.082740][ T4910] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 153.090848][ T4320] usb 2-1: config 0 descriptor?? [ 153.096806][ T4320] usb 2-1: can't set config #0, error -71 [ 153.110874][ T4320] usb 2-1: USB disconnect, device number 5 [ 153.671894][ T4922] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 155.101467][ T4825] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.661370][ T4322] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.683291][ T4825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.765857][ T4825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.531575][ T4825] usb 1-1: Dual-Role OTG device on HNP port [ 157.568215][ T4825] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 157.591773][ T4825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.609924][ C0] ------------[ cut here ]------------ [ 157.615802][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 157.622841][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 157.632587][ C0] Modules linked in: [ 157.636488][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 157.643538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.653814][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 157.659246][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 157.678969][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 157.685365][ C0] RAX: e60e63d8610eec00 RBX: ffff8881413d40e0 RCX: ffffffff8c8bc740 [ 157.693611][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 157.701766][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 157.709970][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 157.718050][ C0] R13: ffff8881413d410d R14: ffff8881413d40e8 R15: ffff8880551255ba [ 157.726035][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.739577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.746808][ C0] CR2: 00007f61774a1ff8 CR3: 000000007e03d000 CR4: 00000000003506f0 [ 157.754952][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.763332][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.771702][ C0] Call Trace: [ 157.775272][ C0] [ 157.778160][ C0] hidg_set_alt+0x126/0xa00 [ 157.782786][ C0] ? usb_gadget_set_state+0x142/0x310 [ 157.788425][ C0] set_config+0x6e8/0xf70 [ 157.792799][ C0] composite_setup+0x194c/0x2b00 [ 157.797954][ C0] configfs_composite_setup+0xc3/0x100 [ 157.803443][ C0] dummy_timer+0x12ea/0x3420 [ 157.808049][ C0] ? __lock_acquire+0x1465/0x7c40 [ 157.813107][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 157.818139][ C0] ? lock_chain_count+0x20/0x20 [ 157.823010][ C0] ? dummy_free_streams+0x520/0x520 [ 157.828234][ C0] __hrtimer_run_queues+0x522/0xc90 [ 157.833457][ C0] ? dummy_free_streams+0x520/0x520 [ 157.838702][ C0] ? hrtimer_interrupt+0x980/0x980 [ 157.843917][ C0] hrtimer_run_softirq+0x173/0x290 [ 157.849045][ C0] handle_softirqs+0x291/0x910 [ 157.853826][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 157.858774][ C0] ? do_softirq+0x210/0x210 [ 157.863289][ C0] ? hrtimer_interrupt+0x775/0x980 [ 157.868417][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 157.873753][ C0] __irq_exit_rcu+0x13b/0x230 [ 157.878440][ C0] ? irq_exit_rcu+0x20/0x20 [ 157.882965][ C0] irq_exit_rcu+0x5/0x20 [ 157.887217][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 157.893000][ C0] [ 157.895941][ C0] [ 157.898878][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 157.904892][ C0] RIP: 0010:default_idle+0xb/0x10 [ 157.909939][ C0] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 157.931090][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 157.937725][ C0] RAX: e60e63d8610eec00 RBX: ffffffff8a3a18b7 RCX: e60e63d8610eec00 [ 157.946867][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 157.955646][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 157.963690][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 157.972050][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 157.980318][ C0] ? default_idle_call+0x77/0xc0 [ 157.985322][ C0] default_idle_call+0x84/0xc0 [ 157.990103][ C0] do_idle+0x3a2/0x680 [ 157.994275][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 157.999875][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 158.005663][ C0] ? schedule_idle+0x57/0x90 [ 158.010725][ C0] cpu_startup_entry+0x3f/0x60 [ 158.016100][ C0] rest_init+0x2dc/0x300 [ 158.021271][ C0] ? time_init+0x33/0x33 [ 158.025796][ C0] arch_call_rest_init+0xa/0xa [ 158.030843][ C0] start_kernel+0x493/0x53c [ 158.035572][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 158.041749][ C0] [ 158.044876][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.052254][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 158.059280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.069375][ C0] Call Trace: [ 158.072678][ C0] [ 158.075624][ C0] dump_stack_lvl+0x188/0x24e [ 158.080427][ C0] ? memcpy+0x3c/0x60 [ 158.084425][ C0] ? show_regs_print_info+0x12/0x12 [ 158.089633][ C0] ? load_image+0x410/0x410 [ 158.094154][ C0] panic+0x2d3/0x710 [ 158.098177][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 158.102726][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 158.109374][ C0] __warn+0x2f8/0x4f0 [ 158.113385][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 158.118164][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 158.122937][ C0] report_bug+0x2ba/0x4f0 [ 158.127276][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 158.132057][ C0] handle_bug+0x3a/0x70 [ 158.136226][ C0] exc_invalid_op+0x16/0x40 [ 158.140737][ C0] asm_exc_invalid_op+0x16/0x20 [ 158.145682][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 158.151063][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 158.170880][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 158.176975][ C0] RAX: e60e63d8610eec00 RBX: ffff8881413d40e0 RCX: ffffffff8c8bc740 [ 158.185224][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 158.193326][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 158.201628][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 158.209968][ C0] R13: ffff8881413d410d R14: ffff8881413d40e8 R15: ffff8880551255ba [ 158.218261][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 158.223072][ C0] hidg_set_alt+0x126/0xa00 [ 158.227600][ C0] ? usb_gadget_set_state+0x142/0x310 [ 158.233081][ C0] set_config+0x6e8/0xf70 [ 158.237547][ C0] composite_setup+0x194c/0x2b00 [ 158.242705][ C0] configfs_composite_setup+0xc3/0x100 [ 158.248281][ C0] dummy_timer+0x12ea/0x3420 [ 158.252887][ C0] ? __lock_acquire+0x1465/0x7c40 [ 158.257960][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 158.263174][ C0] ? lock_chain_count+0x20/0x20 [ 158.268138][ C0] ? dummy_free_streams+0x520/0x520 [ 158.273871][ C0] __hrtimer_run_queues+0x522/0xc90 [ 158.279365][ C0] ? dummy_free_streams+0x520/0x520 [ 158.284601][ C0] ? hrtimer_interrupt+0x980/0x980 [ 158.289726][ C0] hrtimer_run_softirq+0x173/0x290 [ 158.294848][ C0] handle_softirqs+0x291/0x910 [ 158.299652][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 158.304510][ C0] ? do_softirq+0x210/0x210 [ 158.309018][ C0] ? hrtimer_interrupt+0x775/0x980 [ 158.314160][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 158.319363][ C0] __irq_exit_rcu+0x13b/0x230 [ 158.324043][ C0] ? irq_exit_rcu+0x20/0x20 [ 158.328558][ C0] irq_exit_rcu+0x5/0x20 [ 158.332813][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 158.338457][ C0] [ 158.341391][ C0] [ 158.344333][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.350325][ C0] RIP: 0010:default_idle+0xb/0x10 [ 158.355394][ C0] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 158.375636][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 158.381855][ C0] RAX: e60e63d8610eec00 RBX: ffffffff8a3a18b7 RCX: e60e63d8610eec00 [ 158.389867][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 158.398041][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 158.406052][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 158.414048][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 158.422234][ C0] ? default_idle_call+0x77/0xc0 [ 158.427321][ C0] default_idle_call+0x84/0xc0 [ 158.432116][ C0] do_idle+0x3a2/0x680 [ 158.436209][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 158.441508][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 158.447285][ C0] ? schedule_idle+0x57/0x90 [ 158.451966][ C0] cpu_startup_entry+0x3f/0x60 [ 158.456833][ C0] rest_init+0x2dc/0x300 [ 158.461169][ C0] ? time_init+0x33/0x33 [ 158.465418][ C0] arch_call_rest_init+0xa/0xa [ 158.470303][ C0] start_kernel+0x493/0x53c [ 158.474818][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 158.480818][ C0] [ 158.484064][ C0] Kernel Offset: disabled [ 158.488751][ C0] Rebooting in 86400 seconds..