last executing test programs: 22.763479532s ago: executing program 3 (id=355): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000380)={0x6, 0x6, 0x7, 0x1, 0x11, "bfb6fa55874f9b21"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000080)) landlock_restrict_self(r2, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17.594080505s ago: executing program 0 (id=364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 17.47241511s ago: executing program 3 (id=366): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff], [0xffffffff, 0xffffffff, 0x10004, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xe, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1001, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}], '\x00', 0xfffffffe}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, 0x0) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x30, r0, 0x83000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) 15.98987716s ago: executing program 0 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x5, 0xe, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) 14.034769702s ago: executing program 2 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x1d6b\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x0104\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200\n', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0123456789\n', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r5, &(0x7f0000000840), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) write$hidraw(r8, &(0x7f0000000c40)="0001", 0x2) 12.643028357s ago: executing program 4 (id=371): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 12.402093038s ago: executing program 4 (id=373): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004038071317400001020301090224000101ff50090904000d010301020009217fff770122b10f09058103"], 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12.398352698s ago: executing program 2 (id=374): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) 9.760538352s ago: executing program 3 (id=376): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r0, &(0x7f00000001c0)='W', 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x1c, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f0000000480)={0x3, 0x0, 0x0, 0xcccccccc}) sendfile(r0, r0, &(0x7f0000000040), 0xdafb) 9.648673698s ago: executing program 2 (id=377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 8.069206292s ago: executing program 2 (id=379): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "b156"}, 0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 6.730833495s ago: executing program 0 (id=380): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 6.178522571s ago: executing program 4 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffff0000}}], 0x18}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='FFFFFFFF FFFFFFFF FFFFFFFF F', 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4, @remote}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0xf04, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$PIO_CMAP(r6, 0x4b71, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x28, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r11 = dup(r1) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c0026060004dbb8a13d6d2183499c3a0a9070ec124555", 0x2c}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d0981edf3b6733fc75059ac8f1efa749c1a09c8050338ec5da4b6e0d0684d26c7121", 0x34}], 0x2) 4.90171107s ago: executing program 1 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 4.382785865s ago: executing program 3 (id=384): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 4.382460065s ago: executing program 1 (id=385): add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 4.110137077s ago: executing program 1 (id=386): socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='rxrpc\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe) r5 = socket(0x2d, 0x2, 0x0) connect$netlink(r5, &(0x7f0000000140)=@unspec={0x2d}, 0xc) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="10f00000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf25100000000c0099000f0000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040084}, 0x4004004) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00') 4.06219063s ago: executing program 4 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2.914745084s ago: executing program 4 (id=388): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) 2.914291213s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x400000000a0a01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.711626003s ago: executing program 3 (id=390): fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xc6c, 0x0, 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x18, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r7, 0xffffffffffffffff, 0x0) 1.967415748s ago: executing program 1 (id=391): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x4000000) 1.874249913s ago: executing program 0 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0) 430.38092ms ago: executing program 0 (id=393): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000140), 0xc, &(0x7f0000000c00)={&(0x7f00000002c0)={0x5c0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1f8, 0x111, 0x0, 0x1, {0x1f4, 0x5, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x56}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2a8, 0x111, 0x0, 0x1, {0x2a4, 0x5, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x400}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x218, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6c8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x61}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xab6}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7ff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7fffffff}, @NL80211_ATTR_PEER_MEASUREMENTS={0xe8, 0x111, 0x0, 0x1, {0xe4, 0x5, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c000) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x8001, 0x18}, 0x50) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x11, 0xffffffff80000002) syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca22, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x901, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 430.09363ms ago: executing program 1 (id=394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002ac0)={@void, @val={0x2, 0x83, 0x8, 0x10, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local}}}}}, 0x62) 387.600522ms ago: executing program 2 (id=395): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], 0x0, 0x0, 0x2, 0x1}}, 0x40) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r2, 0x0) 288.320257ms ago: executing program 3 (id=396): add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 86.921056ms ago: executing program 0 (id=397): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setitimer(0x1, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 28.513189ms ago: executing program 2 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) 0s ago: executing program 4 (id=399): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r7, 0x0, 0x0, 0x1000f4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x10000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 73.758003][ T4262] cgroup: Unknown subsys name 'net' [ 73.892123][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.433724][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.484963][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.492473][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.501442][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.509499][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.517312][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.525102][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.531371][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.534490][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.540489][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.547211][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.554645][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.560880][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.574981][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.575131][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.583191][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.591045][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.597394][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.604139][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.611082][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.617540][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.631623][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.632103][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.639415][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.646662][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.653109][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.660255][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.667178][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.674629][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.729371][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.737549][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.072693][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 78.213692][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 78.272916][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.326918][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.344276][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.353497][ T4285] device bridge_slave_0 entered promiscuous mode [ 78.381621][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.390649][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.399272][ T4285] device bridge_slave_1 entered promiscuous mode [ 78.448416][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 78.462896][ T4290] chnl_net:caif_netlink_parms(): no params data found [ 78.474644][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.481776][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.490113][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.501732][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.509474][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.517736][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.531536][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.585868][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.595186][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.602362][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.614113][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.657873][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.665068][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.672860][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.682035][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.695094][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.732512][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.763052][ T4285] team0: Port device team_slave_0 added [ 78.770553][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.803751][ T4285] team0: Port device team_slave_1 added [ 78.818423][ T4277] team0: Port device team_slave_0 added [ 78.830359][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.840803][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.848718][ T4290] device bridge_slave_0 entered promiscuous mode [ 78.869450][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.876725][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.885403][ T4290] device bridge_slave_1 entered promiscuous mode [ 78.893791][ T4277] team0: Port device team_slave_1 added [ 78.899900][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.910156][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.918266][ T4278] device bridge_slave_0 entered promiscuous mode [ 78.937225][ T4275] team0: Port device team_slave_0 added [ 78.943739][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.951421][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.977539][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.001533][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.011373][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.019925][ T4278] device bridge_slave_1 entered promiscuous mode [ 79.036043][ T4275] team0: Port device team_slave_1 added [ 79.042336][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.055673][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.082069][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.113486][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.120540][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.146742][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.180185][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.193376][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.207902][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.217346][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.243573][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.267057][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.274530][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.300648][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.329954][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.357429][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.364625][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.391375][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.421021][ T4285] device hsr_slave_0 entered promiscuous mode [ 79.427912][ T4285] device hsr_slave_1 entered promiscuous mode [ 79.439839][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.460652][ T4290] team0: Port device team_slave_0 added [ 79.469216][ T4290] team0: Port device team_slave_1 added [ 79.487015][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.493799][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.500479][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.508898][ T4277] Cannot create hsr debugfs directory [ 79.552610][ T4278] team0: Port device team_slave_0 added [ 79.593225][ T4278] team0: Port device team_slave_1 added [ 79.599560][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.606954][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.633341][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.655667][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.662567][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.669504][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.677390][ T4275] Cannot create hsr debugfs directory [ 79.708711][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.718811][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.748041][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.755360][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 79.758668][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 79.802479][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.809686][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.835851][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 79.838825][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.842049][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 79.856143][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 79.891896][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.899151][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.925778][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.982412][ T4290] device hsr_slave_0 entered promiscuous mode [ 79.989517][ T4290] device hsr_slave_1 entered promiscuous mode [ 79.996239][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.003852][ T4290] Cannot create hsr debugfs directory [ 80.056543][ T4278] device hsr_slave_0 entered promiscuous mode [ 80.063385][ T4278] device hsr_slave_1 entered promiscuous mode [ 80.071743][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.079447][ T4278] Cannot create hsr debugfs directory [ 80.331968][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.343420][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.354299][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.372739][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.429290][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.439511][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.450676][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.473333][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.508780][ T4290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.535000][ T4290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.555242][ T4290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.583496][ T4290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.657651][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.684504][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.707266][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.722484][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.747588][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.767566][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.777039][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.786881][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.796458][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.812603][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.831452][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.852049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.862385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.891452][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.900557][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.908876][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.918266][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.928170][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.935527][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.945562][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.958609][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.993636][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.003932][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.012961][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.020278][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.047773][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.059000][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.068942][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.078822][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.086087][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.101744][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.111959][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.123781][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.132442][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.139607][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.147814][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.197083][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.206520][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.217695][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.228525][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.238361][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.248292][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.257145][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.273212][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.314696][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.328106][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.337891][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.348039][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.356926][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.365925][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.374602][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.383126][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.391980][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.400870][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.416706][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.441069][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.452844][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.463100][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.480956][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.496277][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.523123][ T4290] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.564879][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.572886][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.605407][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.613481][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.647827][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.675085][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.682153][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.695016][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.708310][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.715533][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.724018][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.739376][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.749111][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.757529][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.768382][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.781072][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.819383][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.827925][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 81.834142][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 81.841706][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.852182][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.859395][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.868191][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.877464][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.885996][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.902840][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.909789][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 81.910259][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 81.915902][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 81.931308][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.964870][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.987736][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.997336][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.004702][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.012561][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.023134][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.032630][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.067358][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.077558][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.086892][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.098357][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.108749][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.125345][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.140441][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.151598][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.166267][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.175992][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.184941][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.193560][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.202889][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.210045][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.218872][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.227289][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.248387][ T4290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.261392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.271257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.280325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.288969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.303456][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.324350][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.356673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.369348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.379045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.390608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.400273][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.407573][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.416083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.425384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.434171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.441911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.458249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.469545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.485393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.509293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.531386][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.553073][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.572065][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.587288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.605248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.612878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.634652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.643406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.652931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.662195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.671010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.685738][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.755966][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.773169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.849658][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.871485][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.897587][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.925556][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.959671][ T4275] device veth0_vlan entered promiscuous mode [ 82.993484][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.015604][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.060034][ T4275] device veth1_vlan entered promiscuous mode [ 83.088057][ T4285] device veth0_vlan entered promiscuous mode [ 83.102745][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.123022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.133182][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.150441][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.160237][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.192879][ T4285] device veth1_vlan entered promiscuous mode [ 83.215283][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.230594][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.239689][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.252765][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.281359][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.298431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.313538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.337974][ T4275] device veth0_macvtap entered promiscuous mode [ 83.370337][ T4275] device veth1_macvtap entered promiscuous mode [ 83.443730][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.456942][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.465525][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.473082][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.491828][ T4285] device veth0_macvtap entered promiscuous mode [ 83.507436][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.542769][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.550457][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.563625][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.573250][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.582159][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.592763][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.600557][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.608380][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.617764][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.626703][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.643648][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.655822][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.673348][ T4285] device veth1_macvtap entered promiscuous mode [ 83.685231][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.698512][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709519][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.718783][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.807164][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.818010][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.828108][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.873720][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.888454][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.900282][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.904674][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 83.913545][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 83.921552][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.935783][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.945808][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.955818][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.971625][ T4278] device veth0_vlan entered promiscuous mode [ 83.984666][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 83.984842][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 83.990746][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 84.025002][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.037040][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.055256][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.062976][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.072978][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.087874][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.101204][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.120638][ T4278] device veth1_vlan entered promiscuous mode [ 84.146004][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.183542][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.194131][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.202888][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.213555][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.222767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.231021][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.260203][ T4277] device veth0_vlan entered promiscuous mode [ 84.286347][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.296001][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.305917][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.313765][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.330883][ T4277] device veth1_vlan entered promiscuous mode [ 84.386653][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.398269][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.407622][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.419674][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.433941][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.443685][ T4278] device veth0_macvtap entered promiscuous mode [ 84.455245][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.490926][ T4290] device veth0_vlan entered promiscuous mode [ 84.503685][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.513443][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.522125][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.530949][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.539656][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.549358][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.569561][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.578401][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.586714][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.595309][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.607995][ T4277] device veth0_macvtap entered promiscuous mode [ 84.637399][ T4277] device veth1_macvtap entered promiscuous mode [ 84.647513][ T4290] device veth1_vlan entered promiscuous mode [ 84.656679][ T4278] device veth1_macvtap entered promiscuous mode [ 84.663750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.673431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.684562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.692647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.701318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.740649][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.756415][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.769308][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775161][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.792171][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.803333][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.817089][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.833939][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.853812][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.864956][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.876449][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.886439][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.897368][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.909776][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.929186][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.940044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.949626][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.961259][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.970882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.979981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.990626][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.003030][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.013135][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.023923][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.040130][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.051476][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060511][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069742][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079518][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131657][ T4290] device veth0_macvtap entered promiscuous mode [ 85.157302][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.168171][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.180567][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.206007][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.214808][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.256841][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.280409][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.302544][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.316587][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.326930][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.337982][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.350451][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.361612][ T4290] device veth1_macvtap entered promiscuous mode [ 85.377354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.378849][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.392071][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.401185][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.415896][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.425313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.437108][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.456488][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.465521][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.475054][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.532355][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.545677][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.555874][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.559968][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.566664][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.584910][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.596132][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.607092][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.617727][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.630297][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.658920][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.669136][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.680218][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.691266][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.702132][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.713652][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.751265][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.762412][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.772567][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 85.782457][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.798900][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.810403][ T4325] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 85.924096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.934111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.944089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.954096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.964087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.974095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.984089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.994088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.004098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.014086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.432705][ T4376] binder: BINDER_SET_CONTEXT_MGR already set [ 86.439467][ T4376] binder: 4372:4376 ioctl 4018620d 200000004a80 returned -16 [ 87.325682][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 87.329996][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 87.331756][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 87.340276][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 87.350146][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 87.351440][ T14] cfg80211: failed to load regulatory.db [ 87.362691][ T4325] usb 1-1: config 0 has no interface number 0 [ 87.370247][ T4325] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 87.380658][ T4325] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 87.392247][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.397806][ T4325] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 87.425903][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.522071][ T4325] usb 1-1: Product: syz [ 87.525287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.526572][ T4325] usb 1-1: Manufacturer: syz [ 87.539910][ T4325] usb 1-1: SerialNumber: syz [ 87.572390][ T4325] usb 1-1: config 0 descriptor?? [ 87.579667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.596137][ T4369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.603680][ T4369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.678817][ T4290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.707273][ T4290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.734440][ T4290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.743330][ T4290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.800956][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.842906][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.861101][ T4369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.884826][ T4369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.924623][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.977709][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.000059][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.103514][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.124287][ T4325] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 88.157369][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.177997][ T4325] asix: probe of 1-1:0.34 failed with error -71 [ 88.185725][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.229605][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.241916][ T4325] usb 1-1: USB disconnect, device number 2 [ 88.309742][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.326734][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.349137][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.372001][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.422041][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.441171][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.543121][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.580445][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.631642][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.027271][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.724232][ T4353] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.934293][ T4353] usb 4-1: Using ep0 maxpacket: 16 [ 90.980347][ T4353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.147006][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.194232][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.254167][ T4353] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.334422][ T4353] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.407903][ T4353] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.428011][ T4353] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.444186][ T4353] usb 4-1: Manufacturer: syz [ 91.465000][ T4353] usb 4-1: config 0 descriptor?? [ 93.054365][ T4426] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 93.073133][ T4353] rc_core: IR keymap rc-hauppauge not found [ 93.835468][ T4353] Registered IR keymap rc-empty [ 93.852011][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.887301][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 93.926697][ T4353] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 93.970536][ T4353] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 94.053993][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.104317][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.154259][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.194392][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.395639][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 94.425253][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.147305][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.184871][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.271824][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.419742][ T4353] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 95.637636][ T4353] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.793516][ T4353] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.060671][ T4353] usb 4-1: USB disconnect, device number 2 [ 96.390941][ T4460] Bluetooth: MGMT ver 1.22 [ 100.143163][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.510832][ T26] audit: type=1400 audit(1789885890.608:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4482 comm="syz.2.33" [ 102.959083][ T4507] binder: BINDER_SET_CONTEXT_MGR already set [ 102.965131][ T4507] binder: 4505:4507 ioctl 4018620d 200000004a80 returned -16 [ 103.104338][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 106.344662][ T4530] No source specified [ 106.953335][ T4533] No source specified [ 110.733184][ T4545] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 110.805879][ T4558] ======================================================= [ 110.805879][ T4558] WARNING: The mand mount option has been deprecated and [ 110.805879][ T4558] and is ignored by this kernel. Remove the mand [ 110.805879][ T4558] option from the mount to silence this warning. [ 110.805879][ T4558] ======================================================= [ 110.855641][ T4558] jffs2: notice: (4558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.819734][ T4571] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 112.888736][ T4589] No source specified [ 114.677792][ T4577] binder: BINDER_SET_CONTEXT_MGR already set [ 114.683873][ T4577] binder: 4574:4577 ioctl 4018620d 200000004a80 returned -16 [ 118.602874][ T4621] 9pnet_fd: Insufficient options for proto=fd [ 118.900003][ T14] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.110144][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.192381][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.362637][ T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.520651][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 119.625170][ T14] usb 3-1: SerialNumber: syz [ 119.786881][ T14] usb 3-1: config 0 descriptor?? [ 119.898603][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.914437][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 119.945434][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.984793][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.999530][ T14] usb 3-1: media controller created [ 120.067605][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.083727][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.114615][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.394465][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 120.400585][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.691928][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 120.884214][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 121.421605][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.831517][ T14] usb 3-1: USB disconnect, device number 2 [ 122.050405][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.202641][ T4713] Zero length message leads to an empty skb [ 122.397545][ T4720] ip_tables: iptables: counters copy to user failed while replacing table [ 132.867635][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874309][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882648][ T4802] sctp: failed to load transform for md5: -2 [ 137.480082][ T4868] ip_tables: iptables: counters copy to user failed while replacing table [ 139.355069][ T4922] sctp: failed to load transform for md5: -2 [ 144.685715][ T4975] netlink: 144 bytes leftover after parsing attributes in process `syz.1.114'. [ 145.278702][ T4978] Cannot find add_set index 2 as target [ 146.374211][ T4365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.515387][ T4990] No source specified [ 146.577462][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.599037][ T4365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.622442][ T4365] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.641243][ T4365] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.657909][ T4365] usb 5-1: Manufacturer: syz [ 146.678762][ T4365] usb 5-1: config 0 descriptor?? [ 147.346948][ T4365] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 147.374121][ T4365] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 147.381729][ T4365] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 149.984319][ T4365] usb 5-1: USB disconnect, device number 2 [ 151.084924][ T5010] sctp: failed to load transform for md5: -2 [ 153.236553][ T5043] No source specified [ 153.764136][ T4353] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.580097][ T5055] syz.1.126 (5055): drop_caches: 2 [ 154.734212][ T4353] usb 5-1: Using ep0 maxpacket: 32 [ 154.741446][ T4353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.773968][ T4353] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.804223][ T4328] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.859661][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.956653][ T4353] usb 5-1: Product: syz [ 155.012352][ T4353] usb 5-1: Manufacturer: syz [ 155.072178][ T4353] usb 5-1: SerialNumber: syz [ 155.223587][ T4353] usb 5-1: config 0 descriptor?? [ 155.300223][ T5052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.644385][ T5066] sctp: failed to load transform for md5: -2 [ 155.691678][ T4353] usb 5-1: USB disconnect, device number 3 [ 155.834256][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 155.842625][ T4328] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.861225][ T4328] usb 4-1: config 0 has no interface number 0 [ 155.875601][ T4328] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 155.902859][ T4328] usb 4-1: config 0 interface 1 has no altsetting 0 [ 155.923869][ T4328] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 155.944093][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.972609][ T4328] usb 4-1: Product: syz [ 155.981368][ T4328] usb 4-1: Manufacturer: syz [ 155.994570][ T4328] usb 4-1: SerialNumber: syz [ 156.007095][ T4328] usb 4-1: config 0 descriptor?? [ 156.331545][ T4328] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 156.584605][ T4328] cx231xx 4-1:0.1: Failed to read PCB config [ 156.706936][ T4328] cx231xx: probe of 4-1:0.1 failed with error -71 [ 156.977254][ T4328] usb 4-1: USB disconnect, device number 3 [ 157.644181][ T4328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.107489][ T5108] No source specified [ 160.754433][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 161.520594][ T126] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.734530][ T126] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.948484][ T5118] sctp: failed to load transform for md5: -2 [ 162.014556][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.050954][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 162.219866][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.518777][ T5127] binder: BINDER_SET_CONTEXT_MGR already set [ 163.524825][ T5127] binder: 5126:5127 ioctl 4018620d 200000004a80 returned -16 [ 163.714147][ T126] usb 2-1: string descriptor 0 read error: -71 [ 163.720495][ T126] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.756434][ T126] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.815254][ T126] usb 2-1: can't set config #1, error -71 [ 163.855480][ T126] usb 2-1: USB disconnect, device number 2 [ 164.729493][ T5156] No source specified [ 166.861972][ T5172] binder: BINDER_SET_CONTEXT_MGR already set [ 166.868024][ T5172] binder: 5171:5172 ioctl 4018620d 200000004a80 returned -16 [ 167.267787][ T5180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.834175][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.238699][ T126] usb 1-1: Dual-Role OTG device on HNP port [ 168.608907][ T126] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 168.780602][ T5199] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 168.868914][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.904101][ T126] usb 1-1: Product: HID Gadget [ 168.908947][ T126] usb 1-1: SerialNumber: 0123456789 [ 168.952794][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.028172][ T126] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0002/input/input7 [ 169.084445][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.169481][ T5206] ip_tables: iptables: counters copy to user failed while replacing table [ 169.252351][ T5207] No source specified [ 171.787478][ T5211] binder: BINDER_SET_CONTEXT_MGR already set [ 171.793487][ T5211] binder: 5210:5211 ioctl 4018620d 200000004a80 returned -16 [ 171.836024][ T126] hid-generic 0003:1D6B:0104.0002: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 173.936926][ T5224] input: syz1 as /devices/virtual/input/input8 [ 174.567766][ T5230] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.595478][ T5252] No source specified [ 176.460708][ T5256] jffs2: notice: (5256) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.590547][ T5262] ip_tables: iptables: counters copy to user failed while replacing table [ 177.363890][ T5261] sctp: failed to load transform for md5: -2 [ 177.889502][ T5291] FAULT_INJECTION: forcing a failure. [ 177.889502][ T5291] name failslab, interval 1, probability 0, space 0, times 1 [ 177.903019][ T5291] CPU: 1 PID: 5291 Comm: syz.0.204 Not tainted syzkaller #0 [ 177.910379][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.920478][ T5291] Call Trace: [ 177.923796][ T5291] [ 177.926759][ T5291] dump_stack_lvl+0x188/0x24e [ 177.931483][ T5291] ? show_regs_print_info+0x12/0x12 [ 177.936714][ T5291] ? load_image+0x410/0x410 [ 177.941265][ T5291] ? __might_sleep+0xd0/0xd0 [ 177.945886][ T5291] ? __lock_acquire+0x7c40/0x7c40 [ 177.951125][ T5291] ? mark_lock+0x94/0x320 [ 177.955500][ T5291] should_fail_ex+0x390/0x4c0 [ 177.960236][ T5291] should_failslab+0x5/0x20 [ 177.964770][ T5291] slab_pre_alloc_hook+0x59/0x300 [ 177.969836][ T5291] kmem_cache_alloc+0x56/0x2f0 [ 177.974630][ T5291] ? __kernfs_new_node+0xe1/0x7f0 [ 177.979691][ T5291] __kernfs_new_node+0xe1/0x7f0 [ 177.984579][ T5291] ? kernfs_add_one+0x14e/0x8f0 [ 177.989464][ T5291] ? kernfs_new_node+0x250/0x250 [ 177.994444][ T5291] ? kernfs_create_dir_ns+0x10e/0x120 [ 177.999855][ T5291] ? sysfs_create_dir_ns+0x12c/0x290 [ 178.005205][ T5291] ? sysfs_create_dir_ns+0x167/0x290 [ 178.010709][ T5291] ? __lock_acquire+0x7c40/0x7c40 [ 178.015784][ T5291] kernfs_new_node+0x148/0x250 [ 178.020590][ T5291] __kernfs_create_file+0x47/0x2e0 [ 178.025741][ T5291] sysfs_add_file_mode_ns+0x233/0x2f0 [ 178.031159][ T5291] sysfs_create_file_ns+0x128/0x1b0 [ 178.036405][ T5291] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 178.042343][ T5291] ? __dev_fwnode+0x4c/0x80 [ 178.046886][ T5291] device_add+0x554/0x1050 [ 178.051352][ T5291] netdev_register_kobject+0x184/0x320 [ 178.056857][ T5291] register_netdevice+0x133a/0x1b80 [ 178.062111][ T5291] ? netif_stacked_transfer_operstate+0x200/0x200 [ 178.068660][ T5291] ? alloc_netdev_mqs+0xb56/0xf10 [ 178.073713][ T5291] ? validate_linkmsg+0x3db/0x4c0 [ 178.078786][ T5291] bond_newlink+0x39/0x80 [ 178.083150][ T5291] ? bond_validate+0x150/0x150 [ 178.087949][ T5291] rtnl_newlink+0x14b3/0x1f90 [ 178.092683][ T5291] ? rtnl_setlink+0x510/0x510 [ 178.097394][ T5291] ? trace_raw_output_contention_end+0xd0/0xd0 [ 178.103579][ T5291] ? rcu_is_watching+0x11/0xa0 [ 178.108363][ T5291] ? trace_contention_end+0x5f/0x170 [ 178.113662][ T5291] ? __mutex_lock+0x1ab/0xae0 [ 178.118392][ T5291] ? rcu_read_unlock+0x8c/0xa0 [ 178.123176][ T5291] ? rtnl_setlink+0x510/0x510 [ 178.127862][ T5291] rtnetlink_rcv_msg+0x863/0xfb0 [ 178.132810][ T5291] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 178.137940][ T5291] ? rtnetlink_bind+0x80/0x80 [ 178.142625][ T5291] ? __local_bh_enable_ip+0x136/0x1c0 [ 178.148007][ T5291] ? lockdep_hardirqs_on+0x94/0x140 [ 178.153225][ T5291] ? __local_bh_enable_ip+0x136/0x1c0 [ 178.158608][ T5291] ? _local_bh_enable+0xa0/0xa0 [ 178.163469][ T5291] ? __dev_queue_xmit+0x281/0x3810 [ 178.168592][ T5291] ? __dev_queue_xmit+0x281/0x3810 [ 178.173740][ T5291] ? __dev_queue_xmit+0x1d84/0x3810 [ 178.178956][ T5291] ? __dev_queue_xmit+0x281/0x3810 [ 178.184089][ T5291] ? ref_tracker_free+0x682/0x830 [ 178.189128][ T5291] ? refcount_inc+0x70/0x70 [ 178.193642][ T5291] ? memcpy+0x3c/0x60 [ 178.197635][ T5291] ? __copy_skb_header+0x3ba/0x4f0 [ 178.202761][ T5291] ? __skb_clone+0x446/0x6c0 [ 178.207363][ T5291] netlink_rcv_skb+0x1ef/0x440 [ 178.212166][ T5291] ? rtnetlink_bind+0x80/0x80 [ 178.216889][ T5291] ? netlink_ack+0x1160/0x1160 [ 178.221680][ T5291] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.226898][ T5291] netlink_unicast+0x7ad/0x920 [ 178.231678][ T5291] netlink_sendmsg+0x8ad/0xbd0 [ 178.236461][ T5291] ? netlink_getsockopt+0x550/0x550 [ 178.241673][ T5291] ? apparmor_socket_sendmsg+0x16c/0x330 [ 178.247323][ T5291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 178.252615][ T5291] ? security_socket_sendmsg+0x7c/0xa0 [ 178.258088][ T5291] ? netlink_getsockopt+0x550/0x550 [ 178.263297][ T5291] ____sys_sendmsg+0x5ed/0x9a0 [ 178.268080][ T5291] ? __sys_sendmsg_sock+0x30/0x30 [ 178.273196][ T5291] ? __import_iovec+0x306/0x510 [ 178.278075][ T5291] ? import_iovec+0x6f/0xa0 [ 178.282593][ T5291] ___sys_sendmsg+0x2a2/0x360 [ 178.287283][ T5291] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.292078][ T5291] ? __lock_acquire+0x7c40/0x7c40 [ 178.297135][ T5291] __se_sys_sendmsg+0x1c3/0x2b0 [ 178.301994][ T5291] ? __x64_sys_sendmsg+0x80/0x80 [ 178.306951][ T5291] ? lockdep_hardirqs_on+0x94/0x140 [ 178.312165][ T5291] do_syscall_64+0x4c/0xa0 [ 178.316595][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 178.321303][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 178.325995][ T5291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.331913][ T5291] RIP: 0033:0x7fadad79e159 [ 178.336343][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.355975][ T5291] RSP: 002b:00007fadae714028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.364399][ T5291] RAX: ffffffffffffffda RBX: 00007fadada25fa0 RCX: 00007fadad79e159 [ 178.372841][ T5291] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 178.380819][ T5291] RBP: 00007fadad83506b R08: 0000000000000000 R09: 0000000000000000 [ 178.388824][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.396834][ T5291] R13: 00007fadada26038 R14: 00007fadada25fa0 R15: 00007ffea6b17f98 [ 178.404845][ T5291] [ 178.420180][ T4329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.422232][ T5291] bond2 (unregistered): Released all slaves [ 178.525188][ T5297] No source specified [ 178.641632][ T4329] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.781499][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.824208][ T4329] usb 3-1: Product: syz [ 178.828442][ T4329] usb 3-1: Manufacturer: syz [ 178.882493][ T4329] usb 3-1: SerialNumber: syz [ 179.213575][ T5304] x_tables: duplicate underflow at hook 1 [ 179.351398][ T4329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 179.974279][ T5209] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.994715][ T4329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 180.027893][ T4329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.057775][ T4329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.098098][ T4329] lan78xx: probe of 3-1:1.0 failed with error -32 [ 180.143441][ T4329] usb 3-1: USB disconnect, device number 3 [ 180.186832][ T5209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.214206][ T5209] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 180.254091][ T5209] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 180.284076][ T5209] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 180.324131][ T5209] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 180.343643][ T5209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.355194][ T5316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.364245][ T5316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.417029][ T5209] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 180.435421][ T5209] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 180.453432][ T5209] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 180.481814][ T5209] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 180.531567][ T5209] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 180.579683][ T5209] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 180.596785][ T5209] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 180.923942][ T5323] ip_tables: iptables: counters copy to user failed while replacing table [ 182.686791][ T126] usb 4-1: USB disconnect, device number 5 [ 182.748397][ T126] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 182.785527][ T126] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 182.863399][ T126] keyspan 4-1:1.0: device disconnected [ 186.250127][ T5349] capability: warning: `syz.3.224' uses deprecated v2 capabilities in a way that may be insecure [ 187.565085][ T5360] ip_tables: iptables: counters copy to user failed while replacing table [ 188.230665][ T5362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.238309][ T5362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.535009][ T5362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.542674][ T5362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.095722][ T5370] binder: BINDER_SET_CONTEXT_MGR already set [ 191.102025][ T5370] binder: 5366:5370 ioctl 4018620d 200000004a80 returned -16 [ 194.354635][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.361001][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.826509][ T4282] Bluetooth: hci3: command 0x2021 tx timeout [ 199.190844][ T5415] ip_tables: iptables: counters copy to user failed while replacing table [ 202.614943][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 202.615072][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 202.627673][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 202.642973][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 202.677835][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 207.086801][ T5462] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5463] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5462] [ 208.122999][ T5457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.356196][ T5467] ip_tables: iptables: counters copy to user failed while replacing table [ 209.874054][ T4552] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.117808][ T4552] usb 5-1: Using ep0 maxpacket: 8 [ 210.135563][ T4552] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 210.156477][ T4552] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.179239][ T4552] usb 5-1: config 1 has no interface number 0 [ 210.198549][ T4552] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 210.378092][ T4552] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 210.434435][ T4552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.442499][ T4552] usb 5-1: Product: syz [ 210.475916][ T4552] usb 5-1: Manufacturer: syz [ 210.490837][ T4552] usb 5-1: SerialNumber: syz [ 211.604091][ T4552] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 211.712326][ T5371] udevd[5371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.519354][ T5497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.527121][ T5497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.424224][ T4326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 214.649669][ T4326] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 214.710923][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.821793][ T4326] usb 2-1: Product: syz [ 214.873363][ T4326] usb 2-1: Manufacturer: syz [ 214.937838][ T4326] usb 2-1: SerialNumber: syz [ 215.394796][ T126] usb 5-1: USB disconnect, device number 4 [ 215.439418][ T5497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.622643][ T5497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.371078][ T4326] rtl8150 2-1:1.0: couldn't reset the device [ 216.410454][ T4326] rtl8150: probe of 2-1:1.0 failed with error -5 [ 217.593199][ T14] usb 2-1: USB disconnect, device number 3 [ 217.940377][ T5519] netlink: 25 bytes leftover after parsing attributes in process `syz.3.257'. [ 217.989610][ T5519] device eql entered promiscuous mode [ 218.129901][ T5533] ip_tables: iptables: counters copy to user failed while replacing table [ 218.151288][ T5529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.622825][ T5554] sctp: failed to load transform for md5: -2 [ 224.901098][ T5600] syz.4.286: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 224.917122][ T5600] CPU: 1 PID: 5600 Comm: syz.4.286 Not tainted syzkaller #0 [ 224.924413][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.934465][ T5600] Call Trace: [ 224.937739][ T5600] [ 224.940662][ T5600] dump_stack_lvl+0x188/0x24e [ 224.945373][ T5600] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 224.951782][ T5600] ? show_regs_print_info+0x12/0x12 [ 224.956978][ T5600] ? load_image+0x410/0x410 [ 224.961483][ T5600] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 224.967895][ T5600] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 224.974416][ T5600] warn_alloc+0x242/0x330 [ 224.978748][ T5600] ? zone_watermark_ok_safe+0x270/0x270 [ 224.984307][ T5600] __vmalloc_node_range+0x11e/0x1380 [ 224.989590][ T5600] ? __mutex_trylock_common+0x15c/0x260 [ 224.995152][ T5600] ? trace_raw_output_contention_end+0xd0/0xd0 [ 225.001305][ T5600] ? rcu_is_watching+0x11/0xa0 [ 225.006097][ T5600] ? trace_contention_end+0x5f/0x170 [ 225.011387][ T5600] ? __mutex_lock+0x1ab/0xae0 [ 225.016067][ T5600] ? tomoyo_path_number_perm+0x5a4/0x650 [ 225.021696][ T5600] ? free_vm_area+0x50/0x50 [ 225.026195][ T5600] ? dvb_demux_do_ioctl+0x313/0x530 [ 225.031384][ T5600] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 225.036859][ T5600] ? mutex_lock_nested+0x10/0x10 [ 225.041794][ T5600] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 225.047617][ T5600] vmalloc+0x75/0x80 [ 225.051511][ T5600] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 225.057324][ T5600] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 225.063430][ T5600] dvb_demux_do_ioctl+0x450/0x530 [ 225.068458][ T5600] dvb_usercopy+0x191/0x2b0 [ 225.072959][ T5600] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 225.078500][ T5600] ? dvb_generic_ioctl+0xb0/0xb0 [ 225.083448][ T5600] ? dvb_demux_poll+0x210/0x210 [ 225.088299][ T5600] dvb_demux_ioctl+0x25/0x30 [ 225.092882][ T5600] __se_sys_ioctl+0xfa/0x170 [ 225.097472][ T5600] do_syscall_64+0x4c/0xa0 [ 225.101880][ T5600] ? clear_bhb_loop+0x60/0xb0 [ 225.106550][ T5600] ? clear_bhb_loop+0x60/0xb0 [ 225.111226][ T5600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.117134][ T5600] RIP: 0033:0x7f7e25d9e159 [ 225.121592][ T5600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.141228][ T5600] RSP: 002b:00007f7e26d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.149639][ T5600] RAX: ffffffffffffffda RBX: 00007f7e26025fa0 RCX: 00007f7e25d9e159 [ 225.157697][ T5600] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000b [ 225.165665][ T5600] RBP: 00007f7e25e3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.173647][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.181637][ T5600] R13: 00007f7e26026038 R14: 00007f7e26025fa0 R15: 00007ffc32745218 [ 225.189617][ T5600] [ 225.192752][ T5600] Mem-Info: [ 225.195875][ T5600] active_anon:14092 inactive_anon:0 isolated_anon:0 [ 225.195875][ T5600] active_file:21067 inactive_file:40029 isolated_file:0 [ 225.195875][ T5600] unevictable:768 dirty:220 writeback:0 [ 225.195875][ T5600] slab_reclaimable:21249 slab_unreclaimable:93794 [ 225.195875][ T5600] mapped:36667 shmem:9419 pagetables:667 [ 225.195875][ T5600] sec_pagetables:0 bounce:0 [ 225.195875][ T5600] kernel_misc_reclaimable:0 [ 225.195875][ T5600] free:1309395 free_pcp:11357 free_cma:0 [ 225.241322][ T5600] Node 0 active_anon:56368kB inactive_anon:0kB active_file:84268kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146668kB dirty:880kB writeback:0kB shmem:36140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11932kB pagetables:2668kB sec_pagetables:0kB all_unreclaimable? no [ 225.273920][ T5600] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 225.304381][ T5600] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.331426][ T5600] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 225.337191][ T5600] Node 0 DMA32 free:1325064kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:56368kB inactive_anon:0kB active_file:84268kB inactive_file:159912kB unevictable:1536kB writepending:880kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:24924kB local_pcp:12552kB free_cma:0kB [ 225.367725][ T5600] lowmem_reserve[]: 0 0 1 1 1 [ 225.372423][ T5600] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.399194][ T5600] lowmem_reserve[]: 0 0 0 0 0 [ 225.403895][ T5600] Node 1 Normal free:3897156kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20504kB local_pcp:9240kB free_cma:0kB [ 225.433419][ T5600] lowmem_reserve[]: 0 0 0 0 0 [ 225.438147][ T5600] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.450781][ T5600] Node 0 DMA32: 2*4kB (UE) 2*8kB (ME) 551*16kB (UE) 500*32kB (UME) 312*64kB (UME) 150*128kB (UME) 92*256kB (UM) 31*512kB (M) 39*1024kB (UM) 13*2048kB (UM) 282*4096kB (M) = 1325064kB [ 225.468824][ T5600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.480284][ T5600] Node 1 Normal: 169*4kB (UME) 54*8kB (UME) 35*16kB (UE) 32*32kB (UME) 15*64kB (UME) 8*128kB (UM) 5*256kB (UME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897156kB [ 225.497981][ T5600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.507533][ T5600] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.516841][ T5600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.526396][ T5600] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.535703][ T5600] 70515 total pagecache pages [ 225.540372][ T5600] 0 pages in swap cache [ 225.544549][ T5600] Free swap = 124996kB [ 225.548713][ T5600] Total swap = 124996kB [ 225.552858][ T5600] 2097051 pages RAM [ 225.556676][ T5600] 0 pages HighMem/MovableOnly [ 225.561342][ T5600] 415226 pages reserved [ 225.565529][ T5600] 0 pages cma reserved [ 225.829059][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.836682][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.885379][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.892971][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.780792][ T5617] 9pnet_fd: Insufficient options for proto=fd [ 229.412949][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 230.121117][ T5629] binder: BINDER_SET_CONTEXT_MGR already set [ 230.127334][ T5629] binder: 5625:5629 ioctl 4018620d 200000004a80 returned -16 [ 232.973411][ T5633] sctp: failed to load transform for md5: -4 [ 234.075161][ T5655] loop0: detected capacity change from 0 to 2049 [ 235.116575][ T5676] 9pnet_fd: Insufficient options for proto=fd [ 235.286001][ T5677] ip_tables: iptables: counters copy to user failed while replacing table [ 237.213335][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.242212][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 237.264538][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.663379][ T5702] No source specified [ 241.545130][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.564072][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.511755][ T5730] 9pnet_fd: Insufficient options for proto=fd [ 243.029407][ T5739] No source specified [ 243.258577][ T4378] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 243.960540][ T4378] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.994697][ T4378] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 244.065165][ T4378] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 244.109775][ T4378] usb 4-1: config 8 has no interface number 0 [ 244.134236][ T4378] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 247.038844][ T4378] usb 4-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.079865][ T5756] ip_tables: iptables: counters copy to user failed while replacing table [ 249.635968][ T4378] usb 4-1: string descriptor 0 read error: -71 [ 249.642281][ T4378] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 249.761716][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.848850][ T4378] usb 4-1: can't set config #8, error -71 [ 249.870599][ T4378] usb 4-1: USB disconnect, device number 6 [ 250.264122][ T4332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 252.043507][ T5773] ip_tables: iptables: counters copy to user failed while replacing table [ 252.238431][ T4332] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 252.271832][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.282296][ T4332] usb 3-1: Product: syz [ 252.287784][ T4332] usb 3-1: Manufacturer: syz [ 252.292622][ T4332] usb 3-1: SerialNumber: syz [ 253.443875][ T4332] rtl8150 3-1:1.0: couldn't reset the device [ 253.482588][ T4332] rtl8150: probe of 3-1:1.0 failed with error -5 [ 253.538158][ T4332] usb 3-1: USB disconnect, device number 4 [ 253.617802][ T5789] 9pnet_fd: Insufficient options for proto=fd [ 254.179121][ T5803] No source specified [ 255.817999][ T4330] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 255.935328][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.953555][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.092857][ T4330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.614277][ T4330] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 257.873584][ T4330] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 257.888851][ T4330] usb 2-1: config 8 has no interface number 0 [ 257.895938][ T4330] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 257.907356][ T4330] usb 2-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.942132][ T4330] usb 2-1: string descriptor 0 read error: -22 [ 258.132914][ T4330] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 258.301367][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.177864][ T5831] ip_tables: iptables: counters copy to user failed while replacing table [ 259.234873][ T4330] usb 2-1: can't set config #8, error -71 [ 259.261572][ T4330] usb 2-1: USB disconnect, device number 4 [ 259.961886][ T5841] 9pnet_fd: Insufficient options for proto=fd [ 260.415267][ T5853] No source specified [ 262.137369][ T5862] syz.0.352: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 262.151785][ T5862] CPU: 1 PID: 5862 Comm: syz.0.352 Not tainted syzkaller #0 [ 262.159070][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.169137][ T5862] Call Trace: [ 262.172413][ T5862] [ 262.175354][ T5862] dump_stack_lvl+0x188/0x24e [ 262.180046][ T5862] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 262.186463][ T5862] ? show_regs_print_info+0x12/0x12 [ 262.191919][ T5862] ? load_image+0x410/0x410 [ 262.196443][ T5862] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 262.202907][ T5862] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 262.209424][ T5862] warn_alloc+0x242/0x330 [ 262.213759][ T5862] ? zone_watermark_ok_safe+0x270/0x270 [ 262.219328][ T5862] __vmalloc_node_range+0x11e/0x1380 [ 262.224612][ T5862] ? __mutex_trylock_common+0x15c/0x260 [ 262.230177][ T5862] ? trace_raw_output_contention_end+0xd0/0xd0 [ 262.236328][ T5862] ? rcu_is_watching+0x11/0xa0 [ 262.241090][ T5862] ? trace_contention_end+0x5f/0x170 [ 262.246388][ T5862] ? __mutex_lock+0x1ab/0xae0 [ 262.251096][ T5862] ? tomoyo_path_number_perm+0x5a4/0x650 [ 262.256733][ T5862] ? free_vm_area+0x50/0x50 [ 262.261273][ T5862] ? dvb_demux_do_ioctl+0x313/0x530 [ 262.266477][ T5862] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 262.272027][ T5862] ? mutex_lock_nested+0x10/0x10 [ 262.276963][ T5862] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 262.282766][ T5862] vmalloc+0x75/0x80 [ 262.286666][ T5862] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 262.292484][ T5862] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 262.298116][ T5862] dvb_demux_do_ioctl+0x450/0x530 [ 262.303157][ T5862] dvb_usercopy+0x191/0x2b0 [ 262.307663][ T5862] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 262.313207][ T5862] ? dvb_generic_ioctl+0xb0/0xb0 [ 262.318195][ T5862] ? dvb_demux_poll+0x210/0x210 [ 262.323058][ T5862] dvb_demux_ioctl+0x25/0x30 [ 262.327673][ T5862] __se_sys_ioctl+0xfa/0x170 [ 262.332355][ T5862] do_syscall_64+0x4c/0xa0 [ 262.336775][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 262.341448][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 262.346129][ T5862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.352023][ T5862] RIP: 0033:0x7fadad79e159 [ 262.356437][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.376058][ T5862] RSP: 002b:00007fadae714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.384477][ T5862] RAX: ffffffffffffffda RBX: 00007fadada25fa0 RCX: 00007fadad79e159 [ 262.392444][ T5862] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 000000000000000b [ 262.400412][ T5862] RBP: 00007fadad83506b R08: 0000000000000000 R09: 0000000000000000 [ 262.408379][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.416365][ T5862] R13: 00007fadada26038 R14: 00007fadada25fa0 R15: 00007ffea6b17f98 [ 262.424355][ T5862] [ 262.428088][ T5862] Mem-Info: [ 262.431222][ T5862] active_anon:14585 inactive_anon:0 isolated_anon:0 [ 262.431222][ T5862] active_file:21067 inactive_file:40043 isolated_file:0 [ 262.431222][ T5862] unevictable:768 dirty:158 writeback:0 [ 262.431222][ T5862] slab_reclaimable:21158 slab_unreclaimable:93999 [ 262.431222][ T5862] mapped:29802 shmem:9996 pagetables:580 [ 262.431222][ T5862] sec_pagetables:0 bounce:0 [ 262.431222][ T5862] kernel_misc_reclaimable:0 [ 262.431222][ T5862] free:1306619 free_pcp:14414 free_cma:0 [ 262.476597][ T5862] Node 0 active_anon:58340kB inactive_anon:0kB active_file:84268kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119208kB dirty:632kB writeback:0kB shmem:38448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11820kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 262.509409][ T5862] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 262.540442][ T5862] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.567623][ T5862] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 262.573371][ T5862] Node 0 DMA32 free:1313960kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:58340kB inactive_anon:0kB active_file:84268kB inactive_file:159968kB unevictable:1536kB writepending:632kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:37152kB local_pcp:20472kB free_cma:0kB [ 262.603924][ T5862] lowmem_reserve[]: 0 0 1 1 1 [ 262.608688][ T5862] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.636063][ T5862] lowmem_reserve[]: 0 0 0 0 0 [ 262.640777][ T5862] Node 1 Normal free:3897156kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20504kB local_pcp:9240kB free_cma:0kB [ 262.670188][ T5862] lowmem_reserve[]: 0 0 0 0 0 [ 262.674925][ T5862] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.687559][ T5862] Node 0 DMA32: 2292*4kB (UME) 1323*8kB (UME) 480*16kB (UME) 330*32kB (UM) 161*64kB (UME) 154*128kB (UME) 95*256kB (UM) 20*512kB (M) 23*1024kB (UM) 14*2048kB (UM) 283*4096kB (UM) = 1313960kB [ 262.706436][ T5862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 262.717906][ T5862] Node 1 Normal: 169*4kB (UME) 54*8kB (UME) 35*16kB (UE) 32*32kB (UME) 15*64kB (UME) 8*128kB (UM) 5*256kB (UME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897156kB [ 262.736139][ T5862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.745735][ T5862] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.755035][ T5862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.764642][ T5862] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.773932][ T5862] 71106 total pagecache pages [ 262.778685][ T5862] 0 pages in swap cache [ 262.782834][ T5862] Free swap = 124996kB [ 262.787017][ T5862] Total swap = 124996kB [ 262.791169][ T5862] 2097051 pages RAM [ 262.795025][ T5862] 0 pages HighMem/MovableOnly [ 262.799693][ T5862] 415226 pages reserved [ 262.803844][ T5862] 0 pages cma reserved [ 264.295284][ T5867] sched: RT throttling activated [ 266.904236][ T5883] netlink: 284 bytes leftover after parsing attributes in process `syz.0.356'. [ 267.069067][ T5886] 9pnet_fd: Insufficient options for proto=fd [ 268.438619][ T5897] ip_tables: iptables: counters copy to user failed while replacing table [ 269.082638][ T5904] No source specified [ 274.967002][ T5937] 9pnet_fd: Insufficient options for proto=fd [ 275.255308][ T5942] ip_tables: iptables: counters copy to user failed while replacing table [ 275.544086][ T4326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 275.778525][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.840068][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 275.871352][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 275.923040][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 277.708918][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.755508][ T4326] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 277.776937][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.786026][ T4326] usb 5-1: Product: syz [ 277.790345][ T4326] usb 5-1: Manufacturer: syz [ 277.795343][ T4326] usb 5-1: SerialNumber: syz [ 277.812090][ T4326] usb 5-1: config 0 descriptor?? [ 277.824792][ T5943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.848977][ T4326] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 279.294694][ T5950] binder: BINDER_SET_CONTEXT_MGR already set [ 279.300708][ T5950] binder: 5949:5950 ioctl 4018620d 200000004a80 returned -16 [ 280.832151][ T5961] FAULT_INJECTION: forcing a failure. [ 280.832151][ T5961] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 280.845783][ T5961] CPU: 0 PID: 5961 Comm: syz.3.376 Not tainted syzkaller #0 [ 280.853110][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.863207][ T5961] Call Trace: [ 280.866518][ T5961] [ 280.869497][ T5961] dump_stack_lvl+0x188/0x24e [ 280.874239][ T5961] ? show_regs_print_info+0x12/0x12 [ 280.879483][ T5961] ? load_image+0x410/0x410 [ 280.884042][ T5961] ? __lock_acquire+0x7c40/0x7c40 [ 280.889107][ T5961] ? __kasan_slab_alloc+0x6b/0x80 [ 280.894173][ T5961] should_fail_ex+0x390/0x4c0 [ 280.898899][ T5961] strncpy_from_user+0x32/0x340 [ 280.903794][ T5961] getname_flags+0xf2/0x500 [ 280.908332][ T5961] do_sys_openat2+0xdd/0x4f0 [ 280.912966][ T5961] ? do_sys_open+0xe0/0xe0 [ 280.917425][ T5961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 280.923445][ T5961] ? lock_chain_count+0x20/0x20 [ 280.928341][ T5961] __x64_sys_openat+0x135/0x160 [ 280.933237][ T5961] do_syscall_64+0x4c/0xa0 [ 280.937687][ T5961] ? clear_bhb_loop+0x60/0xb0 [ 280.942399][ T5961] ? clear_bhb_loop+0x60/0xb0 [ 280.947106][ T5961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.953055][ T5961] RIP: 0033:0x7f551635e98e [ 280.957504][ T5961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.977151][ T5961] RSP: 002b:00007f55172bdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.985602][ T5961] RAX: ffffffffffffffda RBX: 00007f55172be6c0 RCX: 00007f551635e98e [ 280.993694][ T5961] RDX: 0000000000000000 RSI: 00007f55172bdc00 RDI: ffffffffffffff9c [ 281.001707][ T5961] RBP: 00007f55172bdc00 R08: 0000000000000000 R09: 0000000000000000 [ 281.009708][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 281.017715][ T5961] R13: 00007f5516626128 R14: 00007f5516626090 R15: 00007ffcc6f1bb08 [ 281.025734][ T5961] [ 281.305657][ T4365] usb 5-1: USB disconnect, device number 5 [ 282.856712][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 283.519849][ T5976] 9pnet_fd: Insufficient options for proto=fd [ 284.843567][ T5995] No source specified [ 285.625940][ T5998] ip_tables: iptables: counters copy to user failed while replacing table [ 287.352279][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.388831][ T6012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.598535][ T6017] syz.0.397 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 287.684494][ T6021] [ 287.686895][ T6021] ====================================================== [ 287.693934][ T6021] WARNING: possible circular locking dependency detected [ 287.700978][ T6021] syzkaller #0 Not tainted [ 287.705391][ T6021] ------------------------------------------------------ [ 287.712460][ T6021] syz.2.398/6021 is trying to acquire lock: [ 287.718428][ T6021] ffff8880178529d0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 287.729960][ T6021] [ 287.729960][ T6021] but task is already holding lock: [ 287.737348][ T6021] ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 287.746636][ T6021] [ 287.746636][ T6021] which lock already depends on the new lock. [ 287.746636][ T6021] [ 287.757070][ T6021] [ 287.757070][ T6021] the existing dependency chain (in reverse order) is: [ 287.758053][ T26] audit: type=1800 audit(1789886076.838:3): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 287.766097][ T6021] [ 287.766097][ T6021] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 287.766131][ T6021] __mutex_lock+0x12d/0xae0 [ 287.766156][ T6021] usbg_make_tpg+0xf5/0x550 [ 287.766179][ T6021] target_fabric_make_tpg+0xa0/0x6d0 [ 287.809990][ T6021] configfs_mkdir+0x511/0x9e0 [ 287.815215][ T6021] vfs_mkdir+0x386/0x570 [ 287.819983][ T6021] do_mkdirat+0x1d8/0x440 [ 287.824843][ T6021] __x64_sys_mkdirat+0x85/0x90 [ 287.830130][ T6021] do_syscall_64+0x4c/0xa0 [ 287.835069][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.841520][ T6021] [ 287.841520][ T6021] -> #1 (&subsys->su_mutex){+.+.}-{3:3}: [ 287.849346][ T6021] __mutex_lock+0x12d/0xae0 [ 287.854377][ T6021] configfs_rmdir+0x638/0x980 [ 287.859581][ T6021] vfs_rmdir+0x34e/0x4a0 [ 287.864347][ T6021] do_rmdir+0x29a/0x5c0 [ 287.869031][ T6021] __x64_sys_rmdir+0x45/0x50 [ 287.874146][ T6021] do_syscall_64+0x4c/0xa0 [ 287.879083][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.885508][ T6021] [ 287.885508][ T6021] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 287.894206][ T6021] __lock_acquire+0x2d18/0x7c40 [ 287.899588][ T6021] lock_acquire+0x1bb/0x4a0 [ 287.904617][ T6021] down_write+0x36/0x60 [ 287.909298][ T6021] configfs_depend_item_unlocked+0x14f/0x430 [ 287.915807][ T6021] usbg_make_tpg+0x1dd/0x550 [ 287.920934][ T6021] target_fabric_make_tpg+0xa0/0x6d0 [ 287.926746][ T6021] configfs_mkdir+0x511/0x9e0 [ 287.931953][ T6021] vfs_mkdir+0x386/0x570 [ 287.936721][ T6021] do_mkdirat+0x1d8/0x440 [ 287.941574][ T6021] __x64_sys_mkdirat+0x85/0x90 [ 287.946861][ T6021] do_syscall_64+0x4c/0xa0 [ 287.951807][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.958231][ T6021] [ 287.958231][ T6021] other info that might help us debug this: [ 287.958231][ T6021] [ 287.968460][ T6021] Chain exists of: [ 287.968460][ T6021] &sb->s_type->i_mutex_key#22 --> &subsys->su_mutex --> tpg_instances_lock [ 287.968460][ T6021] [ 287.982987][ T6021] Possible unsafe locking scenario: [ 287.982987][ T6021] [ 287.990440][ T6021] CPU0 CPU1 [ 287.995804][ T6021] ---- ---- [ 288.001167][ T6021] lock(tpg_instances_lock); [ 288.005850][ T6021] lock(&subsys->su_mutex); [ 288.012963][ T6021] lock(tpg_instances_lock); [ 288.020159][ T6021] lock(&sb->s_type->i_mutex_key#22); [ 288.025626][ T6021] [ 288.025626][ T6021] *** DEADLOCK *** [ 288.025626][ T6021] [ 288.033768][ T6021] 4 locks held by syz.2.398/6021: [ 288.038787][ T6021] #0: ffff888018f70460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 288.048024][ T6021] #1: ffff888054970150 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 288.058823][ T6021] #2: ffffffff8d4ea290 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 288.068579][ T6021] #3: ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 288.078243][ T6021] [ 288.078243][ T6021] stack backtrace: [ 288.084131][ T6021] CPU: 1 PID: 6021 Comm: syz.2.398 Not tainted syzkaller #0 [ 288.091414][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.101471][ T6021] Call Trace: [ 288.104772][ T6021] [ 288.107712][ T6021] dump_stack_lvl+0x188/0x24e [ 288.112398][ T6021] ? load_image+0x410/0x410 [ 288.116909][ T6021] ? show_regs_print_info+0x12/0x12 [ 288.122115][ T6021] ? print_circular_bug+0x12b/0x1a0 [ 288.127328][ T6021] check_noncircular+0x296/0x330 [ 288.132276][ T6021] ? look_up_lock_class+0x75/0x140 [ 288.137396][ T6021] ? add_chain_block+0x9b0/0x9b0 [ 288.142339][ T6021] ? lockdep_lock+0xf1/0x1f0 [ 288.146937][ T6021] ? _find_first_zero_bit+0xd2/0x100 [ 288.152236][ T6021] __lock_acquire+0x2d18/0x7c40 [ 288.157101][ T6021] ? __kernel_text_address+0x9/0x30 [ 288.162308][ T6021] ? verify_lock_unused+0x140/0x140 [ 288.167544][ T6021] ? __mutex_trylock_common+0x15c/0x260 [ 288.173096][ T6021] lock_acquire+0x1bb/0x4a0 [ 288.177608][ T6021] ? configfs_depend_item_unlocked+0x14f/0x430 [ 288.183773][ T6021] ? __might_sleep+0xd0/0xd0 [ 288.188384][ T6021] ? read_lock_is_recursive+0x10/0x10 [ 288.193785][ T6021] ? __mutex_trylock_common+0x15c/0x260 [ 288.199354][ T6021] ? usbg_make_tpg+0xf5/0x550 [ 288.204042][ T6021] ? mutex_lock_nested+0x10/0x10 [ 288.208988][ T6021] down_write+0x36/0x60 [ 288.213148][ T6021] ? configfs_depend_item_unlocked+0x14f/0x430 [ 288.219313][ T6021] configfs_depend_item_unlocked+0x14f/0x430 [ 288.225303][ T6021] usbg_make_tpg+0x1dd/0x550 [ 288.229906][ T6021] ? snprintf+0xe5/0x140 [ 288.234174][ T6021] ? usbg_drop_tport+0x20/0x20 [ 288.238942][ T6021] ? vscnprintf+0x80/0x80 [ 288.243278][ T6021] ? __kmem_cache_alloc_node+0x19d/0x270 [ 288.248943][ T6021] target_fabric_make_tpg+0xa0/0x6d0 [ 288.254238][ T6021] ? target_fabric_release_wwn+0xa0/0xa0 [ 288.259874][ T6021] configfs_mkdir+0x511/0x9e0 [ 288.264563][ T6021] vfs_mkdir+0x386/0x570 [ 288.268814][ T6021] do_mkdirat+0x1d8/0x440 [ 288.273153][ T6021] ? vfs_mkdir+0x570/0x570 [ 288.277577][ T6021] __x64_sys_mkdirat+0x85/0x90 [ 288.282353][ T6021] do_syscall_64+0x4c/0xa0 [ 288.286772][ T6021] ? clear_bhb_loop+0x60/0xb0 [ 288.291452][ T6021] ? clear_bhb_loop+0x60/0xb0 [ 288.296143][ T6021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.302046][ T6021] RIP: 0033:0x7f0e7899e159 [ 288.306465][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.326103][ T6021] RSP: 002b:00007f0e797e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 288.334525][ T6021] RAX: ffffffffffffffda RBX: 00007f0e78c25fa0 RCX: 00007f0e7899e159 [ 288.342508][ T6021] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 288.350493][ T6021] RBP: 00007f0e78a3506b R08: 0000000000000000 R09: 0000000000000000 [ 288.358466][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.366440][ T6021] R13: 00007f0e78c26038 R14: 00007f0e78c25fa0 R15: 00007ffd114c7c68 [ 288.374420][ T6021]