last executing test programs: 6.345712747s ago: executing program 2 (id=226): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0xf30c}}, 0x18) 5.736219323s ago: executing program 2 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={&(0x7f0000005980)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf}]}, 0x2c}}, 0x800) 5.617476236s ago: executing program 2 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) 5.355013384s ago: executing program 2 (id=237): openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x2a6b42, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003020000000203975837d4942c2780746d8606cfdc9182f90af6e6b08c11277fa6c2e9485ecd403d265b1e88b0c4df1cfb81a81f377a897840b939d8632a2c341783c9ae2b797be0d962"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)="0bcd", 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x0, 0x1, 0x302, 0xfffd, 0x0, 0x100000, 0x0}) write$char_usb(r1, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 5.045406673s ago: executing program 1 (id=242): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x137db) ptrace$pokeuser(0x6, r0, 0x118, 0x6000003f) 4.741467043s ago: executing program 1 (id=248): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) close_range(r0, r0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffdfff, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close(0x3) 3.841807604s ago: executing program 1 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x49, 0x0, 0x80000000000008}]}) 3.454857458s ago: executing program 1 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.372465017s ago: executing program 1 (id=259): r0 = openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x2a6b42, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003020000000203975837d4942c2780746d8606cfdc9182f90af6e6b08c11277fa6c2e9485ecd403d265b1e88b0c4df1cfb81a81f377a897840b939d8632a2c341783c9ae2b797be0d962"]}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcd", 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x0, 0x1, 0x302, 0xfffd, 0x0, 0x100000, 0x0}) write$char_usb(r3, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f00000001c0)=0xd, 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) syz_usb_disconnect(r2) connect$bt_sco(r1, 0x0, 0x0) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000080)) openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1.705092525s ago: executing program 0 (id=270): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a}, @sadb_address={0x5, 0x5, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @remote, 0x8}}, @sadb_x_sec_ctx={0x14, 0x18, 0x7f, 0x8, 0xffffffffffffffc5, "147507000b8464b827e5b83caf5e7999a9217564676d449628791077e465f2f3523773b5f6e8c3e332bb344126da3346b3faefaac38f742616a0131065f127226c993901fd5ac3e75617e96875e9e22603beb37eff2213e40280b1ac54528c7df6322814e4f7d0342199bd9330ac7b02b62bef997acb1dd8f8fd00089fef19ec147f3c8507e2796c89b603781f0e7b0d2937630db094b1"}]}, 0xf8}, 0x1, 0x7}, 0x4008000) 1.541965571s ago: executing program 0 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={&(0x7f0000005980)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x24}}, 0x800) 1.505980702s ago: executing program 0 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.404905551s ago: executing program 0 (id=273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@binder={0x73622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfa8, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x21}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.379474427s ago: executing program 2 (id=274): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) close_range(r0, r0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffdfff, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close(0x3) 1.163835975s ago: executing program 3 (id=277): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_CMD(r0, 0x80406409, &(0x7f0000000180)={0x0, 0x20000, 0x15e9c696212c335b, 0x401, 0x4, 0x7, 0x40, 0xff, 0xffffffff, 0x101, 0x80, 0x5, 0x0, 0x0, 0x0}) 1.103262932s ago: executing program 3 (id=278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.042890384s ago: executing program 3 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 905.671901ms ago: executing program 3 (id=280): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x82, 0x2}]}}}], 0x10}}], 0x2, 0xf00) 901.28211ms ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 831.493757ms ago: executing program 3 (id=282): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x500008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 312.392129ms ago: executing program 2 (id=283): openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x2a6b42, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003020000000203975837d4942c2780746d8606cfdc9182f90af6e6b08c11277fa6c2e9485ecd403d265b1e88b0c4df1cfb81a81f377a897840b939d8632a2c341783c9ae2b797be0d962"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)="0bcd", 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x0, 0x1, 0x302, 0xfffd, 0x0, 0x100000, 0x0}) write$char_usb(r1, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 307.502642ms ago: executing program 1 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x49, 0x0, 0x80000000000008}]}) 304.667195ms ago: executing program 0 (id=285): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'aio_aio12_8\x00', [0x294, 0x2, 0x1, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x6, 0x0, 0xfffffff8, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x4000746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x37a]}) 0s ago: executing program 0 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 76.272318][ T5594] cgroup: Unknown subsys name 'net' [ 76.511291][ T5594] cgroup: Unknown subsys name 'cpuset' [ 76.567313][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.224065][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.442252][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.454536][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.473513][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.476366][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.489399][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.571073][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.588839][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.591382][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.594818][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.616950][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.699991][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.715451][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.727930][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.745383][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.750866][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.761057][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.762495][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.763569][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.766748][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.831578][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.580155][ T4923] Bluetooth: hci0: command tx timeout [ 82.669197][ T4923] Bluetooth: hci1: command tx timeout [ 82.695233][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.696361][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.696531][ T5610] bridge_slave_0: entered allmulticast mode [ 82.702219][ T5610] bridge_slave_0: entered promiscuous mode [ 82.754450][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.754610][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.754765][ T5610] bridge_slave_1: entered allmulticast mode [ 82.756524][ T5610] bridge_slave_1: entered promiscuous mode [ 82.784254][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.784777][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.785006][ T5606] bridge_slave_0: entered allmulticast mode [ 82.791750][ T5606] bridge_slave_0: entered promiscuous mode [ 82.828442][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.828634][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.828798][ T5606] bridge_slave_1: entered allmulticast mode [ 82.830531][ T5606] bridge_slave_1: entered promiscuous mode [ 82.896753][ T4923] Bluetooth: hci3: command tx timeout [ 82.896885][ T4923] Bluetooth: hci2: command tx timeout [ 82.900912][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.953701][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.975196][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.030654][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.030987][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.031204][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.031517][ T5614] bridge_slave_0: entered allmulticast mode [ 83.033219][ T5614] bridge_slave_0: entered promiscuous mode [ 83.083403][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.083733][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.083971][ T5615] bridge_slave_0: entered allmulticast mode [ 83.085796][ T5615] bridge_slave_0: entered promiscuous mode [ 83.114552][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.114830][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.114989][ T5614] bridge_slave_1: entered allmulticast mode [ 83.117600][ T5614] bridge_slave_1: entered promiscuous mode [ 83.129055][ T5610] team0: Port device team_slave_0 added [ 83.130383][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.130655][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.131221][ T5615] bridge_slave_1: entered allmulticast mode [ 83.141212][ T5615] bridge_slave_1: entered promiscuous mode [ 83.190595][ T5610] team0: Port device team_slave_1 added [ 83.208876][ T5606] team0: Port device team_slave_0 added [ 83.259080][ T5606] team0: Port device team_slave_1 added [ 83.263368][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.514610][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.535733][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.538574][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.538590][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.538607][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.552018][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.602654][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.602668][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.602693][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.631922][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.631938][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.631961][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.704670][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.704686][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.704718][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.715458][ T5614] team0: Port device team_slave_0 added [ 83.728651][ T5615] team0: Port device team_slave_0 added [ 83.750395][ T5614] team0: Port device team_slave_1 added [ 83.757223][ T5615] team0: Port device team_slave_1 added [ 83.867656][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.867668][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.867681][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.875753][ T5610] hsr_slave_0: entered promiscuous mode [ 83.877577][ T5610] hsr_slave_1: entered promiscuous mode [ 83.888300][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.888314][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.888337][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.915600][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.915617][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.915641][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.923229][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.923245][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.923268][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.935813][ T5606] hsr_slave_0: entered promiscuous mode [ 83.953194][ T5606] hsr_slave_1: entered promiscuous mode [ 83.956832][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 83.956939][ T5606] Cannot create hsr debugfs directory [ 84.186163][ T5614] hsr_slave_0: entered promiscuous mode [ 84.188131][ T5614] hsr_slave_1: entered promiscuous mode [ 84.189722][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.189744][ T5614] Cannot create hsr debugfs directory [ 84.221576][ T5615] hsr_slave_0: entered promiscuous mode [ 84.222679][ T5615] hsr_slave_1: entered promiscuous mode [ 84.223597][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 84.223618][ T5615] Cannot create hsr debugfs directory [ 84.656791][ T5622] Bluetooth: hci0: command tx timeout [ 84.736765][ T5622] Bluetooth: hci1: command tx timeout [ 84.980384][ T5622] Bluetooth: hci2: command tx timeout [ 84.980416][ T5622] Bluetooth: hci3: command tx timeout [ 85.205638][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.261611][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.275363][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.317703][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.324978][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.351513][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.372584][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.401130][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.501818][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.545861][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.568856][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.593589][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.604633][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.633264][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.654071][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.683509][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.805660][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.842057][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.859598][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.903404][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.917606][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.952081][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.973835][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.014184][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.160436][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.192349][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.199706][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.232667][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.242154][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.287527][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.305964][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.333762][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.422943][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.525151][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.549288][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.574234][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.574411][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.639663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.639755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.694417][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.725006][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.737386][ T4923] Bluetooth: hci0: command tx timeout [ 86.751871][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.751965][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.796314][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.796407][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.817761][ T4923] Bluetooth: hci1: command tx timeout [ 86.883127][ T9] cfg80211: failed to load regulatory.db [ 86.951740][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.004962][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.005089][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.040255][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.056866][ T5622] Bluetooth: hci2: command tx timeout [ 87.056946][ T4923] Bluetooth: hci3: command tx timeout [ 87.061958][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.062086][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.208229][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.272600][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.272830][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.330069][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.330268][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.174567][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.628386][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.661257][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.663678][ T5610] veth0_vlan: entered promiscuous mode [ 88.735484][ T5610] veth1_vlan: entered promiscuous mode [ 88.817435][ T4923] Bluetooth: hci0: command tx timeout [ 88.836250][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.896864][ T4923] Bluetooth: hci1: command tx timeout [ 88.944781][ T5614] veth0_vlan: entered promiscuous mode [ 88.955520][ T5615] veth0_vlan: entered promiscuous mode [ 88.965271][ T5610] veth0_macvtap: entered promiscuous mode [ 88.993903][ T5610] veth1_macvtap: entered promiscuous mode [ 89.009506][ T5614] veth1_vlan: entered promiscuous mode [ 89.029657][ T5615] veth1_vlan: entered promiscuous mode [ 89.136850][ T5622] Bluetooth: hci2: command tx timeout [ 89.136904][ T4923] Bluetooth: hci3: command tx timeout [ 89.141742][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.172700][ T5606] veth0_vlan: entered promiscuous mode [ 89.184710][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.228061][ T1462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.248151][ T1462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.252075][ T5606] veth1_vlan: entered promiscuous mode [ 89.280225][ T1462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.283581][ T5614] veth0_macvtap: entered promiscuous mode [ 89.285944][ T1462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.291445][ T5615] veth0_macvtap: entered promiscuous mode [ 89.393080][ T5615] veth1_macvtap: entered promiscuous mode [ 89.401944][ T5614] veth1_macvtap: entered promiscuous mode [ 89.683798][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.701634][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.751614][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.752580][ T5606] veth0_macvtap: entered promiscuous mode [ 89.767760][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.831302][ T5606] veth1_macvtap: entered promiscuous mode [ 89.841626][ T1054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.857450][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.862840][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.862862][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.870846][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884821][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999365][ T1054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008324][ T1054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.033089][ T1054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.080921][ T1054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184510][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.300417][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.300434][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.441419][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.586237][ T1462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623551][ T1462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630599][ T1054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.636934][ T1054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.850600][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.850619][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.998711][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.998729][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.215795][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.215814][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.488974][ T3815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.488992][ T3815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.565172][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.565191][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.741683][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.741702][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.461094][ T5715] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.517890][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.697613][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 92.724870][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.741977][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.742023][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.742042][ T9] usb 4-1: Product: syz [ 92.742056][ T9] usb 4-1: Manufacturer: syz [ 92.742070][ T9] usb 4-1: SerialNumber: syz [ 92.769003][ T5715] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 92.769032][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.769051][ T5715] usb 3-1: Product: syz [ 92.769064][ T5715] usb 3-1: Manufacturer: syz [ 92.769077][ T5715] usb 3-1: SerialNumber: syz [ 93.123245][ T9] usb 4-1: config 0 descriptor?? [ 93.217477][ T5762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.281261][ T5767] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.366454][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.366491][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 93.884802][ T5715] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 94.045932][ T9] usb 4-1: USB disconnect, device number 2 [ 94.322005][ T5782] pimreg13: entered allmulticast mode [ 94.565600][ T5786] overlayfs: missing 'lowerdir' [ 94.847063][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.996758][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 95.000122][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.041017][ T9] usb 4-1: string descriptor 0 read error: -22 [ 95.041143][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.041167][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.077834][ T9] usb 4-1: config 0 descriptor?? [ 95.086265][ T5762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.110479][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 95.110512][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 95.354699][ T5763] usb 4-1: USB disconnect, device number 3 [ 95.403970][ T5797] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.713772][ T5803] overlayfs: missing 'lowerdir' [ 95.744010][ T1008] usb 3-1: USB disconnect, device number 2 [ 95.751285][ T5805] binder: BINDER_SET_CONTEXT_MGR already set [ 95.751300][ T5805] binder: 5804:5805 ioctl 4018620d 200000000040 returned -16 [ 95.832355][ T1008] usblp1: removed [ 95.963366][ T5807] overlayfs: missing 'lowerdir' [ 96.822913][ T5831] binder: BINDER_SET_CONTEXT_MGR already set [ 96.822928][ T5831] binder: 5830:5831 ioctl 4018620d 200000000040 returned -16 [ 96.869783][ T5829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.144584][ T5836] overlayfs: missing 'lowerdir' [ 97.726778][ T5005] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 97.927951][ T5005] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 97.927980][ T5005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.928000][ T5005] usb 4-1: Product: syz [ 97.928014][ T5005] usb 4-1: Manufacturer: syz [ 97.928027][ T5005] usb 4-1: SerialNumber: syz [ 97.928470][ T5856] overlayfs: missing 'workdir' [ 97.957454][ T5857] binder: BINDER_SET_CONTEXT_MGR already set [ 97.957468][ T5857] binder: 5855:5857 ioctl 4018620d 200000000040 returned -16 [ 98.226073][ T5861] overlayfs: missing 'lowerdir' [ 98.431979][ T5005] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 98.675369][ T5873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.48'. [ 98.891592][ T5881] overlayfs: missing 'workdir' [ 99.013436][ T5879] pimreg13: entered allmulticast mode [ 99.076065][ T5886] overlayfs: missing 'lowerdir' [ 99.238644][ T5888] binder: BINDER_SET_CONTEXT_MGR already set [ 99.238660][ T5888] binder: 5887:5888 ioctl 4018620d 200000004a80 returned -16 [ 99.674176][ T5898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.923820][ T5906] overlayfs: missing 'workdir' [ 99.941055][ T5908] overlayfs: missing 'workdir' [ 100.094803][ T5912] overlayfs: missing 'lowerdir' [ 100.380954][ C0] usblp0: nonzero write bulk status received: -71 [ 100.420560][ T5715] usb 4-1: USB disconnect, device number 4 [ 100.491622][ T5715] usblp0: removed [ 100.520989][ T5923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.719875][ T5929] overlayfs: missing 'lowerdir' [ 100.755812][ T5932] overlayfs: missing 'workdir' [ 100.886020][ T5934] overlayfs: missing 'lowerdir' [ 100.953235][ T5938] binder: BINDER_SET_CONTEXT_MGR already set [ 100.953250][ T5938] binder: 5937:5938 ioctl 4018620d 200000004a80 returned -16 [ 101.359638][ T5954] overlayfs: missing 'lowerdir' [ 101.525277][ T5958] binder: BINDER_SET_CONTEXT_MGR already set [ 101.525291][ T5958] binder: 5957:5958 ioctl 4018620d 200000000040 returned -16 [ 101.582370][ T5959] overlayfs: missing 'workdir' [ 101.623136][ T5961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.003286][ T5975] overlayfs: missing 'lowerdir' [ 102.041873][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.115679][ T5977] overlayfs: missing 'lowerdir' [ 102.206764][ T5979] binder: BINDER_SET_CONTEXT_MGR already set [ 102.206779][ T5979] binder: 5978:5979 ioctl 4018620d 200000000040 returned -16 [ 102.207587][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 102.207639][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.207660][ T9] usb 3-1: Product: syz [ 102.207672][ T9] usb 3-1: Manufacturer: syz [ 102.207685][ T9] usb 3-1: SerialNumber: syz [ 102.390013][ T5983] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.395440][ T5982] overlayfs: missing 'lowerdir' [ 102.695133][ T5989] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.727637][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 102.841805][ T5991] binder: BINDER_SET_CONTEXT_MGR already set [ 102.841821][ T5991] binder: 5990:5991 ioctl 4018620d 200000004a80 returned -16 [ 103.055360][ T5999] overlayfs: missing 'lowerdir' [ 103.230636][ T6004] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.230683][ T6004] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.365943][ T6006] binder: BINDER_SET_CONTEXT_MGR already set [ 103.365957][ T6006] binder: 6005:6006 ioctl 4018620d 200000000040 returned -16 [ 103.525335][ T6008] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.592184][ T6010] overlayfs: missing 'lowerdir' [ 103.952696][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.108'. [ 104.010222][ T6023] overlayfs: missing 'lowerdir' [ 104.251062][ T6029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.251115][ T6029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.345417][ T6032] overlayfs: missing 'workdir' [ 104.399034][ T6034] overlayfs: missing 'lowerdir' [ 104.589182][ C0] usblp0: nonzero write bulk status received: -71 [ 104.597771][ T37] usb 3-1: USB disconnect, device number 3 [ 104.698972][ T37] usblp0: removed [ 104.729193][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 104.938815][ T6046] overlayfs: missing 'lowerdir' [ 105.345719][ T6055] overlayfs: missing 'workdir' [ 105.351579][ T6054] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.351628][ T6054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.432617][ T6057] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.432676][ T6057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.668379][ T6062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.126'. [ 105.881896][ T6067] overlayfs: missing 'lowerdir' [ 106.101700][ T6081] overlayfs: missing 'workdir' [ 106.202283][ T6084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.202316][ T6084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.257143][ T5738] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 106.421893][ T5738] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 106.421924][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.421944][ T5738] usb 2-1: Product: syz [ 106.421959][ T5738] usb 2-1: Manufacturer: syz [ 106.421973][ T5738] usb 2-1: SerialNumber: syz [ 106.686791][ T5715] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.858879][ T5715] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 106.858911][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.858930][ T5715] usb 4-1: Product: syz [ 106.858944][ T5715] usb 4-1: Manufacturer: syz [ 106.859011][ T5715] usb 4-1: SerialNumber: syz [ 106.977885][ T5738] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 107.055651][ T6097] overlayfs: missing 'lowerdir' [ 107.159673][ T6099] syz.0.142 uses obsolete (PF_INET,SOCK_PACKET) [ 107.348801][ T6102] overlayfs: missing 'lowerdir' [ 107.350517][ T6104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.350568][ T6104] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.394028][ T5715] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 107.495770][ T6108] pimreg13: entered allmulticast mode [ 108.699291][ T6127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.097095][ T6133] overlayfs: missing 'lowerdir' [ 109.456260][ T5738] usb 4-1: USB disconnect, device number 5 [ 109.493072][ T5738] usblp1: removed [ 109.559667][ T5715] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.734414][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.734456][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.734477][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.734596][ T5715] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.734618][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.986991][ T5715] usb 1-1: config 0 descriptor?? [ 110.205052][ T6143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 110.215861][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.272697][ T6143] vhci_hcd vhci_hcd.0: Device attached [ 111.819655][ T6148] vhci_hcd: connection closed [ 111.856539][ T1462] vhci_hcd vhci_hcd.2: stop threads [ 111.857717][ T1462] vhci_hcd vhci_hcd.2: release socket [ 111.857802][ T1462] vhci_hcd vhci_hcd.2: disconnect device [ 112.017592][ T5738] usb 2-1: USB disconnect, device number 2 [ 112.175386][ T5738] usblp0: removed [ 112.259426][ T5715] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.549215][ T5715] usb 1-1: USB disconnect, device number 2 [ 114.127937][ T6160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.507069][ T6168] overlayfs: missing 'lowerdir' [ 115.269863][ T6151] syz.2.158 (6151) used greatest stack depth: 18936 bytes left [ 115.416822][ T5738] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 115.428973][ T6185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.571791][ T5738] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 115.571821][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.571839][ T5738] usb 1-1: Product: syz [ 115.571853][ T5738] usb 1-1: Manufacturer: syz [ 115.571866][ T5738] usb 1-1: SerialNumber: syz [ 115.887984][ T6198] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.888037][ T6198] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.063699][ T5738] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 116.114880][ T6208] overlayfs: missing 'workdir' [ 117.437164][ T6232] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.437300][ T6232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.617738][ T6236] overlayfs: missing 'workdir' [ 118.221126][ T6249] binder: 6248:6249 ioctl 4018620d 0 returned -22 [ 119.280531][ T5005] usb 1-1: USB disconnect, device number 3 [ 119.329371][ T6257] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.329424][ T6257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.332309][ T5005] usblp0: removed [ 119.382552][ T6260] overlayfs: missing 'workdir' [ 119.816900][ T5738] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 119.877761][ T6277] binder: 6276:6277 ioctl 4018620d 0 returned -22 [ 119.972270][ T5738] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 119.972306][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.972325][ T5738] usb 2-1: Product: syz [ 119.972337][ T5738] usb 2-1: Manufacturer: syz [ 119.972350][ T5738] usb 2-1: SerialNumber: syz [ 120.177092][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 120.362703][ T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 120.362733][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.362752][ T9] usb 4-1: Product: syz [ 120.362767][ T9] usb 4-1: Manufacturer: syz [ 120.362780][ T9] usb 4-1: SerialNumber: syz [ 120.435696][ T5738] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 120.578766][ T6281] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.768558][ T6284] process 'syz.0.210' launched './file0' with NULL argv: empty string added [ 120.833082][ T9] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 120.910052][ T6290] overlayfs: missing 'lowerdir' [ 120.953723][ T6291] pimreg: entered allmulticast mode [ 121.034313][ T6293] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.457850][ T6300] binder: 6299:6300 ioctl 4018620d 0 returned -22 [ 121.511412][ T38] audit: type=1800 audit(1782048340.134:2): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.210" name="/" dev="fuse" ino=4 res=0 errno=0 [ 122.605869][ T6308] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.670704][ T38] audit: type=1326 audit(1782048341.294:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.0.220" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f008121ce59 code=0x0 [ 122.794780][ T6313] overlayfs: missing 'lowerdir' [ 122.963902][ T1008] usb 4-1: USB disconnect, device number 6 [ 122.974425][ T1008] usblp1: removed [ 123.098754][ T6317] overlayfs: missing 'lowerdir' [ 123.457817][ T5005] usb 2-1: USB disconnect, device number 3 [ 123.471366][ T6323] binder: BINDER_SET_CONTEXT_MGR already set [ 123.471381][ T6323] binder: 6322:6323 ioctl 4018620d 200000000040 returned -16 [ 123.522067][ T5005] usblp0: removed [ 123.672953][ T6331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.970308][ T6338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.970361][ T6338] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.491913][ T6349] binder: BINDER_SET_CONTEXT_MGR already set [ 124.491928][ T6349] binder: 6347:6349 ioctl 4018620d 200000000040 returned -16 [ 124.695836][ T6357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.724342][ T6359] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 124.724395][ T6359] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.766827][ T1008] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 124.934010][ T1008] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 124.934039][ T1008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.934059][ T1008] usb 3-1: Product: syz [ 124.934073][ T1008] usb 3-1: Manufacturer: syz [ 124.934087][ T1008] usb 3-1: SerialNumber: syz [ 125.181922][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 125.181937][ T6376] binder: 6375:6376 ioctl 4018620d 200000000040 returned -16 [ 125.309799][ T6380] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.417696][ T1008] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 125.490401][ T6382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.490453][ T6382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.925039][ T6387] pimreg: entered allmulticast mode [ 126.373201][ T6402] binder: 6401:6402 ioctl c0306201 0 returned -14 [ 126.694470][ T6406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.726974][ T32] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 126.804193][ T6408] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.903550][ T32] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 126.903580][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.903600][ T32] usb 2-1: Product: syz [ 126.903613][ T32] usb 2-1: Manufacturer: syz [ 126.903626][ T32] usb 2-1: SerialNumber: syz [ 126.931019][ T6410] binder: 6409:6410 ioctl 4018620d 0 returned -22 [ 127.401250][ T32] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 128.046303][ T6423] binder: 6422:6423 ioctl c0306201 0 returned -14 [ 128.359968][ T32] usb 3-1: USB disconnect, device number 4 [ 128.360803][ T6431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.389919][ T32] usblp0: removed [ 128.566171][ T6438] binder: 6437:6438 ioctl 4018620d 0 returned -22 [ 128.608005][ T6440] comedi comedi0: aio_aio12_8: I/O base address not correctly aligned [ 128.723032][ T6445] binder: 6444:6445 ioctl c0306201 0 returned -14 [ 128.931870][ T6451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.448936][ T32] usb 2-1: USB disconnect, device number 4 [ 129.482929][ T32] usblp1: removed [ 129.662527][ T6460] comedi comedi0: aio_aio12_8: I/O base address not correctly aligned [ 129.876449][ T6461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 129.876465][ T6461] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 129.876485][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.876497][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.876503][ T6461] RIP: 0010:__schedule+0x4030/0x5550 [ 129.876520][ T6461] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 129.876528][ T6461] RSP: 0000:ffffc900069cf6c0 EFLAGS: 00010003 [ 129.876545][ T6461] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 129.876552][ T6461] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 129.876560][ T6461] RBP: ffffc900069cf8b8 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 129.876572][ T6461] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 129.876584][ T6461] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 129.876594][ T6461] FS: 000055556f491500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 129.876606][ T6461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.876616][ T6461] CR2: 00007f008148f2f8 CR3: 00000000385ba000 CR4: 00000000003526f0 [ 129.876635][ T6461] Call Trace: [ 129.876644][ T6461] [ 129.876658][ T6461] ? __pfx___schedule+0x10/0x10 [ 129.876674][ T6461] ? irqentry_exit+0x218/0x8c0 [ 129.876694][ T6461] ? preempt_schedule_thunk+0x16/0x40 [ 129.876716][ T6461] preempt_schedule_common+0x82/0xd0 [ 129.876732][ T6461] preempt_schedule_thunk+0x16/0x40 [ 129.876754][ T6461] rt_spin_lock+0x316/0x400 [ 129.876768][ T6461] ? __pfx_rt_spin_lock+0x10/0x10 [ 129.876779][ T6461] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 129.876800][ T6461] __folio_batch_add_and_move+0x283/0xa90 [ 129.876817][ T6461] ? __pfx_lru_add+0x10/0x10 [ 129.876832][ T6461] folio_add_lru_vma+0x196/0x210 [ 129.876848][ T6461] ? __pfx_folio_add_lru_vma+0x10/0x10 [ 129.876867][ T6461] do_wp_page+0x2443/0x3d90 [ 129.876888][ T6461] ? rt_spin_lock+0x1e0/0x400 [ 129.876900][ T6461] ? do_wp_page+0x1823/0x3d90 [ 129.876923][ T6461] ? preempt_count_add+0x91/0x190 [ 129.876942][ T6461] ? __pfx_do_wp_page+0x10/0x10 [ 129.876961][ T6461] ? rt_spin_lock+0x2ce/0x400 [ 129.876974][ T6461] ? __pfx_rt_spin_lock+0x10/0x10 [ 129.876987][ T6461] ? pte_offset_map_rw_nolock+0xea/0x160 [ 129.877008][ T6461] handle_mm_fault+0xafb/0x14d0 [ 129.877022][ T6461] ? handle_mm_fault+0xed/0x14d0 [ 129.877036][ T6461] ? __pfx_handle_mm_fault+0x10/0x10 [ 129.877047][ T6461] ? lock_vma_under_rcu+0x45a/0x500 [ 129.877068][ T6461] do_user_addr_fault+0xa73/0x1340 [ 129.877087][ T6461] ? rcu_is_watching+0x15/0xb0 [ 129.877107][ T6461] ? trace_page_fault_user+0x84/0x1e0 [ 129.877124][ T6461] exc_page_fault+0x6a/0xc0 [ 129.877140][ T6461] asm_exc_page_fault+0x26/0x30 [ 129.877153][ T6461] RIP: 0033:0x7f00810d07fc [ 129.877168][ T6461] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 129.877179][ T6461] RSP: 002b:00007fff7b9d0968 EFLAGS: 00010246 [ 129.877191][ T6461] RAX: 0000000000000000 RBX: ffffffff81c13a5f RCX: 0000000000000000 [ 129.877200][ T6461] RDX: 0000000000001a5f RSI: ffffffff81c13a5f RDI: 0000000000000000 [ 129.877209][ T6461] RBP: 0000000000000000 R08: 00007f0081480000 R09: 00007f0081482000 [ 129.877218][ T6461] R10: 0000000081c13a63 R11: 0000000000000000 R12: 00007f0081496038 [ 129.877227][ T6461] R13: 0000000000000034 R14: ffffffff81c13a5f R15: 00007f0081fc5720 [ 129.877237][ T6461] ? make_kgid+0x6f/0x6a0 [ 129.877252][ T6461] ? make_kgid+0x6f/0x6a0 [ 129.877266][ T6461] ? make_kgid+0x6f/0x6a0 [ 129.877281][ T6461] [ 129.877286][ T6461] Modules linked in: [ 129.877299][ T6461] ---[ end trace 0000000000000000 ]--- [ 129.877311][ T6461] RIP: 0010:__schedule+0x4030/0x5550 [ 129.877331][ T6461] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 129.877341][ T6461] RSP: 0000:ffffc900069cf6c0 EFLAGS: 00010003 [ 129.877352][ T6461] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 129.877366][ T6461] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 129.877377][ T6461] RBP: ffffc900069cf8b8 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 129.877390][ T6461] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 129.877401][ T6461] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 129.877407][ T6461] FS: 000055556f491500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 129.877416][ T6461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.877422][ T6461] CR2: 00007f008148f2f8 CR3: 00000000385ba000 CR4: 00000000003526f0 [ 129.877433][ T6461] Kernel panic - not syncing: Fatal exception [ 130.979344][ T6461] Shutting down cpus with NMI [ 130.979692][ T6461] Kernel Offset: disabled