last executing test programs: 4.832986462s ago: executing program 4 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xe0000003}) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x595f, 0x40, 0x0, 0x51, 0x0, r2}, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) r6 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000600)={0x0, 0xc3b3, 0x80, 0x1, 0x2082}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='befs\x00', 0x2001000, &(0x7f0000000440)='\x00') r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000370400000fc8609e1800000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000000060003008100000006000e0002000000"], 0x4c}}, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0xd3, @time={0xffff, 0x6}, 0x0, {0x0, 0xfd}}) 4.398057673s ago: executing program 4 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0xffa8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) getegid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 3.922285394s ago: executing program 4 (id=225): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000002400)={0x2, 0x2, 0x1}) 3.687349659s ago: executing program 4 (id=228): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) 3.469962395s ago: executing program 4 (id=232): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:02.0', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF ', 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:03.0', 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 2.87466661s ago: executing program 1 (id=241): setns(0xc9, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @any, 0x6}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="35000010", @ANYRES16, @ANYBLOB="010028bd7000fedbdf25020000001400020076657468315f6d6163767461700000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 2.438061501s ago: executing program 1 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r2, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.349995353s ago: executing program 4 (id=246): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000002400)={0x2, 0x2, 0x1}) 2.227718186s ago: executing program 0 (id=248): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000ac5a578400b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x9400000}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.227264256s ago: executing program 2 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r4, &(0x7f00000061c0)='dir=1-', 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x2}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20048004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c01000010000100feffffff00010000fe88000000000000000000000000000120010000000000000000000000000000000107144e2300050000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffff0000000000000000000000000000000800000000000001000000000000000300000008000000000000002abd7000043500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100010000000c001c00", @ANYRES32=0x0, @ANYBLOB="0000729403015050fe8242c38692fd0000"], 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) 2.078157829s ago: executing program 3 (id=250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2.04346899s ago: executing program 0 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) 1.988148012s ago: executing program 1 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0xffa8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) getegid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.746278617s ago: executing program 2 (id=253): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000002400)={0x2, 0x2, 0x1}) 1.746082107s ago: executing program 3 (id=255): setns(0xc9, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @any, 0x6}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="35000010", @ANYRES16, @ANYBLOB="010028bd7000fedbdf25020000001400020076657468315f6d6163767461700000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 1.314148428s ago: executing program 2 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.004713425s ago: executing program 0 (id=257): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='3', 0x1) 919.812148ms ago: executing program 3 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}}, 0x0) 872.743829ms ago: executing program 1 (id=259): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001b00)=[{&(0x7f0000000180)="ee44eee46e46", 0x6}, {&(0x7f0000000080)=',', 0x1}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) getsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x4) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffe44) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r8, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r7, 0x0}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r10, 0x113, 0x0, 0x400, {0x41}, [{@nsim={{0xe}, {0xffffffffffffff08, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x800) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3}}, 0x1c}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') read$FUSE(r11, &(0x7f0000000500)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 839.16084ms ago: executing program 2 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0xe6}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r7, @ANYBLOB="0500002ba07bcfb6005da60000000800", @ANYRES32=r8, @ANYBLOB="080005"], 0x24}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffb, 0x9, 0x0, 0x0) write(r1, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f046}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000200)={0x0, 0xffffffffffffff90, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100000000000000e6ff0800000000060000050000004e00009eb762300700479df7cf90aaf500"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x40048d1) read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/43, 0x2b) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x80, 0x4, 0xa, 0x100, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61f6c42b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e801669}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a5cac68}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 758.022812ms ago: executing program 0 (id=261): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 642.339854ms ago: executing program 3 (id=262): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000ac5a578400b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x9400000}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 596.586966ms ago: executing program 0 (id=263): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x4000000000002, {0x1, 0x0, 0x2}, 0xfe}, 0x18) writev(r2, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x8, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x4000, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40789440, &(0x7f0000000780)={&(0x7f0000000740)=[{&(0x7f0000000200)="8da7635e73e40cc32d91d0374e64fdadf5f5eafff3a54523208fd090371839b8e08dae1997808806ec8273780aa4451c0df03b2d01ad0af9611c55b95fb123711a1d0eb28b5d6ea578236666c7b212faef5f0d8f76e6090c845f4fe9c9b45febfea446380eabf6944e2fe25c89761f32f90c11a6b85a9b217b7405de0271faf004f975cae3e2382b2825fcb575ae8cf2c1c3829710f91bfe94a76870920b231b499b2cd19f209039f35a5e88eeff96f69024e73df1871badb884f271e6f9c7e1f0b8161330a4955be6a9823d922bb166bf083f0abd384d43b5de52fa28f78e97903ed730956a32052a91247a8b0f", 0xee}, {&(0x7f00000003c0)="16600b5abde344bded7af0d7fee34f61d4984103819c75010496ea192fa3af9bd0234c2b3c704ad0582a8c12f4f108b8f8b8b2e73894525a21d6de23efbf5454cec6bb457f419e1e86285115c21c2b3392df333954371de9a25a2dc6658bc20f7f026bbdd43fa4cc789e958ae48d471d022ac17553f7ea22", 0x78}, {&(0x7f00000004c0)="7b8f69a618ce16fa410d3106f6e4e3785b8e86de0df89867bc608b228cc3a2ca8ef010d5681fee6af6c533e2a001bad297ebb9436099c6a00b2718c6b85fc06a174af72a8ea1a5c5cf924bf9538e9959f8", 0x51}, {&(0x7f0000000640)="883fdf35e2f4f86dc79fbec3994f07d12c74b813c41a7e5822283ddcdb3d9e8dd9555823d759a5938444accd84df006992aeb4c6f4ffd1e291f682792538666010e0bd0530cf6e6797018794e2ae", 0x4e}, {&(0x7f00000006c0)="5a37180905d885d680645d255fb5a8366fdec433b3bf39ef767b80a05c41436bc08e63e7689fe4adaa2b0c735342949bdf0eb98c3a96e0148f476fdf177a261d504d243f7e9350e84e208301", 0x4c}], 0x5, 0x7f, 0x0, 0xff, 0x6, 0x7ff, 0x0, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) 311.972513ms ago: executing program 3 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r2, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 309.861922ms ago: executing program 1 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r4, &(0x7f00000061c0)='dir=1-', 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c01000010000100feffffff00010000fe88000000000000000000000000000120010000000000000000000000000000000107144e2300050000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffff0000000000000000000000000000000800000000000001000000000000000300000008000000000000002abd7000043500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100010000000c001c00", @ANYRES32=0x0, @ANYBLOB="0000729403015050fe8242c38692fd0000"], 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) 309.589042ms ago: executing program 2 (id=266): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000002400)={0x2, 0x2, 0x1}) 300.117693ms ago: executing program 0 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000019500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r0], 0x14) setitimer(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe4f) ioctl$TCXONC(r3, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_open_dev$vcsn(&(0x7f00000001c0), 0xfffffffffffffffc, 0x240041) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 151.365976ms ago: executing program 3 (id=268): setns(0xc9, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @any, 0x6}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="35000010", @ANYRES16, @ANYBLOB="010028bd7000fedbdf25020000001400020076657468315f6d6163767461700000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 116.767397ms ago: executing program 2 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0xffa8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) getegid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x5}, {0x20, 0x5}}, 0x24, 0x0) 0s ago: executing program 1 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 73.927936][ T4263] cgroup: Unknown subsys name 'net' [ 74.060858][ T4263] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.570095][ T4263] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.133276][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.141966][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.145219][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.149685][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.158259][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.164970][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.171248][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.177761][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.186104][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.191925][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.198940][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.206043][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.212815][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.219612][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.227270][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.234973][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.242359][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.254446][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.254975][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.262061][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.270059][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.276367][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.283468][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.290078][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.297331][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.303978][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.311156][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.324927][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.332960][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.378416][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.696864][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 77.793161][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 77.885473][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.893292][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.917585][ T4277] device bridge_slave_0 entered promiscuous mode [ 77.958015][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.965478][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.974110][ T4277] device bridge_slave_1 entered promiscuous mode [ 77.981951][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 78.037411][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.052674][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 78.079687][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.093491][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.138517][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.146258][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.154511][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.187653][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.195034][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.202888][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.212299][ T4277] team0: Port device team_slave_0 added [ 78.251723][ T4277] team0: Port device team_slave_1 added [ 78.261364][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.268586][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.276877][ T4278] device bridge_slave_0 entered promiscuous mode [ 78.306950][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.315928][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.323658][ T4278] device bridge_slave_1 entered promiscuous mode [ 78.340238][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.369897][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.379959][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.387864][ T4286] device bridge_slave_0 entered promiscuous mode [ 78.397879][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.417949][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.424992][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.451215][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.470347][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.478224][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.486756][ T4286] device bridge_slave_1 entered promiscuous mode [ 78.508923][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.516227][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.524158][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.532356][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.539628][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.565646][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.579229][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.604744][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.614201][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.621323][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.629956][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.645187][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.657354][ T4276] team0: Port device team_slave_0 added [ 78.665130][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.722985][ T4277] device hsr_slave_0 entered promiscuous mode [ 78.730030][ T4277] device hsr_slave_1 entered promiscuous mode [ 78.740568][ T4276] team0: Port device team_slave_1 added [ 78.749061][ T4286] team0: Port device team_slave_0 added [ 78.770647][ T4278] team0: Port device team_slave_0 added [ 78.786474][ T4286] team0: Port device team_slave_1 added [ 78.794141][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.813671][ T4278] team0: Port device team_slave_1 added [ 78.826709][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.861592][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.868624][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.895817][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.938560][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.945812][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.972095][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.985356][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.992340][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.019041][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.032695][ T4275] team0: Port device team_slave_0 added [ 79.043979][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.050957][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.078380][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.095284][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.102356][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.128962][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.145366][ T4275] team0: Port device team_slave_1 added [ 79.151717][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.158921][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.188012][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.254085][ T4286] device hsr_slave_0 entered promiscuous mode [ 79.260916][ T4286] device hsr_slave_1 entered promiscuous mode [ 79.270930][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.278852][ T4286] Cannot create hsr debugfs directory [ 79.319327][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.329164][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.335803][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.343357][ T4276] Cannot create hsr debugfs directory [ 79.368852][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.376043][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.402226][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.420875][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.428015][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.454684][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.454726][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 79.471696][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 79.471716][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 79.477995][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 79.483960][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 79.512332][ T4278] device hsr_slave_0 entered promiscuous mode [ 79.522775][ T4278] device hsr_slave_1 entered promiscuous mode [ 79.529931][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.540031][ T4278] Cannot create hsr debugfs directory [ 79.621022][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.628160][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.635452][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.643043][ T4275] Cannot create hsr debugfs directory [ 79.869894][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.881496][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.908079][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.923614][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.971882][ T4286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.983000][ T4286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.993469][ T4286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.005493][ T4286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.088061][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.098647][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.109530][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.120260][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.229350][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.260744][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.269551][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.281751][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.326989][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.334232][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.349253][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.372111][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.380598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.390668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.400289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.408262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.445649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.455008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.464207][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471824][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.481575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.500664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.510524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.517732][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.525681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.534581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.542964][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.550176][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.558566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.567315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.580521][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.590738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.602711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.611596][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.618805][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.654774][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.665731][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.676306][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.698980][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.722065][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.733244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.742952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.752337][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.761107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.771119][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.780024][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.798794][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.810830][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.822333][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.832170][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.842291][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.851833][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.867818][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.883349][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.893223][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.900365][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.908944][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.927756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.937780][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.947521][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.956788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.982044][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.006214][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.027317][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.037136][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.047482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.056741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.065353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.075086][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.083667][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.094791][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.109709][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.116902][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.161047][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.174363][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.195482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.203675][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.222379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.237991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.249985][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.289066][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.296615][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.309914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.318854][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.328145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.337449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.378473][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.410685][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.420863][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.430753][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.454976][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.468788][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.502885][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.514569][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.514652][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 81.528400][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 81.534566][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 81.534762][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 81.540574][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 81.611254][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.635349][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.675851][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.682967][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.697886][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.710395][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.723267][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.730453][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.741839][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.792909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.802528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.810943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.824524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.833472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.844465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.853239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.861570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.869753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.879495][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.896780][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.912977][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.924605][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.940873][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.970439][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.000195][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.012249][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.021597][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.038105][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.051845][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.063185][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.091363][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.125750][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.139029][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.172745][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.196488][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.234537][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.251481][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.265610][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.272753][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.287687][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.298261][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.307079][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.314227][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.322172][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.336152][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.355012][ T4277] device veth0_vlan entered promiscuous mode [ 82.368824][ T4277] device veth1_vlan entered promiscuous mode [ 82.386192][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.396673][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.408256][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.419532][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.433350][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.447025][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.461066][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.470648][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.480061][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.503636][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.514056][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.567584][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.582220][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.595569][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.608545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.624974][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.645372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.654508][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.663187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.672852][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.681588][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.707987][ T4277] device veth0_macvtap entered promiscuous mode [ 82.728547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.746034][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.755482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.776097][ T4277] device veth1_macvtap entered promiscuous mode [ 82.783276][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.809954][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.822903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.838703][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.879865][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.896680][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.917897][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.945433][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.958975][ T4276] device veth0_vlan entered promiscuous mode [ 82.987757][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.996833][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.007107][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.015728][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.024883][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.032841][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.048704][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.067835][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.078135][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.095268][ T4276] device veth1_vlan entered promiscuous mode [ 83.115420][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.143850][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.152630][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.161533][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.207679][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.220040][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.230298][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.244716][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.253463][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.282006][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.292094][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.321024][ T4275] device veth0_vlan entered promiscuous mode [ 83.339705][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.355202][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.365483][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.374544][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.382970][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.391918][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.400397][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.409014][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.418730][ T4276] device veth0_macvtap entered promiscuous mode [ 83.438822][ T4286] device veth0_vlan entered promiscuous mode [ 83.452482][ T4275] device veth1_vlan entered promiscuous mode [ 83.460780][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.469304][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.477823][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.485948][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.494143][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.502109][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.514493][ T4276] device veth1_macvtap entered promiscuous mode [ 83.530487][ T4286] device veth1_vlan entered promiscuous mode [ 83.594023][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 83.600216][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 83.606660][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 83.612703][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 83.619148][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 83.622880][ T4286] device veth0_macvtap entered promiscuous mode [ 83.639555][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.651493][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.667960][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.682358][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.691476][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.700869][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.710524][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.719812][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.729306][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.738198][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.747071][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.756570][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.779661][ T4286] device veth1_macvtap entered promiscuous mode [ 83.792082][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.807238][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.819266][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.826870][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.836563][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.845841][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.855004][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.863577][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.874782][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.883361][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.921522][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924304][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.939075][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.948392][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.957467][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.966750][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.988132][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.000752][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.011445][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.022021][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.035646][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.049900][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.059028][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.071968][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.081264][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.089918][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.098395][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.106692][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.127228][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.137816][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.148790][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.163185][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.176587][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.184090][ T4278] device veth0_vlan entered promiscuous mode [ 84.200044][ T4275] device veth0_macvtap entered promiscuous mode [ 84.213333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.223631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.232882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.246299][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.256275][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.265126][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.274285][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.303456][ T4278] device veth1_vlan entered promiscuous mode [ 84.313231][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.342896][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.356232][ T4275] device veth1_macvtap entered promiscuous mode [ 84.386098][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.397847][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.409322][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.417819][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.490019][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.520499][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.536724][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.549827][ T4278] device veth0_macvtap entered promiscuous mode [ 84.557083][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.577362][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.615067][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.626612][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.639440][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.650781][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.661975][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.674323][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.690330][ T4278] device veth1_macvtap entered promiscuous mode [ 84.699238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.717486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.729042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.737685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.748138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.761965][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.773212][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.784994][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.797067][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.807418][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.817945][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.830717][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.859163][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.871740][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.885906][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.899068][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.911195][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.920773][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931764][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943935][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959915][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.984507][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.999668][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.012032][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.026067][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.043562][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.054994][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.065578][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.077389][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.091605][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.111015][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.128349][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.160744][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.172527][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.206218][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.214240][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.224333][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.235108][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.246894][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.257538][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.267597][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.278629][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.290498][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.303559][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.313149][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.322325][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.331445][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.360832][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.375663][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.383534][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.419416][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.426456][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.448544][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.674465][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 85.674483][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 85.674514][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 85.680511][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 85.686705][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 85.743860][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.751949][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.876459][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.909487][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.982649][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.005547][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.054009][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.098640][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.117104][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.125719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.163285][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.199056][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.431515][ T4373] jffs2: notice: (4373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.467770][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.672190][ T4374] usbip-vudc usbip-vudc.0: gadget not bound [ 86.726085][ T14] cfg80211: failed to load regulatory.db [ 89.613730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 90.065579][ T4404] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 91.444496][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.452503][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.014265][ T4362] Set syz1 is full, maxelem 65536 reached [ 92.330841][ T4418] ======================================================= [ 92.330841][ T4418] WARNING: The mand mount option has been deprecated and [ 92.330841][ T4418] and is ignored by this kernel. Remove the mand [ 92.330841][ T4418] option from the mount to silence this warning. [ 92.330841][ T4418] ======================================================= [ 92.409263][ T4418] overlayfs: failed to resolve './file1/file0': -2 [ 93.902643][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.896948][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.624722][ T4506] jffs2: notice: (4506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.364258][ T3600] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.573991][ T3600] usb 2-1: Using ep0 maxpacket: 8 [ 96.593537][ T3600] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.623204][ T3600] usb 2-1: config 0 has no interface number 0 [ 96.643491][ T3600] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 96.669970][ T3600] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 96.732733][ T4404] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.742891][ T3600] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.746330][ T4404] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.882125][ T3600] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 96.892506][ T3600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.906157][ T3600] usb 2-1: config 0 descriptor?? [ 96.916840][ T3600] ldusb 2-1:0.55: Interrupt in endpoint not found [ 97.796004][ T4404] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.826263][ T4404] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.356109][ T4326] usb 2-1: USB disconnect, device number 2 [ 99.153713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.273741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.293741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.313729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.333736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.353730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.383732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.403731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.423732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.857053][ T4533] process 'syz.2.26' launched '/dev/fd/-1' with NULL argv: empty string added [ 100.444789][ T4538] Zero length message leads to an empty skb [ 100.869070][ T4550] smc: net device vlan1 applied user defined pnetid SYZ2 [ 100.923789][ T4326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.903857][ T4326] usb 2-1: Using ep0 maxpacket: 8 [ 101.910500][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.953564][ T4326] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.970129][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 102.007435][ T4326] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 102.039337][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.058176][ T4326] usb 2-1: Product: syz [ 102.072585][ T4326] usb 2-1: Manufacturer: syz [ 102.094073][ T4326] usb 2-1: SerialNumber: syz [ 102.130680][ T4326] usb 2-1: config 0 descriptor?? [ 102.281905][ T4561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 102.329041][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 102.779528][ T4567] jffs2: notice: (4567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.679471][ T4567] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 103.730771][ T4571] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 103.863819][ T4327] usb 2-1: USB disconnect, device number 3 [ 104.074110][ T4574] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 104.389868][ T4569] syz.0.37 (4569): drop_caches: 2 [ 104.571178][ T4579] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 105.012193][ T4585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 105.019064][ T4585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.058916][ T4589] Invalid option length (1048307) for dns_resolver key [ 105.089737][ T4585] vhci_hcd vhci_hcd.0: Device attached [ 105.353952][ T4321] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 105.373790][ T4364] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 105.575641][ T4364] usb 1-1: config 0 has no interfaces? [ 105.581344][ T4364] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.642227][ T4364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.691807][ T4364] usb 1-1: config 0 descriptor?? [ 105.908022][ T4597] mmap: syz.3.43 (4597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.971284][ T4585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 106.034107][ T4585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 106.117437][ T4326] usb 1-1: USB disconnect, device number 2 [ 106.119087][ T4602] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.125719][ T4591] vhci_hcd: connection closed [ 106.151618][ T4475] vhci_hcd: stop threads [ 106.162172][ T4475] vhci_hcd: release socket [ 106.192351][ T4475] vhci_hcd: disconnect device [ 106.233871][ T4321] usb 33-1: device descriptor read/64, error -71 [ 106.286164][ T4611] jffs2: notice: (4611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.213866][ T4321] vhci_hcd: vhci_device speed not set [ 107.427343][ T4614] netlink: 92 bytes leftover after parsing attributes in process `syz.3.47'. [ 107.539907][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.548793][ T4618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.48'. [ 108.770783][ T4630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 108.780345][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 109.653263][ T4652] Config c/1 of g_uac2 needs at least one function. [ 109.701925][ T4652] udc usbip-vudc.0: failed to start g_uac2: -22 [ 109.743960][ T4652] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 109.777889][ T4652] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 110.281185][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 110.604743][ T4679] tmpfs: Unknown parameter 'grpquota' [ 110.660151][ T4637] syz.2.54 (4637): drop_caches: 2 [ 110.891885][ T4681] binder: 4680:4681 ioctl 4018620d 0 returned -22 [ 110.908329][ T4686] capability: warning: `syz.4.74' uses 32-bit capabilities (legacy support in use) [ 112.138379][ T4699] smc: net device vlan1 applied user defined pnetid SYZ2 [ 112.216760][ T4665] team0: Device vlan2 is already an upper device of the team interface [ 112.925073][ T4726] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 113.188957][ T4711] syz.1.83 (4711): drop_caches: 2 [ 113.656669][ T4756] serial 00:04: in use; can't configure [ 113.684480][ T4756] serial 00:04: in use; can't configure [ 113.727603][ T4756] serial 00:04: in use; can't configure [ 114.230622][ T4771] syz.4.105 (4771): drop_caches: 2 [ 114.490795][ T4785] netlink: 92 bytes leftover after parsing attributes in process `syz.0.111'. [ 114.582666][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 115.859450][ T4828] netlink: 92 bytes leftover after parsing attributes in process `syz.4.127'. [ 116.590223][ T4849] smc: net device vlan1 applied user defined pnetid SYZ2 [ 117.627338][ T4864] netlink: 92 bytes leftover after parsing attributes in process `syz.1.139'. [ 117.820786][ T4871] jffs2: notice: (4871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.204894][ T4883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 118.568602][ T4889] smc: net device vlan1 applied user defined pnetid SYZ2 [ 119.461081][ T4897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 119.730503][ T4907] jffs2: notice: (4907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.821091][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 119.931698][ T4911] serio: Serial port ptm0 [ 119.975509][ T4920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'. [ 120.154853][ T4926] smc: net device vlan1 applied user defined pnetid SYZ2 [ 121.038681][ T4930] jffs2: notice: (4930) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.178909][ T4943] syz.2.166 (4943): drop_caches: 2 [ 121.489812][ T4955] jffs2: notice: (4955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.647371][ T4964] usbip-vudc usbip-vudc.0: gadget not bound [ 121.925668][ T4491] rpcbind: server 127.0.0.1 not responding, timed out [ 122.438800][ T4994] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 122.488127][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 122.530754][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 122.821827][ T4293] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 122.862111][ T5011] jffs2: notice: (5011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.349716][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.358117][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.623934][ T5030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 123.630525][ T5030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.668604][ T5030] vhci_hcd vhci_hcd.0: Device attached [ 123.958336][ T4364] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 123.983942][ T4279] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 124.166736][ T4364] usb 1-1: config 0 has no interfaces? [ 124.175845][ T4364] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.203016][ T4364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.235958][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.248278][ T4364] usb 1-1: config 0 descriptor?? [ 124.309099][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.465940][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 124.506895][ T5031] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 124.520032][ T4499] vhci_hcd: stop threads [ 124.533129][ T4499] vhci_hcd: release socket [ 124.557242][ T4327] usb 1-1: USB disconnect, device number 3 [ 124.572151][ T4499] vhci_hcd: disconnect device [ 124.943544][ T5001] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.952758][ T5001] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.961934][ T5001] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.971262][ T5001] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.860596][ T5051] jffs2: notice: (5051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.001176][ T5081] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.282537][ T5087] syz.0.216 (5087): drop_caches: 2 [ 127.601838][ T5094] jffs2: notice: (5094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.965237][ T5105] usbip-vudc usbip-vudc.0: gadget not bound [ 128.389451][ T5123] syz.2.229 (5123): drop_caches: 2 [ 128.550567][ T3600] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 128.573730][ T3600] lpc_ich 0000:00:00.0: No MFD cells added [ 128.594121][ T3600] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 128.632424][ T3600] lpc_ich 0000:00:01.0: No MFD cells added [ 128.707325][ T3600] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 128.722826][ T3600] lpc_ich 0000:00:05.0: No MFD cells added [ 128.732633][ T5136] jffs2: notice: (5136) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.118292][ T4279] vhci_hcd: vhci_device speed not set [ 129.140672][ T5152] usbip-vudc usbip-vudc.0: gadget not bound [ 129.200485][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 129.303250][ T5158] syz.0.243 (5158): drop_caches: 2 [ 129.327307][ T5154] serio: Serial port ptm0 [ 129.373226][ T5156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.242'. [ 130.104663][ T5183] jffs2: notice: (5183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.834997][ T5195] syz.2.256 (5195): drop_caches: 2 [ 131.204113][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 131.324286][ T5204] serio: Serial port ptm0 [ 131.381031][ T5211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.259'. [ 131.754793][ T5222] syz.0.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.841856][ T5227] jffs2: notice: (5227) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.993505][ T5235] syz.1.270 (5235): drop_caches: 2 [ 132.160367][ T4276] ------------[ cut here ]------------ [ 132.166487][ T4276] kernel BUG at fs/jffs2/nodelist.c:462! [ 132.181865][ T4276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 132.187995][ T4276] CPU: 0 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 132.195573][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.205663][ T4276] RIP: 0010:jffs2_del_ino_cache+0x2b4/0x2c0 [ 132.211590][ T4276] Code: 0d ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 b6 e9 0d ff e9 42 fe ff ff e8 1c b0 bc fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 [ 132.231237][ T4276] RSP: 0018:ffffc90003e77a98 EFLAGS: 00010293 [ 132.237353][ T4276] RAX: ffffffff82c58174 RBX: ffff888078360080 RCX: ffff88801b6c9e00 [ 132.245356][ T4276] RDX: 0000000000000000 RSI: ffff888078360080 RDI: ffff8880276b8000 [ 132.253362][ T4276] RBP: 0000000000000006 R08: ffff8880276b836b R09: 1ffff11004ed706d [ 132.261371][ T4276] R10: dffffc0000000000 R11: ffffed1004ed706e R12: ffff888078360080 [ 132.269374][ T4276] R13: dffffc0000000000 R14: ffff8880783600a0 R15: ffff8880276b8000 [ 132.277376][ T4276] FS: 000055556811d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 132.286339][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.292953][ T4276] CR2: 000055555cb63a78 CR3: 000000005bb55000 CR4: 00000000003506f0 [ 132.300960][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.308962][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.316961][ T4276] Call Trace: [ 132.320279][ T4276] [ 132.323233][ T4276] ? jffs2_do_clear_inode+0x310/0x390 [ 132.328662][ T4276] jffs2_do_clear_inode+0x31b/0x390 [ 132.333983][ T4276] ? jffs2_statfs+0x370/0x370 [ 132.338708][ T4276] evict+0x4b6/0x8b0 [ 132.342649][ T4276] ? evict_inodes+0x577/0x6e0 [ 132.347458][ T4276] ? proc_nr_inodes+0x2f0/0x2f0 [ 132.352346][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 132.357666][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 132.362900][ T4276] evict_inodes+0x650/0x6e0 [ 132.367443][ T4276] ? clear_inode+0x150/0x150 [ 132.372066][ T4276] ? jffs2_sync_fs+0x93/0xa0 [ 132.376693][ T4276] generic_shutdown_super+0x93/0x340 [ 132.382012][ T4276] kill_mtd_super+0x1f/0x60 [ 132.386552][ T4276] jffs2_kill_sb+0x92/0xb0 [ 132.391007][ T4276] deactivate_locked_super+0x93/0xf0 [ 132.396327][ T4276] cleanup_mnt+0x471/0x4f0 [ 132.400782][ T4276] task_work_run+0x1d0/0x260 [ 132.405408][ T4276] ? task_work_cancel+0x220/0x220 [ 132.410477][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 132.415978][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 132.421301][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 132.426885][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 132.432378][ T4276] do_syscall_64+0x58/0xa0 [ 132.436836][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 132.441555][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 132.446284][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.452222][ T4276] RIP: 0033:0x7f20d839f317 [ 132.456671][ T4276] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 132.476316][ T4276] RSP: 002b:00007ffdcea96018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 132.484773][ T4276] RAX: 0000000000000000 RBX: 00007f20d8434474 RCX: 00007f20d839f317 [ 132.492782][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcea960d0 [ 132.500795][ T4276] RBP: 00007ffdcea960d0 R08: 00007ffdcea970d0 R09: 00000000ffffffff [ 132.508803][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcea97160 [ 132.516806][ T4276] R13: 00007f20d8434474 R14: 00000000000203c7 R15: 00007ffdcea971a0 [ 132.524818][ T4276] [ 132.527861][ T4276] Modules linked in: [ 132.564059][ T4276] ---[ end trace 0000000000000000 ]--- [ 132.569667][ T4276] RIP: 0010:jffs2_del_ino_cache+0x2b4/0x2c0 [ 132.576918][ T4276] Code: 0d ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 b6 e9 0d ff e9 42 fe ff ff e8 1c b0 bc fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 [ 132.616027][ T4276] RSP: 0018:ffffc90003e77a98 EFLAGS: 00010293 [ 132.622176][ T4276] RAX: ffffffff82c58174 RBX: ffff888078360080 RCX: ffff88801b6c9e00 [ 132.637455][ T4276] RDX: 0000000000000000 RSI: ffff888078360080 RDI: ffff8880276b8000 [ 132.655704][ T4276] RBP: 0000000000000006 R08: ffff8880276b836b R09: 1ffff11004ed706d [ 132.663875][ T4276] R10: dffffc0000000000 R11: ffffed1004ed706e R12: ffff888078360080 [ 132.671891][ T4276] R13: dffffc0000000000 R14: ffff8880783600a0 R15: ffff8880276b8000 [ 132.695134][ T4276] FS: 000055556811d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 132.704175][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.710792][ T4276] CR2: 00002000000016c0 CR3: 000000005bb55000 CR4: 00000000003506f0 [ 132.735274][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.743310][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.755302][ T4276] Kernel panic - not syncing: Fatal exception [ 132.761542][ T4276] Kernel Offset: disabled [ 132.765869][ T4276] Rebooting in 86400 seconds..