last executing test programs: 7.504067795s ago: executing program 0 (id=6): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfff8, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0064008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="2008020000000200"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7.268095751s ago: executing program 0 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x776, 0x8}) 6.968903449s ago: executing program 0 (id=8): rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 6.813145083s ago: executing program 0 (id=10): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={r7, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, &(0x7f0000000880)=0x88) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.757927259s ago: executing program 0 (id=11): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e", 0xa) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 5.381762798s ago: executing program 3 (id=13): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 5.189925583s ago: executing program 4 (id=5): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5.166779953s ago: executing program 2 (id=3): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000011140100000100000000020000009f51de53865a080001000000000008004b0028000000e4ff03000100000000004a00020000008bcfea1774331b0047fe0dfaffff231e73882ef1e0b31ca4f2c528b86662a3d8c09ba78f6733d344f22836de57b541104123def98cea31e0ec291760a4957d23893b08a255d91eccaa26afe5fb298a7ff2073543eb2482832b465f05025a6b89946a84cb86878ffd1d6b7b929970fca875c8b66f1d968ec1d1a220"], 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25180000000500572bd1ac82bad54c930a290000000000eeff00000083c700000001bf3c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={r1, 0x5d}, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.402835332s ago: executing program 3 (id=17): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000270000042cbd7000fedbdf253e6c4f5934af26ef87440d1b0c1fd427f3651013fffc8be2f5abcd99697d1e34c658f4d90f70a2651ceaef4c76f6879b836c783902bbd563d151136446e02382bc49e476b760ad9a51db43ea445d0505eb938e8ff24d005980ce"], 0xc4}], 0x1}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008894) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.0701375s ago: executing program 4 (id=19): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) 3.120815614s ago: executing program 1 (id=22): write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.941739787s ago: executing program 3 (id=23): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x9, 0x4d6040) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) io_setup(0x800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f00000006c0)=ANY=[]) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000001100)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 2.919718568s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 2.792787502s ago: executing program 2 (id=25): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240)='-{$%}\x88:@^d(*!\x00', 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xe}) openat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r3, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) 2.636442965s ago: executing program 1 (id=26): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.636307395s ago: executing program 3 (id=27): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3bd4, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) getpriority(0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160000012bbd7000fedbdf25ffffffff000000000000000000000000ac14144e2300004e240000020000201d1e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000ac1414380000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03500d00b5"], 0xc8) readv(r0, &(0x7f00000003c0)=[{0x0, 0x500}, {&(0x7f0000000400)=""/105, 0x69}], 0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf0}}, 0x0) 1.542896352s ago: executing program 2 (id=28): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x81, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000140)='1', 0x1, 0x10b, 0x0, 0x0, r2}]) dup3(r2, r0, 0x80000) 1.400309336s ago: executing program 1 (id=29): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10) 1.148455602s ago: executing program 1 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x205, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x30, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c670000000000000000aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.146724522s ago: executing program 2 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 821.8684ms ago: executing program 3 (id=32): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r0, &(0x7f0000001600)='dummy_udc.0', 0xb) 560.072616ms ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='vmxnet3\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmxnet3/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0000:00:03.0\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x0) pipe(0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') mkdirat(r6, &(0x7f0000000300)='./file0\x00', 0x10) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) syz_create_resource$binfmt(&(0x7f0000000280)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00') syz_open_dev$dvb_dvr(&(0x7f00000002c0), 0x4, 0x65c800) syz_open_procfs(0x0, &(0x7f00000003c0)='stack\x00') write(r4, &(0x7f00000001c0)='vmxnet3\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vmxnet3/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x5, 0x3, 0x2, 0x3, 0x4000001, 0x6, 0x7ffffff5}) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) 547.697506ms ago: executing program 3 (id=34): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000270000042cbd7000fedbdf253e6c4f5934af26ef87440d1b0c1fd427f3651013fffc8be2f5abcd99697d1e34c658f4d90f70a2651ceaef4c76f6879b836c783902bbd563d151136446e02382bc49e476b760ad9a51db43ea445d0505eb938e8ff24d005980ce"], 0xc4}], 0x1}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008894) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.37424ms ago: executing program 1 (id=35): write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 73.769690][ T4259] cgroup: Unknown subsys name 'net' [ 73.895523][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.366625][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.767775][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.777323][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.785306][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.799371][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.808434][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.818052][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.826292][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.831821][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.834393][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.848327][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.849275][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.864246][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.864746][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.879547][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.879653][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.894579][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.895194][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.909179][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.910374][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.916761][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.923921][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.931170][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.938863][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.947828][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.953421][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.968017][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.975968][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.033794][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.047536][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.055924][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.435777][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 77.571051][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 77.595853][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 77.622631][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.630941][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.639006][ T4276] device bridge_slave_0 entered promiscuous mode [ 77.653405][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.660662][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.669012][ T4276] device bridge_slave_1 entered promiscuous mode [ 77.697785][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.723588][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.749025][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 77.770079][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.807256][ T4276] team0: Port device team_slave_0 added [ 77.816321][ T4276] team0: Port device team_slave_1 added [ 77.885506][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.896260][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.904362][ T4271] device bridge_slave_0 entered promiscuous mode [ 77.922631][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.929764][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.956282][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.975023][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.982477][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.009224][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.021719][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028807][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.037271][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.051242][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.058623][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.066607][ T4279] device bridge_slave_0 entered promiscuous mode [ 78.095885][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.106236][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.114356][ T4279] device bridge_slave_1 entered promiscuous mode [ 78.171195][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.181486][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.188752][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.196957][ T4281] device bridge_slave_0 entered promiscuous mode [ 78.211029][ T4276] device hsr_slave_0 entered promiscuous mode [ 78.218840][ T4276] device hsr_slave_1 entered promiscuous mode [ 78.245862][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.253806][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.262109][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.271275][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.281046][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.288231][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.296230][ T4281] device bridge_slave_1 entered promiscuous mode [ 78.312089][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.322424][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.329894][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.338042][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.378205][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.404730][ T4271] team0: Port device team_slave_0 added [ 78.439831][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.452138][ T4271] team0: Port device team_slave_1 added [ 78.459751][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.474790][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.489307][ T4279] team0: Port device team_slave_0 added [ 78.506936][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.523561][ T4279] team0: Port device team_slave_1 added [ 78.578471][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.588937][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.618485][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.632045][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.639836][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.666146][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.680745][ T4275] team0: Port device team_slave_0 added [ 78.687723][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.695191][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.721632][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.750344][ T4275] team0: Port device team_slave_1 added [ 78.757765][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.765674][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.793477][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.812182][ T4281] team0: Port device team_slave_0 added [ 78.820802][ T4281] team0: Port device team_slave_1 added [ 78.863237][ T4271] device hsr_slave_0 entered promiscuous mode [ 78.870275][ T4271] device hsr_slave_1 entered promiscuous mode [ 78.876809][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.884752][ T4271] Cannot create hsr debugfs directory [ 78.898563][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.906578][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.934091][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.969866][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.976973][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.003829][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.020586][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 79.026853][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 79.029556][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 79.045152][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.052327][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.079775][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.099787][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 79.099833][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 79.128988][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.136384][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.162724][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.199223][ T4279] device hsr_slave_0 entered promiscuous mode [ 79.206455][ T4279] device hsr_slave_1 entered promiscuous mode [ 79.214404][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.222156][ T4279] Cannot create hsr debugfs directory [ 79.275976][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.283514][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.290330][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.297905][ T4275] Cannot create hsr debugfs directory [ 79.328550][ T4281] device hsr_slave_0 entered promiscuous mode [ 79.336015][ T4281] device hsr_slave_1 entered promiscuous mode [ 79.343029][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.350941][ T4281] Cannot create hsr debugfs directory [ 79.382564][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.424036][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.481112][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.494102][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.700935][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.727992][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.765266][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.777205][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.786551][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.840464][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.852422][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.867255][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.943134][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.964504][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.976153][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.006351][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.037015][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.046424][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.058121][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.072498][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.101886][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.117970][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.126891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.137042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.146976][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.154464][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.163789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.175041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.183729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.190885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.199148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.208553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.240189][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.249390][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.258883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.271960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.283460][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.298794][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.317473][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.333901][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.348305][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.373964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.383031][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.403807][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.413112][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.424616][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.451250][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.463717][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.475866][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.484351][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.496455][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.505149][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.512337][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.521576][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.530642][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.567832][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.582810][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.597542][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.621924][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.629092][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.648366][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.657831][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.667658][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.683995][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.694464][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.704600][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.715567][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.750583][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.770264][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.802779][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.821834][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.835891][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.848091][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.867055][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.900231][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.917182][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.937327][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.987614][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.997079][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.012032][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.019178][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.039024][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.047606][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.082486][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.093545][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.100582][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 81.106504][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.106611][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 81.116973][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.119731][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 81.129286][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.145322][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.156382][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.163690][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.179691][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 81.179727][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 81.213627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.222766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.240294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.249251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.272227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.284754][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.342067][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.355429][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.365620][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.374457][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.383674][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.393851][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.403638][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.413715][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.427927][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.441603][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.450964][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.460041][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.467607][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.477238][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.488253][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.497271][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.517503][ T4276] device veth0_vlan entered promiscuous mode [ 81.544184][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.553938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.565843][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.572999][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.584991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.593977][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.603147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.612335][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.623846][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.631078][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.638952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.648810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.658400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.667142][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.675253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.687970][ T4276] device veth1_vlan entered promiscuous mode [ 81.701250][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.714366][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.734033][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.750277][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.759096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.768320][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.775478][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.783457][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.792229][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.800799][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.808333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.815859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.826495][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.835422][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.854878][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.871213][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.879570][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.888760][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.901245][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.967470][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.987065][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.005549][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.015275][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.025546][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.034739][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.044017][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.053285][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.064197][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.073629][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.082511][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.091807][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.100195][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.110897][ T4276] device veth0_macvtap entered promiscuous mode [ 82.139998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.148939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.158564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.175769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.187460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.209921][ T4276] device veth1_macvtap entered promiscuous mode [ 82.238973][ T4271] device veth0_vlan entered promiscuous mode [ 82.257345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.276930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.288675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.302697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.320418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.348668][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.380697][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.413128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.422489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.431619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.440512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.472931][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.493418][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.507259][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.516254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.528155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.539060][ T4271] device veth1_vlan entered promiscuous mode [ 82.553152][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.574435][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.630527][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.639388][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.704199][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.716976][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.728264][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.743361][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.756319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.766287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.776488][ T4271] device veth0_macvtap entered promiscuous mode [ 82.812644][ T4271] device veth1_macvtap entered promiscuous mode [ 82.821797][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.833045][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.841160][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.848665][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.856836][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.866870][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.888189][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.952142][ T4279] device veth0_vlan entered promiscuous mode [ 82.998281][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.020332][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.043819][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.059688][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.070480][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.090594][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.127540][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.161098][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.180239][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 83.186413][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 83.193026][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 83.209642][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.222446][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.235074][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.246119][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.254013][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.262841][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 83.269587][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 83.276022][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.301899][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.320191][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.327788][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.358366][ T4279] device veth1_vlan entered promiscuous mode [ 83.368367][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.383410][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.394075][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411921][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490929][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499170][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.518498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.543273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.553751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.567420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.578244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.666117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.682357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.693606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.703678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.717837][ T4279] device veth0_macvtap entered promiscuous mode [ 83.733733][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.736989][ T4281] device veth0_vlan entered promiscuous mode [ 83.752806][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.760575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.769111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.776927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.785727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.808886][ T4279] device veth1_macvtap entered promiscuous mode [ 83.824357][ T4281] device veth1_vlan entered promiscuous mode [ 83.855858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.870966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.880630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.890358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.917981][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.928646][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.939318][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.950055][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.963811][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.008457][ T4275] device veth0_vlan entered promiscuous mode [ 84.017318][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.026785][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.036778][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.045853][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.054963][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.068065][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.082171][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.092812][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.103759][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.115784][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.137917][ T4275] device veth1_vlan entered promiscuous mode [ 84.151611][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.160380][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.169325][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.180570][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.189172][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.206239][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.215014][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.238062][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.257943][ T4281] device veth0_macvtap entered promiscuous mode [ 84.268482][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282540][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.292559][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.302827][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.339864][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.356795][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.366297][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.384485][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.419771][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.427664][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.436892][ T4275] device veth0_macvtap entered promiscuous mode [ 84.454679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.486971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.497313][ T4275] device veth1_macvtap entered promiscuous mode [ 84.515866][ T4281] device veth1_macvtap entered promiscuous mode [ 84.548222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.578554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.589369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.604512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.699241][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.729037][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.739701][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.750988][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.761089][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.772239][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.785120][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.798745][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.810539][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.821261][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.833937][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.844322][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.855305][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.867794][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.884969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.913261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.949204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.984268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.995042][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.017242][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.029308][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.047207][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.059362][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.070413][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.080578][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.091956][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104006][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.115743][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.151628][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166768][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.175911][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.196615][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.226520][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.270298][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 85.276383][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 85.282550][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 85.322137][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.340608][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 85.346742][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 85.359584][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.377151][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.387882][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.404043][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.416001][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.433727][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.445633][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.465064][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.491373][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.501562][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.521672][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.530733][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547786][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586643][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.614458][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.663615][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.718398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.788379][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.831493][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.841481][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.972786][ T4378] kAFS: unable to lookup cell '/,c¾ûL' [ 86.004582][ T4378] binder: BINDER_SET_CONTEXT_MGR already set [ 86.010995][ T4378] binder: 4374:4378 ioctl 4018620d 200000004a80 returned -16 [ 86.021489][ T4378] Zero length message leads to an empty skb [ 86.523370][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.675545][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.789270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.861540][ T1203] cfg80211: failed to load regulatory.db [ 86.905839][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.959591][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.035709][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.043280][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.069180][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.114250][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132849][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.149601][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.170364][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.691239][ T4402] sctp: [Deprecated]: syz.2.3 (pid 4402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.691239][ T4402] Use struct sctp_sack_info instead [ 88.070072][ T4336] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.272216][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 88.334459][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.407005][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 88.489727][ T4336] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 88.555937][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.573381][ T4336] usb 3-1: Product: syz [ 88.587272][ T4336] usb 3-1: Manufacturer: syz [ 88.616125][ T4336] usb 3-1: SerialNumber: syz [ 88.672014][ T4336] usb 3-1: config 0 descriptor?? [ 88.788022][ T4422] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 88.923498][ T4336] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 89.118256][ T4317] usb 3-1: USB disconnect, device number 2 [ 90.970871][ T4436] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 92.159726][ T4323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.235087][ T93] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.246236][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 90150) [ 92.258329][ T93] Buffer I/O error on device sda1, logical block 90112 [ 92.265635][ T93] device offline error, dev sda, sector 729390 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.277011][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 91173) [ 92.288742][ T93] Buffer I/O error on device sda1, logical block 91135 [ 92.295771][ T93] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.307196][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 94246) [ 92.319047][ T93] Buffer I/O error on device sda1, logical block 94208 [ 92.327614][ T93] device offline error, dev sda, sector 766030 op 0x1:(WRITE) flags 0x800 phys_seg 15 prio class 2 [ 92.340986][ T4438] device offline error, dev sda, sector 705550 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.346515][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 95753) [ 92.365066][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 95768) [ 92.365580][ T4346] Buffer I/O error on device sda1, logical block 95715 [ 92.377287][ T93] Buffer I/O error on device sda1, logical block 95730 [ 92.391426][ T93] device offline error, dev sda, sector 766198 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 92.402444][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 95774) [ 92.414564][ T93] Buffer I/O error on device sda1, logical block 95736 [ 92.422049][ T93] Buffer I/O error on device sda1, logical block 95737 [ 92.430231][ T93] Buffer I/O error on device sda1, logical block 95738 [ 92.437493][ T93] Buffer I/O error on device sda1, logical block 95739 [ 92.444670][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.454715][ T93] Buffer I/O error on device sda1, logical block 95740 [ 92.461952][ T93] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.472659][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 96294) [ 92.478317][ T4438] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88193) [ 92.485850][ T93] device offline error, dev sda, sector 778518 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2 [ 92.485882][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 97314) [ 92.520973][ T93] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 97317) [ 92.533766][ T93] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.545184][ T93] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 92.558246][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.568529][ T4323] usb 1-1: Dual-Role OTG device on HNP port [ 92.575483][ T4323] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 92.596617][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.606673][ T3600] Aborting journal on device sda1-8. [ 92.618514][ T93] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 92.621088][ T4461] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.33: Detected aborted journal [ 92.632333][ C0] ------------[ cut here ]------------ [ 92.644026][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 92.651044][ C0] WARNING: CPU: 0 PID: 4323 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 92.661170][ C0] Modules linked in: [ 92.665085][ C0] CPU: 0 PID: 4323 Comm: kworker/0:6 Not tainted syzkaller #0 [ 92.672555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.682620][ C0] Workqueue: usb_hub_wq hub_event [ 92.687665][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 92.693052][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 92.712668][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 92.718742][ C0] RAX: 57ec450e2eb82800 RBX: ffff8881467380e0 RCX: ffff88801a700000 [ 92.726723][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 92.734730][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 92.742725][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 92.750801][ C0] R13: ffff88814673810d R14: ffff8881467380e8 R15: ffff888030af213a [ 92.758875][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.767817][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.774418][ C0] CR2: 000000110c2e0ce6 CR3: 0000000056355000 CR4: 00000000003506f0 [ 92.782509][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.790505][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.798829][ C0] Call Trace: [ 92.802129][ C0] [ 92.804987][ C0] hidg_set_alt+0x126/0xa00 [ 92.809764][ C0] ? usb_gadget_set_state+0x142/0x310 [ 92.815154][ C0] set_config+0x6e8/0xf70 [ 92.819673][ C0] composite_setup+0x194c/0x2b00 [ 92.824646][ C0] configfs_composite_setup+0xc3/0x100 [ 92.830119][ C0] dummy_timer+0x12ea/0x3420 [ 92.834731][ C0] ? __lock_acquire+0x1465/0x7c40 [ 92.839787][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 92.844824][ C0] ? lock_chain_count+0x20/0x20 [ 92.849700][ C0] ? dummy_free_streams+0x520/0x520 [ 92.855113][ C0] __hrtimer_run_queues+0x522/0xc90 [ 92.860416][ C0] ? dummy_free_streams+0x520/0x520 [ 92.865809][ C0] ? hrtimer_interrupt+0x980/0x980 [ 92.870950][ C0] hrtimer_run_softirq+0x173/0x290 [ 92.876099][ C0] handle_softirqs+0x291/0x910 [ 92.880969][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 92.885830][ C0] ? do_softirq+0x210/0x210 [ 92.890436][ C0] ? hrtimer_interrupt+0x775/0x980 [ 92.895583][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 92.900789][ C0] __irq_exit_rcu+0x13b/0x230 [ 92.905495][ C0] ? irq_exit_rcu+0x20/0x20 [ 92.910015][ C0] irq_exit_rcu+0x5/0x20 [ 92.914533][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 92.920347][ C0] [ 92.923309][ C0] [ 92.926245][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 92.932236][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 92.938841][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 89 1e f7 65 8b 05 b0 3a c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 92.958933][ C0] RSP: 0018:ffffc900049eee80 EFLAGS: 00000206 [ 92.965051][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 57ec450e2eb82800 [ 92.973225][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 92.981225][ C0] RBP: ffffc900049eef18 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 92.989209][ C0] R10: dffffc0000000000 R11: fffffbfff2162056 R12: dffffc0000000000 [ 92.997186][ C0] R13: ffff8880b8e28440 R14: ffff8880b8e28440 R15: 1ffff9200093ddd0 [ 93.005285][ C0] ? _raw_spin_unlock+0x40/0x40 [ 93.010166][ C0] ? rcu_is_watching+0x11/0xa0 [ 93.014971][ C0] __mod_timer+0x925/0xd20 [ 93.019421][ C0] schedule_timeout+0x17f/0x2d0 [ 93.024388][ C0] ? console_conditional_schedule+0x40/0x40 [ 93.030286][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.036294][ C0] ? update_process_times+0x1b0/0x1b0 [ 93.041682][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.047586][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.052791][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 93.057997][ C0] ? wait_for_completion_timeout+0x267/0x5c0 [ 93.063992][ C0] wait_for_completion_timeout+0x2c2/0x5c0 [ 93.069911][ C0] ? wait_for_completion+0x590/0x590 [ 93.075219][ C0] usb_start_wait_urb+0x1e6/0x580 [ 93.080260][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 93.086306][ C0] usb_control_msg+0x231/0x3e0 [ 93.091084][ C0] usb_set_configuration+0x11a7/0x2030 [ 93.096573][ C0] usb_generic_driver_probe+0x89/0x150 [ 93.102167][ C0] usb_probe_device+0x126/0x250 [ 93.107027][ C0] ? usb_register_device_driver+0x230/0x230 [ 93.112931][ C0] really_probe+0x24a/0xb40 [ 93.117446][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 93.122657][ C0] __driver_probe_device+0x1f5/0x390 [ 93.127949][ C0] driver_probe_device+0x4f/0x420 [ 93.132987][ C0] __device_attach_driver+0x2c6/0x510 [ 93.138379][ C0] ? coredump_store+0x90/0x90 [ 93.143241][ C0] bus_for_each_drv+0x184/0x210 [ 93.148114][ C0] ? coredump_store+0x90/0x90 [ 93.152799][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 93.158533][ C0] __device_attach+0x2a7/0x480 [ 93.163307][ C0] ? device_attach+0x20/0x20 [ 93.167907][ C0] ? kobject_uevent_env+0x364/0x890 [ 93.173201][ C0] bus_probe_device+0xba/0x1d0 [ 93.177971][ C0] device_add+0xbcf/0x1050 [ 93.182402][ C0] usb_new_device+0xa01/0x15e0 [ 93.187183][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 93.192051][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.197257][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 93.202474][ C0] hub_event+0x2b2f/0x5200 [ 93.206936][ C0] ? hub_post_resume+0x120/0x120 [ 93.211886][ C0] ? read_lock_is_recursive+0x10/0x10 [ 93.217286][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.223188][ C0] ? _raw_spin_unlock+0x40/0x40 [ 93.228047][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.233253][ C0] ? process_one_work+0x7b4/0x1160 [ 93.238402][ C0] process_one_work+0x8ab/0x1160 [ 93.243383][ C0] ? worker_detach_from_pool+0x240/0x240 [ 93.249034][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.254076][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.259636][ C0] ? wq_worker_running+0x97/0x190 [ 93.264685][ C0] worker_thread+0xaf5/0x12a0 [ 93.269383][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.275326][ C0] kthread+0x29d/0x330 [ 93.279405][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 93.284440][ C0] ? kthread_blkcg+0xd0/0xd0 [ 93.289037][ C0] ret_from_fork+0x1f/0x30 [ 93.293478][ C0] [ 93.296509][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.303810][ C0] CPU: 0 PID: 4323 Comm: kworker/0:6 Not tainted syzkaller #0 [ 93.311279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.321342][ C0] Workqueue: usb_hub_wq hub_event [ 93.326384][ C0] Call Trace: [ 93.329699][ C0] [ 93.332548][ C0] dump_stack_lvl+0x188/0x24e [ 93.337243][ C0] ? memcpy+0x3c/0x60 [ 93.341232][ C0] ? show_regs_print_info+0x12/0x12 [ 93.346436][ C0] ? load_image+0x410/0x410 [ 93.350958][ C0] panic+0x2d3/0x710 [ 93.354970][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 93.359490][ C0] ? ret_from_fork+0x1f/0x30 [ 93.364097][ C0] __warn+0x2f8/0x4f0 [ 93.368085][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 93.372971][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 93.377873][ C0] report_bug+0x2ba/0x4f0 [ 93.382335][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 93.387119][ C0] handle_bug+0x3a/0x70 [ 93.391292][ C0] exc_invalid_op+0x16/0x40 [ 93.395827][ C0] asm_exc_invalid_op+0x16/0x20 [ 93.400691][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 93.406070][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 93.425767][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 93.431841][ C0] RAX: 57ec450e2eb82800 RBX: ffff8881467380e0 RCX: ffff88801a700000 [ 93.439836][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 93.447819][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 93.455885][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 93.463878][ C0] R13: ffff88814673810d R14: ffff8881467380e8 R15: ffff888030af213a [ 93.471881][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 93.476747][ C0] hidg_set_alt+0x126/0xa00 [ 93.481445][ C0] ? usb_gadget_set_state+0x142/0x310 [ 93.486824][ C0] set_config+0x6e8/0xf70 [ 93.491332][ C0] composite_setup+0x194c/0x2b00 [ 93.496327][ C0] configfs_composite_setup+0xc3/0x100 [ 93.501836][ C0] dummy_timer+0x12ea/0x3420 [ 93.506462][ C0] ? __lock_acquire+0x1465/0x7c40 [ 93.511524][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 93.516557][ C0] ? lock_chain_count+0x20/0x20 [ 93.521512][ C0] ? dummy_free_streams+0x520/0x520 [ 93.526755][ C0] __hrtimer_run_queues+0x522/0xc90 [ 93.531966][ C0] ? dummy_free_streams+0x520/0x520 [ 93.537175][ C0] ? hrtimer_interrupt+0x980/0x980 [ 93.542310][ C0] hrtimer_run_softirq+0x173/0x290 [ 93.547438][ C0] handle_softirqs+0x291/0x910 [ 93.552227][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 93.557085][ C0] ? do_softirq+0x210/0x210 [ 93.561612][ C0] ? hrtimer_interrupt+0x775/0x980 [ 93.566730][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 93.571936][ C0] __irq_exit_rcu+0x13b/0x230 [ 93.576622][ C0] ? irq_exit_rcu+0x20/0x20 [ 93.581138][ C0] irq_exit_rcu+0x5/0x20 [ 93.585385][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 93.591031][ C0] [ 93.593992][ C0] [ 93.596929][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.602922][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 93.609434][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 89 1e f7 65 8b 05 b0 3a c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 93.629071][ C0] RSP: 0018:ffffc900049eee80 EFLAGS: 00000206 [ 93.635159][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 57ec450e2eb82800 [ 93.643137][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 93.651151][ C0] RBP: ffffc900049eef18 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 93.659152][ C0] R10: dffffc0000000000 R11: fffffbfff2162056 R12: dffffc0000000000 [ 93.667152][ C0] R13: ffff8880b8e28440 R14: ffff8880b8e28440 R15: 1ffff9200093ddd0 [ 93.675177][ C0] ? _raw_spin_unlock+0x40/0x40 [ 93.680047][ C0] ? rcu_is_watching+0x11/0xa0 [ 93.684835][ C0] __mod_timer+0x925/0xd20 [ 93.689272][ C0] schedule_timeout+0x17f/0x2d0 [ 93.694133][ C0] ? console_conditional_schedule+0x40/0x40 [ 93.700033][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.706037][ C0] ? update_process_times+0x1b0/0x1b0 [ 93.711433][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.717345][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.722545][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 93.727749][ C0] ? wait_for_completion_timeout+0x267/0x5c0 [ 93.733748][ C0] wait_for_completion_timeout+0x2c2/0x5c0 [ 93.739593][ C0] ? wait_for_completion+0x590/0x590 [ 93.744893][ C0] usb_start_wait_urb+0x1e6/0x580 [ 93.749929][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 93.755755][ C0] usb_control_msg+0x231/0x3e0 [ 93.760537][ C0] usb_set_configuration+0x11a7/0x2030 [ 93.766033][ C0] usb_generic_driver_probe+0x89/0x150 [ 93.771511][ C0] usb_probe_device+0x126/0x250 [ 93.776390][ C0] ? usb_register_device_driver+0x230/0x230 [ 93.782291][ C0] really_probe+0x24a/0xb40 [ 93.786807][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 93.792012][ C0] __driver_probe_device+0x1f5/0x390 [ 93.797565][ C0] driver_probe_device+0x4f/0x420 [ 93.802613][ C0] __device_attach_driver+0x2c6/0x510 [ 93.808164][ C0] ? coredump_store+0x90/0x90 [ 93.812863][ C0] bus_for_each_drv+0x184/0x210 [ 93.817734][ C0] ? coredump_store+0x90/0x90 [ 93.822592][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 93.828324][ C0] __device_attach+0x2a7/0x480 [ 93.833092][ C0] ? device_attach+0x20/0x20 [ 93.837708][ C0] ? kobject_uevent_env+0x364/0x890 [ 93.842913][ C0] bus_probe_device+0xba/0x1d0 [ 93.847678][ C0] device_add+0xbcf/0x1050 [ 93.852107][ C0] usb_new_device+0xa01/0x15e0 [ 93.856884][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 93.861741][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.867119][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 93.872329][ C0] hub_event+0x2b2f/0x5200 [ 93.876809][ C0] ? hub_post_resume+0x120/0x120 [ 93.881752][ C0] ? read_lock_is_recursive+0x10/0x10 [ 93.887220][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.893119][ C0] ? _raw_spin_unlock+0x40/0x40 [ 93.898073][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.903279][ C0] ? process_one_work+0x7b4/0x1160 [ 93.908416][ C0] process_one_work+0x8ab/0x1160 [ 93.913373][ C0] ? worker_detach_from_pool+0x240/0x240 [ 93.919033][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.924092][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 93.929664][ C0] ? wq_worker_running+0x97/0x190 [ 93.934713][ C0] worker_thread+0xaf5/0x12a0 [ 93.939415][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.945501][ C0] kthread+0x29d/0x330 [ 93.949579][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 93.954614][ C0] ? kthread_blkcg+0xd0/0xd0 [ 93.959232][ C0] ret_from_fork+0x1f/0x30 [ 93.963854][ C0] [ 93.967057][ C0] Kernel Offset: disabled [ 93.971426][ C0] Rebooting in 86400 seconds..