last executing test programs: 5.965812896s ago: executing program 3 (id=24): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x1, 0x4, 0x3, 0x1ff, 0x4d, 0xfffffff2, 0x62, 0x8, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x3, 0x7, 0x3, 0x6, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0xf2a, 0x1000003, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0x7, 0x0, 0x71, 0x7, 0x7, 0x2103, 0x0, 0x5, 0x3d, 0x8f, 0x2, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x400, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8f75, 0x1000e, 0x12b, 0x8000, 0x2, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x16c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x9, 0x4, 0x80, 0x9, 0x400, 0x1, 0x6, 0x400000, 0xff, 0x1005, 0x7ff, 0x2423, 0x4, 0xfffdffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xffffffff, 0x3, 0x8000, 0x10001, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x80000006, 0x9, 0x48c93690, 0x2, 0x20ff], [0x6, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x101, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x3, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x9, 0xa6, 0x8, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12db, 0xbf, 0x5, 0x3, 0xd, 0xfffffff8, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x6, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x80001ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x3d8, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffbfffff, 0x80000003, 0x6, 0x8, 0xff, 0x3, 0x3, 0xfffe, 0x3, 0x8, 0x100, 0xca1c, 0xa, 0x5, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x5, 0xa1f, 0x8, 0x9, 0x1, 0x3, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 5.850475079s ago: executing program 3 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.387427231s ago: executing program 3 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x188) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x15, 0x4, 0x5, 0xffff32eb, 0x2, 0x5, 0x2d7b, 0x3ff, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd0, 0x80000002], 0x2, 0x4000003}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.384113551s ago: executing program 4 (id=32): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000080)=[r1, r1], &(0x7f0000000280)=[0x5ea4c147], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000180)={r1, r1, 0x7ff, 0x5, 0x2}) 4.688384937s ago: executing program 4 (id=35): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.349942325s ago: executing program 3 (id=37): mount(0x0, &(0x7f0000000140)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 4.301347066s ago: executing program 1 (id=38): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000d7", 0x35) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) close(0x4) 4.17075774s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 3.782666159s ago: executing program 0 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.653482372s ago: executing program 4 (id=43): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3.510501406s ago: executing program 1 (id=45): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000500640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 3.510061496s ago: executing program 3 (id=46): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) r5 = syz_usb_connect$uac3(0x5, 0x9c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x0, 0x0, 0x6, [{0x8d, &(0x7f0000000380)=@string={0x8d, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c"}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xb, &(0x7f00000005c0)=@string={0xb, 0x3, "5a1c41342fec266888"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_disconnect(r5) write(r4, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 3.169742304s ago: executing program 1 (id=47): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0xfc4, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0xd8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xb4, 0x2, [@m_ct={0xb0, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x85, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe88, 0x2, [@TCA_CGROUP_ACT={0xe84, 0x1, [@m_pedit={0xe80, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0x4, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x4, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0x1, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x6, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xfc4}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)="3132f52c", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 3.119533785s ago: executing program 0 (id=48): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'ni_daq_700\x00', [0x140, 0x2, 0x1004, 0x5, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0x7, 0x4, 0x10, 0xf4, 0x40008, 0x48e, 0x9e9d, 0x101, 0x401, 0x100009, 0x8, 0x4, 0x8, 0xa, 0x3ff, 0x1, 0x2, 0xaf, 0x0, 0x10001fc, 0x4, 0x4]}) 2.752411204s ago: executing program 2 (id=50): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r4], 0x44}}, 0x804) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.157767148s ago: executing program 1 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2.130400739s ago: executing program 0 (id=52): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 1.806480017s ago: executing program 4 (id=53): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @mcast1, 0x800}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d1fdbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 1.805874357s ago: executing program 2 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed008276000000", 0x22}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 1.66262371s ago: executing program 4 (id=55): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000d7", 0x35) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) close(0x4) 1.580901952s ago: executing program 4 (id=56): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x1, 0x71, 0x4, 0x0}) 1.537647473s ago: executing program 2 (id=57): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f2", 0x4}], 0x1}}], 0x1, 0xc044) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x64, r5, 0x1, 0x70bd23, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040805}, 0x40004) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r5, 0x301, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007111770000000000851000000200000085000000c400000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) 1.351554518s ago: executing program 2 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0xffffffff, 0x21f9, 0x86a9, 0x4, 0x9, 0x9, 0x9e}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.328841138s ago: executing program 0 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}], 0x2}, 0x24004015) 1.237725951s ago: executing program 1 (id=60): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 1.067162215s ago: executing program 1 (id=61): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340)={0x3, 0x1}, 0x2) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000100)="13c6", 0x2}], 0x1) 1.040235695s ago: executing program 2 (id=62): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0xfc4, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0xd8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xb4, 0x2, [@m_ct={0xb0, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x85, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe88, 0x2, [@TCA_CGROUP_ACT={0xe84, 0x1, [@m_pedit={0xe80, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0x4, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x4, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0x1, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x6, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xfc4}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)="3132f52c", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 986.326637ms ago: executing program 0 (id=63): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) 278.081544ms ago: executing program 0 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1, @multicast}, 0x0, {0x2, 0x4e20, @empty}, 'lo\x00'}) write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df70067", 0x33) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f0000000080)='./dev/ttyUSB0\x00') chdir(&(0x7f0000000040)='./file0\x00') getresgid(&(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000002e80)={0x8, 0x9, {}, {0xee01}, 0x7fffffffffffffff, 0x3}) fstat(r2, &(0x7f0000002ec0)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000030c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) statx(r2, &(0x7f00000001c0)='./file2\x00', 0x0, 0x8, &(0x7f0000000440)) 0s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_mempolicy(0x4003, &(0x7f00000000c0)=0x4, 0x9) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x932, &(0x7f0000000300)="000000000000000000000000000000000a00000000040000020000000200") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 60.066804][ T4173] cgroup: Unknown subsys name 'net' [ 60.190797][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.667132][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.675892][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.795010][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 63.815058][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 63.844466][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.852390][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.860358][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.874250][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.881378][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.889354][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.903139][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.985771][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.994981][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.020073][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.033568][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.041506][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.049834][ T4195] device bridge_slave_0 entered promiscuous mode [ 64.081289][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.088521][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.096929][ T4195] device bridge_slave_1 entered promiscuous mode [ 64.132103][ T4187] team0: Port device team_slave_0 added [ 64.147236][ T4187] team0: Port device team_slave_1 added [ 64.165378][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.177982][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.185050][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.193245][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.220244][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.228361][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.254427][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.267819][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.286146][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.293270][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.301085][ T4196] device bridge_slave_1 entered promiscuous mode [ 64.308178][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.315236][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.324213][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.331992][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.339127][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.365157][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.399079][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.406311][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.414001][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.421928][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.429221][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.437564][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.473787][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.483000][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.490984][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.498765][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.508342][ T4195] team0: Port device team_slave_0 added [ 64.529116][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.539962][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.550359][ T4195] team0: Port device team_slave_1 added [ 64.558353][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.574023][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.603472][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.636919][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.643662][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.658323][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.665295][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.691401][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.703949][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.711003][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.736915][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.761372][ T4186] team0: Port device team_slave_0 added [ 64.778997][ T4193] team0: Port device team_slave_0 added [ 64.792716][ T4186] team0: Port device team_slave_1 added [ 64.813968][ T4196] team0: Port device team_slave_0 added [ 64.828711][ T4193] team0: Port device team_slave_1 added [ 64.847779][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.854747][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.881109][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.893901][ T4196] team0: Port device team_slave_1 added [ 64.911364][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.918228][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.924639][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.932481][ T4195] Cannot create hsr debugfs directory [ 64.942591][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.949763][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.975759][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.017931][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.024909][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.051355][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.062981][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.070298][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.096305][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.114189][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.121272][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.147297][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.164150][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.171371][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.198243][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.271615][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.278714][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.285202][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.295727][ T4186] Cannot create hsr debugfs directory [ 65.328645][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.336070][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.342576][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.350331][ T4193] Cannot create hsr debugfs directory [ 65.398927][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.405965][ T4196] device hsr_slave_1 entered promiscuous mode [ 65.412476][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.416431][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 65.420449][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.428665][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 65.432284][ T4196] Cannot create hsr debugfs directory [ 65.495776][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 65.501896][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 65.686599][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.697480][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.709379][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.719375][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.762772][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.773082][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.787827][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.800317][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.872006][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.898119][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.907696][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.922236][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.973270][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.996783][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.007298][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.017389][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.038767][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.050681][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.060021][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.069009][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.112242][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.121873][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.134098][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.141687][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.150611][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.161246][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.171761][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.178847][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.186647][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.195383][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.208251][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.248327][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.255134][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.264172][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.274413][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.304829][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.314078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.323055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.332023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.341986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.350658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.359288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.367657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.375378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.383413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.399725][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.411389][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.421321][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.431072][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.440082][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.474982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.485323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.500965][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.508101][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.550200][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.585076][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.593273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.602033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.610915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.619882][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.626984][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.634730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.643705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.662849][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.675873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.684713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.694417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.703923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.711918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.720931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.729556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.763906][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.772536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.783287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.792107][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.799237][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.810210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.819184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.828674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.837352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.845749][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.852800][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.861465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.869532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.878065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.905230][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.914280][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.923062][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.933384][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.941436][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.948999][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.960816][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.980018][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.993619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.003493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.012132][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.019229][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.029074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.037952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.047911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.056742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.065012][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.072106][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.080600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.089563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.099290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.108005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.154570][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.162677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.181009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.198160][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.211571][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.224901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.234705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.270789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.282100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.292510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.317777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.330608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.344795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.353819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.363672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.383376][ T4187] device veth0_vlan entered promiscuous mode [ 67.397734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.409327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.423178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.436561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.445048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.457999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.467973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.476736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.484449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.497018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.505504][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 67.505811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.521941][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 67.526930][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.528121][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 67.535390][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.550929][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.567676][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.576726][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 67.586338][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 67.597109][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.604541][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.623657][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.633758][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.651045][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.663685][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.670844][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.679941][ T4187] device veth1_vlan entered promiscuous mode [ 67.691398][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.712770][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.724054][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.738005][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.751961][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.763247][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.770363][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.779168][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.811685][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.821009][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.831854][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.841488][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.850690][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.859779][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.868755][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.892745][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.910265][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.931408][ T4187] device veth0_macvtap entered promiscuous mode [ 67.954537][ T4193] device veth0_vlan entered promiscuous mode [ 67.963295][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.972600][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.982963][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.992391][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.001076][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.008969][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.016657][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.024825][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.033588][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.042037][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.052319][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.060945][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.069477][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.077993][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.085788][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.096236][ T4187] device veth1_macvtap entered promiscuous mode [ 68.107590][ T4195] device veth0_vlan entered promiscuous mode [ 68.120630][ T4193] device veth1_vlan entered promiscuous mode [ 68.136454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.144428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.153459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.162586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.176514][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.188329][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.199737][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.215220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.224333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.232843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.262427][ T4195] device veth1_vlan entered promiscuous mode [ 68.275654][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.290955][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.302730][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.332579][ T4193] device veth0_macvtap entered promiscuous mode [ 68.342187][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.364471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.380092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.393264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.402559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.417767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.427278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.438403][ T4193] device veth1_macvtap entered promiscuous mode [ 68.448314][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.473980][ T4195] device veth0_macvtap entered promiscuous mode [ 68.486949][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.494968][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.506350][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.514920][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.523954][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.537615][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547738][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.557039][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566146][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.593830][ T4195] device veth1_macvtap entered promiscuous mode [ 68.602156][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.610462][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.620131][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.628894][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.638258][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.646746][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.655873][ T4196] device veth0_vlan entered promiscuous mode [ 68.686740][ T4196] device veth1_vlan entered promiscuous mode [ 68.694892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.707107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.714530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.730049][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.744898][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.762642][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.775359][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.807486][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.820893][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.831106][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.846441][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.860104][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.869521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.879260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.888032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.897515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.906411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.921389][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.951162][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.969458][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.987245][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.999633][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.009624][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.027800][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.041229][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.060168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.070275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.079030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.088603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.100700][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.110004][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.119143][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.128192][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.142346][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.154393][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.171683][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.182123][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.203389][ T4196] device veth0_macvtap entered promiscuous mode [ 69.210322][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.225192][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.245379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.254149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.262948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.272515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.281659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.301137][ T4196] device veth1_macvtap entered promiscuous mode [ 69.340458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.348785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.375132][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.383358][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.393634][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.405128][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.448490][ T4186] device veth0_vlan entered promiscuous mode [ 69.455111][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.464529][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.477288][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.520439][ T4186] device veth1_vlan entered promiscuous mode [ 69.542105][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.557670][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.569299][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.580583][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.590523][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 69.590954][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.607074][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 69.607636][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.618191][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 69.625783][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.653292][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.655492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.662433][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 69.682794][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.690652][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 69.697767][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.707418][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.716780][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.738653][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.740964][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.755678][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.761051][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.767540][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.785174][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.795604][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.806252][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.818585][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.829983][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.840067][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.849437][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.858843][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.883071][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.906624][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.923724][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.933097][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.983190][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.002395][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.027068][ T4186] device veth0_macvtap entered promiscuous mode [ 70.046212][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.058791][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.066813][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.076061][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.083779][ T4186] device veth1_macvtap entered promiscuous mode [ 70.097222][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.105284][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.115860][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.123564][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.180204][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.193197][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.210946][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.224320][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.237877][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.248789][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.259469][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.270083][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.281984][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.290796][ T4270] Zero length message leads to an empty skb [ 70.330550][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.343743][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.355184][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.366641][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.378606][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.395458][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.405307][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.417680][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.430023][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.437957][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.449277][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.460561][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.469996][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.504645][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.548414][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.572261][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590843][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.610658][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.634365][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.657179][ T4276] device syzkaller0 entered promiscuous mode [ 70.691663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.712411][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.740079][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.761167][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.853687][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.931503][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.940054][ T4227] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.980973][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.031384][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.095368][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.120205][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.135994][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.315808][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.340230][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346865][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.355639][ T4259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.403483][ T4298] bonding: mM% is being created... [ 71.411496][ T4298] bonding: mM% creation failed [ 71.478957][ T4302] jffs2: notice: (4302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.525785][ T4227] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 71.544220][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.559644][ T4227] usb 4-1: Product: syz [ 71.563851][ T4227] usb 4-1: Manufacturer: syz [ 71.572312][ T4227] usb 4-1: SerialNumber: syz [ 71.592199][ T4227] usb 4-1: config 0 descriptor?? [ 71.616262][ T4277] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.650790][ T4227] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 71.660288][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.677957][ T4307] 9pnet_virtio: no channels available for device syz [ 71.680205][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 71.701146][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 71.707964][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 71.735756][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 71.742092][ T4259] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.762892][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 71.783939][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 71.801346][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 71.816325][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 71.835623][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 71.866342][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 71.887881][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 71.906719][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 71.925892][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 71.945862][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 71.957023][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 71.970353][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.982510][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.993073][ T4259] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 72.012033][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 72.026208][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.043750][ T4227] usb 4-1: USB disconnect, device number 2 [ 72.053615][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.075374][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.096016][ T1108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.105110][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.124198][ T1108] usb 5-1: config 0 descriptor?? [ 72.175767][ T4259] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 72.198481][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.209250][ T4259] usb 1-1: Product: syz [ 72.213451][ T4259] usb 1-1: Manufacturer: syz [ 72.222837][ T4259] usb 1-1: SerialNumber: syz [ 72.245879][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.253004][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.280519][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.289985][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.307848][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.314955][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.322678][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.329977][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.338483][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.347845][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.355100][ T4290] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.397424][ T4259] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 72.427181][ T4259] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 72.485208][ T4259] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 72.525237][ T4259] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 72.534610][ T4259] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 72.606286][ T4318] device syzkaller0 entered promiscuous mode [ 72.620501][ T1108] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 72.686672][ T1108] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 72.765219][ T4227] usb 1-1: USB disconnect, device number 2 [ 72.808097][ T4227] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 72.877413][ T4227] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 72.901418][ T4227] keyspan 1-1:1.0: device disconnected [ 72.977838][ T4259] usb 5-1: USB disconnect, device number 2 [ 72.995485][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 73.065311][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 73.269189][ T4330] device syzkaller0 entered promiscuous mode [ 73.338757][ T4334] device syzkaller0 entered promiscuous mode [ 74.296127][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.705658][ T1108] usb 1-1: Dual-Role OTG device on HNP port [ 74.725570][ T1108] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 74.734664][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.768138][ T4358] device syzkaller0 entered promiscuous mode [ 74.786249][ T4368] netlink: 'syz.4.35': attribute type 14 has an invalid length. [ 74.808837][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 74.847598][ T1108] gspca_main: spca501-2.14.0 probing 0000:0000 [ 74.875572][ T1108] gspca_spca501: reg write: error -32 [ 74.881001][ T1108] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 74.894385][ T1108] spca501: probe of 1-1:1.0 failed with error -22 [ 74.907253][ T4368] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.916255][ T4368] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.925014][ T4368] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.933796][ T4368] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.132319][ T4390] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.152993][ T26] audit: type=1800 audit(1787231042.857:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.41" name="idVendor" dev="configfs" ino=32481 res=0 errno=0 [ 75.209946][ T26] audit: type=1800 audit(1787231042.897:3): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.41" name="idProduct" dev="configfs" ino=32482 res=0 errno=0 [ 75.278601][ T26] audit: type=1800 audit(1787231042.897:4): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.41" name="configuration" dev="configfs" ino=32484 res=0 errno=0 [ 75.301848][ T4368] netlink: 'syz.4.35': attribute type 14 has an invalid length. [ 75.316713][ T4390] device-mapper: table: 248:0: thin-pool: Error creating metadata object [ 75.328145][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 75.343459][ T4390] device-mapper: ioctl: error adding target to table [ 75.562059][ T4393] device syzkaller0 entered promiscuous mode [ 75.657291][ T4398] device syzkaller0 entered promiscuous mode [ 75.895543][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.993419][ T4417] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 76.235617][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 76.265975][ T26] audit: type=1800 audit(1787231043.967:5): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="bmaControls" dev="configfs" ino=32538 res=0 errno=0 [ 76.436306][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.978078][ T4428] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 77.008459][ T4227] usb 4-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 77.035699][ T4432] binder: BINDER_SET_CONTEXT_MGR already set [ 77.045036][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.063674][ T4227] usb 4-1: Product: У [ 77.073791][ T4432] binder: 4427:4432 ioctl 4018620d 200000004a80 returned -16 [ 77.087771][ T4227] usb 4-1: SerialNumber: H [ 77.303428][ T4441] device syzkaller0 entered promiscuous mode [ 77.428281][ T4227] gspca_main: ov519-2.14.0 probing 041e:4064 [ 77.445658][ T4227] ov519 4-1:1.0: reg_w 5a failed -71 [ 77.561201][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 77.605700][ T4404] vhci_hcd vhci_hcd.0: remove, state 4 [ 77.613133][ T4404] usb usb34: USB disconnect, device number 1 [ 77.727898][ T150] vhci_hcd: stop threads [ 77.732238][ T150] vhci_hcd: release socket [ 77.772197][ T150] vhci_hcd: disconnect device [ 77.781288][ T4451] device syzkaller0 entered promiscuous mode [ 77.795389][ T150] vhci_hcd: stop threads [ 77.801215][ T150] vhci_hcd: release socket [ 77.815646][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.824982][ T4454] device syzkaller0 entered promiscuous mode [ 77.830394][ T150] vhci_hcd: disconnect device [ 77.845775][ T150] vhci_hcd: stop threads [ 77.851252][ T150] vhci_hcd: release socket [ 77.859112][ T150] vhci_hcd: disconnect device [ 77.874977][ T150] vhci_hcd: stop threads [ 77.882529][ T150] vhci_hcd: release socket [ 77.900333][ T150] vhci_hcd: disconnect device [ 77.915595][ T150] vhci_hcd: stop threads [ 77.920657][ T150] vhci_hcd: release socket [ 77.928181][ T150] vhci_hcd: disconnect device [ 77.937096][ T150] vhci_hcd: stop threads [ 77.941365][ T150] vhci_hcd: release socket [ 77.955502][ T150] vhci_hcd: disconnect device [ 77.960457][ T150] vhci_hcd: stop threads [ 77.964741][ T150] vhci_hcd: release socket [ 77.969323][ T150] vhci_hcd: disconnect device [ 77.978193][ T150] vhci_hcd: stop threads [ 77.982469][ T150] vhci_hcd: release socket [ 78.003648][ T150] vhci_hcd: disconnect device [ 78.017341][ T4404] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 78.044304][ T4404] vhci_hcd vhci_hcd.0: remove, state 4 [ 78.056189][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 78.076222][ T4404] usb usb33: USB disconnect, device number 1 [ 78.215466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.235461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.245454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.305499][ T26] audit: type=1800 audit(1787231046.007:6): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.62" name="bmaControls" dev="configfs" ino=32594 res=0 errno=0 [ 78.327085][ T1108] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.363666][ T1108] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.533999][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.605302][ T4424] vhci_hcd: stop threads [ 78.612212][ T1108] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.626448][ T4424] vhci_hcd: release socket [ 78.635982][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.661957][ T1108] usb 5-1: config 0 descriptor?? [ 78.675673][ T4424] vhci_hcd: disconnect device [ 78.682042][ T4424] vhci_hcd: stop threads [ 78.687070][ T4404] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 78.694029][ T4424] vhci_hcd: release socket [ 78.744834][ T4424] vhci_hcd: disconnect device [ 78.965456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.975471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.985444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.995446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.005446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.015448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.025461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.082679][ T4424] ================================================================== [ 79.090789][ T4424] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7b50 [ 79.098107][ T4424] Read of size 8 at addr ffff88802488c698 by task kworker/u4:9/4424 [ 79.106105][ T4424] [ 79.108440][ T4424] CPU: 1 PID: 4424 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 79.115998][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.126064][ T4424] Workqueue: usbip_event event_handler [ 79.131552][ T4424] Call Trace: [ 79.134840][ T4424] [ 79.137783][ T4424] dump_stack_lvl+0x188/0x250 [ 79.142484][ T4424] ? show_regs_print_info+0x20/0x20 [ 79.147706][ T4424] ? load_image+0x410/0x410 [ 79.152231][ T4424] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 79.157721][ T4424] print_address_description+0x60/0x2d0 [ 79.163286][ T4424] ? __lock_acquire+0x107/0x7b50 [ 79.168249][ T4424] kasan_report+0xdf/0x130 [ 79.172686][ T4424] ? __lock_acquire+0x107/0x7b50 [ 79.177646][ T4424] __lock_acquire+0x107/0x7b50 [ 79.182438][ T4424] ? __down_trylock_console_sem+0xf2/0x1f0 [ 79.188262][ T4424] ? verify_lock_unused+0x140/0x140 [ 79.193485][ T4424] ? vprintk_emit+0xa7/0x150 [ 79.198098][ T4424] ? release_firmware_map_entry+0x190/0x190 [ 79.204013][ T4424] ? vprintk_emit+0xa7/0x150 [ 79.208615][ T4424] ? console_trylock+0x70/0x70 [ 79.213395][ T4424] ? mark_lock+0x94/0x320 [ 79.217745][ T4424] ? preempt_schedule+0xbc/0xd0 [ 79.222615][ T4424] ? preempt_schedule_common+0xa5/0xd0 [ 79.228096][ T4424] ? preempt_schedule+0xbc/0xd0 [ 79.232967][ T4424] lock_acquire+0x19e/0x400 [ 79.237487][ T4424] ? event_handler+0x2a5/0x460 [ 79.242267][ T4424] ? __irq_work_queue_local+0x12c/0x190 [ 79.248188][ T4424] ? read_lock_is_recursive+0x10/0x10 [ 79.253587][ T4424] ? vprintk_emit+0xf9/0x150 [ 79.258200][ T4424] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 79.263684][ T4424] ? lockdep_hardirqs_off+0x70/0x100 [ 79.268993][ T4424] _raw_spin_lock_irqsave+0xb0/0x100 [ 79.274300][ T4424] ? event_handler+0x2a5/0x460 [ 79.279099][ T4424] ? _raw_spin_lock+0x40/0x40 [ 79.283794][ T4424] ? event_handler+0x181/0x460 [ 79.288577][ T4424] ? vhci_shutdown_connection+0x3d5/0x580 [ 79.294317][ T4424] event_handler+0x2a5/0x460 [ 79.298926][ T4424] process_one_work+0x867/0xff0 [ 79.303805][ T4424] ? worker_detach_from_pool+0x240/0x240 [ 79.309453][ T4424] ? lockdep_hardirqs_off+0x70/0x100 [ 79.314760][ T4424] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.319801][ T4424] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.325364][ T4424] ? wq_worker_running+0x97/0x170 [ 79.330407][ T4424] worker_thread+0xad7/0x12a0 [ 79.335109][ T4424] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 79.341021][ T4424] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.346957][ T4424] kthread+0x42e/0x520 [ 79.351066][ T4424] ? rcu_lock_release+0x20/0x20 [ 79.355948][ T4424] ? kthread_blkcg+0xd0/0xd0 [ 79.360562][ T4424] ret_from_fork+0x1f/0x30 [ 79.365010][ T4424] [ 79.368048][ T4424] [ 79.370382][ T4424] Allocated by task 1: [ 79.374453][ T4424] __kasan_kmalloc+0xaf/0xe0 [ 79.379065][ T4424] __usb_create_hcd+0x5f/0x830 [ 79.383844][ T4424] vhci_hcd_probe+0xff/0x370 [ 79.388455][ T4424] platform_probe+0x137/0x1c0 [ 79.393152][ T4424] really_probe+0x276/0xc70 [ 79.397671][ T4424] __driver_probe_device+0x1f5/0x390 [ 79.402986][ T4424] driver_probe_device+0x4f/0x420 [ 79.408028][ T4424] __device_attach_driver+0x2b0/0x500 [ 79.413415][ T4424] bus_for_each_drv+0x184/0x210 [ 79.418280][ T4424] __device_attach+0x2a7/0x480 [ 79.423057][ T4424] bus_probe_device+0xba/0x1d0 [ 79.427832][ T4424] device_add+0xbcf/0x1050 [ 79.432261][ T4424] platform_device_add+0x4bf/0x830 [ 79.437384][ T4424] vhci_hcd_init+0x3c7/0x500 [ 79.441993][ T4424] do_one_initcall+0x272/0x730 [ 79.446774][ T4424] do_initcall_level+0x13d/0x1f0 [ 79.451727][ T4424] do_initcalls+0x4b/0x90 [ 79.456075][ T4424] kernel_init_freeable+0x3d5/0x560 [ 79.461288][ T4424] kernel_init+0x19/0x1b0 [ 79.465634][ T4424] ret_from_fork+0x1f/0x30 [ 79.470065][ T4424] [ 79.472397][ T4424] Freed by task 4404: [ 79.476453][ T4424] kasan_set_track+0x4b/0x70 [ 79.481074][ T4424] kasan_set_free_info+0x1f/0x40 [ 79.486036][ T4424] ____kasan_slab_free+0xd5/0x110 [ 79.491086][ T4424] slab_free_freelist_hook+0xec/0x170 [ 79.496522][ T4424] kfree+0xef/0x2a0 [ 79.500354][ T4424] vhci_hcd_remove+0xe0/0x100 [ 79.505051][ T4424] platform_remove+0x92/0xe0 [ 79.509655][ T4424] device_release_driver_internal+0x44c/0x710 [ 79.515739][ T4424] unbind_store+0x2e2/0x300 [ 79.520260][ T4424] kernfs_fop_write_iter+0x3a8/0x500 [ 79.525562][ T4424] vfs_write+0x748/0xd70 [ 79.529821][ T4424] ksys_write+0x153/0x260 [ 79.534165][ T4424] do_syscall_64+0x4c/0xa0 [ 79.538600][ T4424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.544527][ T4424] [ 79.546867][ T4424] The buggy address belongs to the object at ffff88802488c000 [ 79.546867][ T4424] which belongs to the cache kmalloc-8k of size 8192 [ 79.560943][ T4424] The buggy address is located 1688 bytes inside of [ 79.560943][ T4424] 8192-byte region [ffff88802488c000, ffff88802488e000) [ 79.574409][ T4424] The buggy address belongs to the page: [ 79.580054][ T4424] page:ffffea0000922200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24888 [ 79.590223][ T4424] head:ffffea0000922200 order:3 compound_mapcount:0 compound_pincount:0 [ 79.598574][ T4424] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.606582][ T4424] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42280 [ 79.615185][ T4424] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 79.623801][ T4424] page dumped because: kasan: bad access detected [ 79.630220][ T4424] page_owner tracks the page as allocated [ 79.635946][ T4424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 9500064034, free_ts 0 [ 79.653847][ T4424] get_page_from_freelist+0x24f6/0x2670 [ 79.659428][ T4424] __alloc_pages+0x1ee/0x480 [ 79.664036][ T4424] alloc_page_interleave+0x24/0x1e0 [ 79.669253][ T4424] new_slab+0xc0/0x4b0 [ 79.673340][ T4424] ___slab_alloc+0x807/0xdd0 [ 79.677946][ T4424] kmem_cache_alloc_trace+0xf9/0x290 [ 79.683245][ T4424] init+0x68e/0x1170 [ 79.687153][ T4424] do_one_initcall+0x272/0x730 [ 79.691940][ T4424] do_initcall_level+0x13d/0x1f0 [ 79.696890][ T4424] do_initcalls+0x4b/0x90 [ 79.701240][ T4424] kernel_init_freeable+0x3d5/0x560 [ 79.706449][ T4424] kernel_init+0x19/0x1b0 [ 79.710791][ T4424] ret_from_fork+0x1f/0x30 [ 79.715223][ T4424] page_owner free stack trace missing [ 79.720598][ T4424] [ 79.722927][ T4424] Memory state around the buggy address: [ 79.728574][ T4424] ffff88802488c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.736647][ T4424] ffff88802488c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.744721][ T4424] >ffff88802488c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.752790][ T4424] ^ [ 79.757661][ T4424] ffff88802488c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.765740][ T4424] ffff88802488c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.773812][ T4424] ================================================================== [ 79.781880][ T4424] Disabling lock debugging due to kernel taint [ 79.788039][ T4424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.795238][ T4424] CPU: 1 PID: 4424 Comm: kworker/u4:9 Tainted: G B syzkaller #0 [ 79.804193][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.814265][ T4424] Workqueue: usbip_event event_handler [ 79.819751][ T4424] Call Trace: [ 79.823045][ T4424] [ 79.825994][ T4424] dump_stack_lvl+0x188/0x250 [ 79.830698][ T4424] ? show_regs_print_info+0x20/0x20 [ 79.835912][ T4424] ? load_image+0x410/0x410 [ 79.840449][ T4424] panic+0x2f8/0x850 [ 79.844368][ T4424] ? bpf_jit_dump+0xd0/0xd0 [ 79.848892][ T4424] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.854806][ T4424] ? _raw_spin_unlock+0x40/0x40 [ 79.859678][ T4424] ? __lock_acquire+0x107/0x7b50 [ 79.864633][ T4424] check_panic_on_warn+0x80/0xa0 [ 79.869589][ T4424] ? __lock_acquire+0x107/0x7b50 [ 79.874542][ T4424] end_report+0x6d/0xf0 [ 79.878716][ T4424] kasan_report+0x102/0x130 [ 79.883232][ T4424] ? __lock_acquire+0x107/0x7b50 [ 79.888191][ T4424] __lock_acquire+0x107/0x7b50 [ 79.892978][ T4424] ? __down_trylock_console_sem+0xf2/0x1f0 [ 79.898803][ T4424] ? verify_lock_unused+0x140/0x140 [ 79.904022][ T4424] ? vprintk_emit+0xa7/0x150 [ 79.908623][ T4424] ? release_firmware_map_entry+0x190/0x190 [ 79.914529][ T4424] ? vprintk_emit+0xa7/0x150 [ 79.919134][ T4424] ? console_trylock+0x70/0x70 [ 79.923914][ T4424] ? mark_lock+0x94/0x320 [ 79.928267][ T4424] ? preempt_schedule+0xbc/0xd0 [ 79.933135][ T4424] ? preempt_schedule_common+0xa5/0xd0 [ 79.938608][ T4424] ? preempt_schedule+0xbc/0xd0 [ 79.943481][ T4424] lock_acquire+0x19e/0x400 [ 79.948002][ T4424] ? event_handler+0x2a5/0x460 [ 79.952785][ T4424] ? __irq_work_queue_local+0x12c/0x190 [ 79.958359][ T4424] ? read_lock_is_recursive+0x10/0x10 [ 79.963749][ T4424] ? vprintk_emit+0xf9/0x150 [ 79.968357][ T4424] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 79.973834][ T4424] ? lockdep_hardirqs_off+0x70/0x100 [ 79.979136][ T4424] _raw_spin_lock_irqsave+0xb0/0x100 [ 79.984432][ T4424] ? event_handler+0x2a5/0x460 [ 79.989209][ T4424] ? _raw_spin_lock+0x40/0x40 [ 79.993901][ T4424] ? event_handler+0x181/0x460 [ 79.998695][ T4424] ? vhci_shutdown_connection+0x3d5/0x580 [ 80.004457][ T4424] event_handler+0x2a5/0x460 [ 80.009066][ T4424] process_one_work+0x867/0xff0 [ 80.013967][ T4424] ? worker_detach_from_pool+0x240/0x240 [ 80.019618][ T4424] ? lockdep_hardirqs_off+0x70/0x100 [ 80.024918][ T4424] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.029963][ T4424] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.035524][ T4424] ? wq_worker_running+0x97/0x170 [ 80.040568][ T4424] worker_thread+0xad7/0x12a0 [ 80.045267][ T4424] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 80.051174][ T4424] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.057086][ T4424] kthread+0x42e/0x520 [ 80.061173][ T4424] ? rcu_lock_release+0x20/0x20 [ 80.066036][ T4424] ? kthread_blkcg+0xd0/0xd0 [ 80.070645][ T4424] ret_from_fork+0x1f/0x30 [ 80.075093][ T4424] [ 80.078333][ T4424] Kernel Offset: disabled [ 80.082666][ T4424] Rebooting in 86400 seconds..