last executing test programs: 18.276542545s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 17.406423147s ago: executing program 3 (id=7): lsetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 16.04564159s ago: executing program 0 (id=1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x600, 0x0, 0x56, 0x6, 0x0, 0x3b4, 0x126, 0x7, 0x6, 0x8, 0x0, 0x9, 0x4, 0x8, 0x1, 0x7, 0xf0a, 0xfd, 0x6, 0xffff, 0xd, 0x5, 0x2, 0x1000, 0x9, 0x5, 0x3c3, 0x80, 0x9, 0xd, 0x40, 0x3]}) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.691079668s ago: executing program 0 (id=10): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0xfffffffc, 0x0, 0xfffffeff, 0x3, 0x1, 0x2, 0x5, 0x7fff}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.588744661s ago: executing program 2 (id=3): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x870bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6d8, 0x400008, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0xda, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1\n\x00', 0x2) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/os_desc/c.1\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='dummy_udc.0\n\x00', 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x240d4f6463445852, 0x10, 0x9, "ad862c930080149989fc8d503dc3bd3fe37d58128b9ad0099cebdc25f5ab60c9e6d66581000000000000ddffffff000000000000000000000000e800", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x9]}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='1', 0x1) 5.34723071s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='namespace0.0', 0xc) 5.34656854s ago: executing program 4 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) 5.233087053s ago: executing program 1 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 5.208476204s ago: executing program 4 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) 4.710229806s ago: executing program 4 (id=29): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x32, r2}, {0x1ef, 0xffffffffffffffff, 0xfffffffffffffffa, 0x400000, 0x1ff, 0xa3, 0x3, 0x2}, {0x8, 0x1, 0x67ff, 0x9}, 0x1ac5, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@local, 0x3504, 0x3, 0x3, 0x3, 0x0, 0x5, 0xffff0001}}, 0xe4) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)="3756608a8ae6d9f0c40d177f41e18ced9b897f067166d3d922d32b27c5cfccea4541553eeb9175494019ea6bff76840d022eb91af6ba326898fc1f94f5a8de74167a6b0192d6", 0x46) recvmsg(0xffffffffffffffff, 0x0, 0x123) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 4.298042505s ago: executing program 1 (id=30): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) 3.255824201s ago: executing program 1 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.153291493s ago: executing program 1 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, 0x0) r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(r1, 0x0, 0x0, 0x80800) 3.083726645s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3cafb5baebff0000000000000000000000000000581d2d8487846ef224cdddcc4ec7dfa3e273a5da0c534a0b767494b7bef5b04afb6488b8a7f9d28a5f1ac522ff20bcea39cf189398156042fb555bc33187b4217807ab70680c31728f0613fce99ccb8402a7e0cfef4e3b65252778815f8e008d0d3b348f7279b1ce33940674b6703be20afd52ff47092a2947155e7d84a416b18384acb8b2a5920adfc8aa922b94742747daadcd445949d43771a0c6f5e781f695f43e859bb883d9ad311b092d003a4f5156af6f1e287415e4415716310115f17e8d651489f041a3254f9ca7cead8bb8fcecbad20bc184de790b1268709127d04b8e6d84", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.033934267s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x7, 0x80000001, 0xa6d8, 0x2, 0x1, 0x40000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x80000003, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4001, 0x10000, 0x0, 0x8, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x3, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x3, 0x0, 0x40, 0x1, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x1, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0x7ffd, 0x7, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000200000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x83, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000000200)=0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) 3.004072547s ago: executing program 3 (id=35): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000011140100000100000000020000009f51de53865a080001000000000008004b0028000000e4ff03000100000000004a00020000008bcfea1774331b0047fe0dfaffff231e73882ef1e0b31ca4f2c528b86662a3d8c09ba78f6733d344f22836de57b541104123def98cea31e0ec291760a4957d23893b08a255d91eccaa26afe5fb298a7ff2073543eb2482832b465f05025a6b89946a84cb86878ffd1d6b7b929970fca875c8b66f1d968ec1d1a220"], 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25180000000500572bd1ac82bad54c930a290000000000eeff00000083c700000001bf3c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={r2, 0x5d}, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x33, 0x0, &(0x7f0000000080)) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.988412978s ago: executing program 2 (id=36): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000500)={r2, &(0x7f0000000240)='-{$%}\x88:@^d(*!\x00', 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xe}) openat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000080)=0x8800000, 0x1, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r5, &(0x7f0000001600)='dummy_udc.0', 0xb) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) 793.948401ms ago: executing program 0 (id=37): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x40) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000400)={0x9f0000, 0x5, 0x30000000, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x9e0907, 0x5, '\x00', @p_u16=0x0}}) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYRES64=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRES16=r0, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB="e26a967184f821ddda2f2510c57491cbc8a77f815b1a6c9394b33bfdf6209443679792004f2b6cf679186f79b90b4aef1e1600bb49f4985e911496cbee27bdd3c2f8a5f77f1277a5755b5cb00d7e41bca35881f7144d754466d298e89993d0948f459c4188433d6770c87ad122d39265d0316d6aa85ff56ca9bc18c28bc6eb0e3c06f0"], 0x1c}, 0x1, 0x0, 0x0, 0x4040890}, 0x48080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r6, r4, 0x0, 0x2) r7 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r7, &(0x7f0000000280)=""/226, 0xe2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r8, r8, 0x0, 0x1002000ff) dup(r4) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x190, 0xc8, 0xc8, 0x190, 0x190, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x2c, 0x0, 0x6}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x25, 0x4}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000002], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x11, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@local, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) 482.172289ms ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='namespace0.0', 0xc) 268.010014ms ago: executing program 1 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) 858.64µs ago: executing program 4 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 0s ago: executing program 2 (id=41): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 73.859206][ T4260] cgroup: Unknown subsys name 'net' [ 73.995474][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.499088][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.454207][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.458448][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.462842][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.470399][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.476854][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.484079][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.490729][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.497897][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.504398][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.511486][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.525593][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.525924][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.543182][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.559586][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.567398][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.576146][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.588824][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.596732][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.608938][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.633238][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.640798][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.649248][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.657274][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.665590][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.673061][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.681489][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.689205][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.697374][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.697380][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.711794][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.986505][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 78.135931][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.143780][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.152996][ T4273] device bridge_slave_0 entered promiscuous mode [ 78.166017][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.173284][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.181674][ T4273] device bridge_slave_1 entered promiscuous mode [ 78.194037][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 78.223843][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 78.274045][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.305498][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.338469][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 78.415003][ T4273] team0: Port device team_slave_0 added [ 78.428157][ T4273] team0: Port device team_slave_1 added [ 78.457774][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.465811][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.473855][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.487361][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 78.499592][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.506553][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.533362][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.553258][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.560519][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.568385][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.585019][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.592251][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.619095][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.630327][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.637423][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.645841][ T4279] device bridge_slave_0 entered promiscuous mode [ 78.675720][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.683095][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.691236][ T4279] device bridge_slave_1 entered promiscuous mode [ 78.739309][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.761383][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.784197][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.807597][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.817302][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.825655][ T4289] device bridge_slave_0 entered promiscuous mode [ 78.852597][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.859320][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.867935][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.897758][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.905137][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.914058][ T4289] device bridge_slave_1 entered promiscuous mode [ 78.929342][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.937101][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.945597][ T4287] device bridge_slave_0 entered promiscuous mode [ 78.955028][ T4279] team0: Port device team_slave_0 added [ 78.964697][ T4274] team0: Port device team_slave_0 added [ 78.979495][ T4274] team0: Port device team_slave_1 added [ 78.988549][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.004609][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.012737][ T4287] device bridge_slave_1 entered promiscuous mode [ 79.030310][ T4279] team0: Port device team_slave_1 added [ 79.050958][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.104565][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.131780][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.138978][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.168478][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.180480][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.187461][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.213541][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.232762][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.246745][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.254049][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.283558][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.295232][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.305473][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.331747][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.350311][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.386750][ T4289] team0: Port device team_slave_0 added [ 79.412736][ T4289] team0: Port device team_slave_1 added [ 79.435529][ T4287] team0: Port device team_slave_0 added [ 79.477460][ T4287] team0: Port device team_slave_1 added [ 79.501597][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.508280][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.515558][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.523400][ T4274] Cannot create hsr debugfs directory [ 79.529863][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.536932][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.562982][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.610608][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 79.616939][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 79.623464][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 79.631679][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.638656][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.667909][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.683274][ T4279] device hsr_slave_0 entered promiscuous mode [ 79.691098][ T4279] device hsr_slave_1 entered promiscuous mode [ 79.698207][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.705862][ T4279] Cannot create hsr debugfs directory [ 79.711910][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.718880][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.749164][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.769553][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 79.775769][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 79.804402][ T4289] device hsr_slave_0 entered promiscuous mode [ 79.811423][ T4289] device hsr_slave_1 entered promiscuous mode [ 79.818256][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.826085][ T4289] Cannot create hsr debugfs directory [ 79.832110][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.841267][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.868208][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.971629][ T4287] device hsr_slave_0 entered promiscuous mode [ 79.978422][ T4287] device hsr_slave_1 entered promiscuous mode [ 79.985501][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.994396][ T4287] Cannot create hsr debugfs directory [ 80.065940][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.109322][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.120059][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.160172][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.341181][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.351882][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.365664][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.375801][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.464480][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.474299][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.484163][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.498492][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.553841][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.602471][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.611963][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.622556][ T4289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.635737][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.652627][ T4289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.662756][ T4289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.675923][ T4289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.699739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.709137][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.718425][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.725772][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.734573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.777900][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.787857][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.803860][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.811161][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.821110][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.853251][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.863405][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.873345][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.885647][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.900032][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.923675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.937585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.947501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.957019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.979025][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.995522][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.014131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.023698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.033417][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.043909][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.056264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.067920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.077133][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.091186][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.099861][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.125731][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.135342][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.147331][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.156713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.166059][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.173223][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.186282][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.212965][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.221616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.230944][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.240647][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.247778][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.257324][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.289965][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.298834][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.309009][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.316245][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.325320][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.341882][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.353054][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.361138][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.402460][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.417154][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.425941][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.436687][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.446377][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.455968][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.466024][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.497589][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.518351][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.538035][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.548755][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.562739][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.575160][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.586846][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.596546][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.605855][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.615363][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.624588][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.633934][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.660207][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.684675][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.690345][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 81.697141][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 81.698160][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 81.711250][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.723011][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.732103][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.741306][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.756233][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.778598][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.786473][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.834986][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.849886][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 81.850716][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 81.881210][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.888367][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.911481][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.961974][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.008914][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.031849][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.050083][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.057192][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.065505][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.078379][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.087714][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.096759][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.105596][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.112855][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.141118][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.148646][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.158408][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.167080][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.176755][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.187674][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.225906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.243658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.301273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.320066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.329186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.358668][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.365898][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.374786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.384239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.393285][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.400464][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.408956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.422099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.431052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.449033][ T4289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.460472][ T4289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.505607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.518575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.529077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.538579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.547842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.556594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.565820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.574185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.583251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.592699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.601376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.610955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.620288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.629222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.637772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.645355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.653650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.661241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.668656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.677574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.688457][ T4273] device veth0_vlan entered promiscuous mode [ 82.702605][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.717524][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.730478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.743243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.752069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.760900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.773567][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.799109][ T4273] device veth1_vlan entered promiscuous mode [ 82.837128][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.848067][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.863993][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.951932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.971182][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.987225][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.027647][ T4273] device veth0_macvtap entered promiscuous mode [ 83.052736][ T4279] device veth0_vlan entered promiscuous mode [ 83.061496][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.070749][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.091651][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.110969][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.123283][ T4273] device veth1_macvtap entered promiscuous mode [ 83.146663][ T4279] device veth1_vlan entered promiscuous mode [ 83.158566][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.176586][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.188361][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.242402][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.271115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.281516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.316879][ T4279] device veth0_macvtap entered promiscuous mode [ 83.371495][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.393451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.411064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.431804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.466816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.492381][ T4279] device veth1_macvtap entered promiscuous mode [ 83.520587][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531235][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.541043][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.550301][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.561504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.573518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.590646][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.608590][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.626204][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.638213][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.671695][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.679256][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.687904][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.697005][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.725603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.743881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.753782][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.767076][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.777125][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 83.777463][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 83.784623][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 83.792115][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.812770][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.829802][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.838751][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.848027][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865717][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.879673][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.888235][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.922569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.930930][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 83.940618][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 83.943776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.956219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.968590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.081359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.091061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.100435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.108930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.117886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.132437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.140706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.148674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.180544][ T4287] device veth0_vlan entered promiscuous mode [ 84.190671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.203269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.230236][ T4274] device veth0_vlan entered promiscuous mode [ 84.245570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.270379][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.285215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.313466][ T4287] device veth1_vlan entered promiscuous mode [ 84.330233][ T4274] device veth1_vlan entered promiscuous mode [ 84.365010][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.374545][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.383790][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.391975][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.414164][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.415582][ T4289] device veth0_vlan entered promiscuous mode [ 84.444825][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.452717][ T4274] device veth0_macvtap entered promiscuous mode [ 84.480287][ T4289] device veth1_vlan entered promiscuous mode [ 84.487560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.499699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.507494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.516911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.526107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.540290][ T4287] device veth0_macvtap entered promiscuous mode [ 84.549871][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.557812][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.567842][ T4274] device veth1_macvtap entered promiscuous mode [ 84.592460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.601623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.611315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.620397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.628438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.641770][ T4287] device veth1_macvtap entered promiscuous mode [ 84.677905][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.690010][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.700671][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.711474][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.724266][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.744474][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.762352][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.774251][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.787784][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.797878][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.812076][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.823427][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.834194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.843346][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.851938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.859832][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.868323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.876574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.886150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.896412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.906576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.919011][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.934147][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.944368][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.955153][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.966897][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.024309][ T4289] device veth0_macvtap entered promiscuous mode [ 85.034537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.051563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.062564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.072051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.082048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.087229][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087267][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087282][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087297][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.090572][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.090611][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.090621][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.090632][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.090640][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.090650][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.091863][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.095784][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095816][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095840][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095863][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168927][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.170045][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.186430][ T4289] device veth1_macvtap entered promiscuous mode [ 85.247041][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.321537][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.321577][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.333111][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.358313][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.358335][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358347][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.358360][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358370][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.358383][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358395][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.358408][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.383291][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.384350][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.385006][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.399177][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.399199][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399210][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.399223][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399232][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.399244][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399255][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.399267][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.401952][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.406564][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.407441][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.410377][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.410390][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.411123][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.421637][ T4289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.804203][ T4289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.816313][ T4289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.826615][ T4289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850795][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 85.856877][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 85.863182][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 85.999809][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.010396][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 86.019934][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 86.059577][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.067461][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.187074][ T4374] jffs2: notice: (4374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.335026][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395884][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.000677][ T129] cfg80211: failed to load regulatory.db [ 87.265377][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.414383][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.450859][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.491330][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.602626][ T26] audit: type=1800 audit(1786190155.909:2): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8" name="memory_backed" dev="configfs" ino=33442 res=0 errno=0 [ 87.699491][ T26] audit: type=1800 audit(1786190155.939:3): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8" name="zone_nr_conv" dev="configfs" ino=33443 res=0 errno=0 [ 87.732336][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.757442][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.782516][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.791731][ T4384] null_blk: disk nullb1 created [ 87.809587][ T26] audit: type=1800 audit(1786190155.949:4): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8" name="power" dev="configfs" ino=33444 res=0 errno=0 [ 87.853622][ T4384] Zero length message leads to an empty skb [ 93.639003][ T4430] jffs2: notice: (4430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.904104][ T26] audit: type=1800 audit(1786190163.209:5): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21" name="memory_backed" dev="configfs" ino=33604 res=0 errno=0 [ 95.007138][ T26] audit: type=1800 audit(1786190163.269:6): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21" name="zone_nr_conv" dev="configfs" ino=34462 res=0 errno=0 [ 95.059675][ T26] audit: type=1800 audit(1786190163.269:7): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21" name="power" dev="configfs" ino=34463 res=0 errno=0 [ 95.366438][ T26] audit: type=1800 audit(1786190163.669:8): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.23" name="power" dev="configfs" ino=33612 res=0 errno=0 [ 99.415412][ T4471] jffs2: notice: (4471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.197665][ T4471] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 100.608662][ T26] audit: type=1800 audit(1786190168.909:9): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="memory_backed" dev="configfs" ino=34538 res=0 errno=0 [ 100.658083][ T4482] sctp: [Deprecated]: syz.3.35 (pid 4482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.658083][ T4482] Use struct sctp_sack_info instead [ 100.682692][ T26] audit: type=1800 audit(1786190168.919:10): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="zone_nr_conv" dev="configfs" ino=34539 res=0 errno=0 [ 103.089521][ T26] audit: type=1800 audit(1786190168.919:11): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="power" dev="configfs" ino=34540 res=0 errno=0 [ 103.109622][ T2170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.144693][ T4486] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 103.239577][ T4324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.351320][ T26] audit: type=1800 audit(1786190169.539:12): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="power" dev="configfs" ino=33671 res=0 errno=0 [ 103.359533][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 103.405920][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.415837][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 103.432931][ T2170] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 103.459403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.469503][ T4324] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.479405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.489413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.499434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.509412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.519403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.548307][ T4324] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.558103][ T4324] usb 1-1: Dual-Role OTG device on HNP port [ 103.564502][ T4324] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 103.573657][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.604860][ C1] ------------[ cut here ]------------ [ 103.609573][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.610565][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 103.625614][ C1] WARNING: CPU: 1 PID: 4324 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 103.635711][ C1] Modules linked in: [ 103.639622][ C1] CPU: 1 PID: 4324 Comm: kworker/1:8 Not tainted syzkaller #0 [ 103.647361][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.657431][ C1] Workqueue: usb_hub_wq hub_event [ 103.662473][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 103.667859][ C1] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 103.687485][ C1] RSP: 0018:ffffc900001e0788 EFLAGS: 00010046 [ 103.693558][ C1] RAX: 3a9477c5081ece00 RBX: ffff8881457600e0 RCX: ffff888018b5bc00 [ 103.701553][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 103.709528][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 103.717595][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 103.725578][ C1] R13: ffff88814576010d R14: ffff8881457600e8 R15: ffff88801ef49b3a [ 103.733554][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 103.742605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.749200][ C1] CR2: 00007ffceac75fe8 CR3: 000000005bd78000 CR4: 00000000003506e0 [ 103.757352][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.765338][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.773326][ C1] Call Trace: [ 103.776612][ C1] [ 103.779472][ C1] hidg_set_alt+0x126/0xa00 [ 103.783994][ C1] ? usb_gadget_set_state+0x142/0x310 [ 103.789391][ C1] set_config+0x6e8/0xf70 [ 103.793753][ C1] composite_setup+0x194c/0x2b00 [ 103.798704][ C1] configfs_composite_setup+0xc3/0x100 [ 103.804175][ C1] dummy_timer+0x12ea/0x3420 [ 103.808776][ C1] ? __lock_acquire+0x1465/0x7c40 [ 103.813837][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 103.818913][ C1] ? lock_chain_count+0x20/0x20 [ 103.823791][ C1] ? dummy_free_streams+0x520/0x520 [ 103.829087][ C1] __hrtimer_run_queues+0x522/0xc90 [ 103.834307][ C1] ? dummy_free_streams+0x520/0x520 [ 103.839517][ C1] ? hrtimer_interrupt+0x980/0x980 [ 103.844657][ C1] hrtimer_run_softirq+0x173/0x290 [ 103.849780][ C1] handle_softirqs+0x291/0x910 [ 103.854576][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 103.859441][ C1] ? do_softirq+0x210/0x210 [ 103.864035][ C1] ? hrtimer_interrupt+0x775/0x980 [ 103.869192][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 103.874427][ C1] __irq_exit_rcu+0x13b/0x230 [ 103.879204][ C1] ? irq_exit_rcu+0x20/0x20 [ 103.883723][ C1] irq_exit_rcu+0x5/0x20 [ 103.888056][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 103.893719][ C1] [ 103.896708][ C1] [ 103.899652][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.905644][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 103.912154][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 89 1e f7 65 8b 05 b0 3a c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 103.931948][ C1] RSP: 0018:ffffc90004097080 EFLAGS: 00000206 [ 103.938030][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 3a9477c5081ece00 [ 103.946185][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 103.954164][ C1] RBP: ffffc90004097100 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 103.962427][ C1] R10: dffffc0000000000 R11: fffffbfff2162056 R12: dffffc0000000000 [ 103.970553][ C1] R13: dffffc0000000000 R14: ffff888145760000 R15: 1ffff92000812e10 [ 103.978844][ C1] ? _raw_spin_unlock+0x40/0x40 [ 103.983738][ C1] dummy_urb_enqueue+0x583/0x770 [ 103.988707][ C1] usb_hcd_submit_urb+0x314/0x1970 [ 103.993885][ C1] usb_start_wait_urb+0x13c/0x580 [ 103.999012][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 104.004849][ C1] usb_control_msg+0x231/0x3e0 [ 104.009716][ C1] usb_set_configuration+0x11a7/0x2030 [ 104.015206][ C1] usb_generic_driver_probe+0x89/0x150 [ 104.020681][ C1] usb_probe_device+0x126/0x250 [ 104.025806][ C1] ? usb_register_device_driver+0x230/0x230 [ 104.031780][ C1] really_probe+0x24a/0xb40 [ 104.036382][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 104.041850][ C1] __driver_probe_device+0x1f5/0x390 [ 104.047235][ C1] driver_probe_device+0x4f/0x420 [ 104.052370][ C1] __device_attach_driver+0x2c6/0x510 [ 104.057870][ C1] ? coredump_store+0x90/0x90 [ 104.062574][ C1] bus_for_each_drv+0x184/0x210 [ 104.067550][ C1] ? coredump_store+0x90/0x90 [ 104.072376][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 104.078126][ C1] __device_attach+0x2a7/0x480 [ 104.082999][ C1] ? device_attach+0x20/0x20 [ 104.088038][ C1] ? kobject_uevent_env+0x364/0x890 [ 104.093243][ C1] bus_probe_device+0xba/0x1d0 [ 104.098019][ C1] device_add+0xbcf/0x1050 [ 104.102472][ C1] usb_new_device+0xa01/0x15e0 [ 104.108258][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 104.113126][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.118339][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 104.124417][ C1] hub_event+0x2b2f/0x5200 [ 104.128878][ C1] ? hub_post_resume+0x120/0x120 [ 104.133857][ C1] ? read_lock_is_recursive+0x10/0x10 [ 104.139435][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.145517][ C1] ? _raw_spin_unlock+0x40/0x40 [ 104.150462][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.155684][ C1] ? process_one_work+0x7b4/0x1160 [ 104.160933][ C1] process_one_work+0x8ab/0x1160 [ 104.166079][ C1] ? worker_detach_from_pool+0x240/0x240 [ 104.171735][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.176945][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 104.182589][ C1] ? wq_worker_running+0x97/0x190 [ 104.187633][ C1] worker_thread+0xaf5/0x12a0 [ 104.192440][ C1] kthread+0x29d/0x330 [ 104.196703][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 104.202176][ C1] ? kthread_blkcg+0xd0/0xd0 [ 104.206771][ C1] ret_from_fork+0x1f/0x30 [ 104.211235][ C1] [ 104.214263][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.221572][ C1] CPU: 1 PID: 4324 Comm: kworker/1:8 Not tainted syzkaller #0 [ 104.229124][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.239187][ C1] Workqueue: usb_hub_wq hub_event [ 104.244230][ C1] Call Trace: [ 104.247544][ C1] [ 104.250398][ C1] dump_stack_lvl+0x188/0x24e [ 104.255206][ C1] ? memcpy+0x3c/0x60 [ 104.259217][ C1] ? show_regs_print_info+0x12/0x12 [ 104.264448][ C1] ? load_image+0x410/0x410 [ 104.268977][ C1] panic+0x2d3/0x710 [ 104.272887][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 104.277405][ C1] ? ret_from_fork+0x1f/0x30 [ 104.282010][ C1] __warn+0x2f8/0x4f0 [ 104.285997][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 104.290803][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 104.295576][ C1] report_bug+0x2ba/0x4f0 [ 104.299963][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 104.304738][ C1] handle_bug+0x3a/0x70 [ 104.308910][ C1] exc_invalid_op+0x16/0x40 [ 104.313424][ C1] asm_exc_invalid_op+0x16/0x20 [ 104.318289][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 104.323671][ C1] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 104.343544][ C1] RSP: 0018:ffffc900001e0788 EFLAGS: 00010046 [ 104.349628][ C1] RAX: 3a9477c5081ece00 RBX: ffff8881457600e0 RCX: ffff888018b5bc00 [ 104.357608][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 104.365605][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 104.373601][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 104.381765][ C1] R13: ffff88814576010d R14: ffff8881457600e8 R15: ffff88801ef49b3a [ 104.389840][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 104.394615][ C1] hidg_set_alt+0x126/0xa00 [ 104.399129][ C1] ? usb_gadget_set_state+0x142/0x310 [ 104.404513][ C1] set_config+0x6e8/0xf70 [ 104.408857][ C1] composite_setup+0x194c/0x2b00 [ 104.413899][ C1] configfs_composite_setup+0xc3/0x100 [ 104.419379][ C1] dummy_timer+0x12ea/0x3420 [ 104.424065][ C1] ? __lock_acquire+0x1465/0x7c40 [ 104.429114][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 104.434141][ C1] ? lock_chain_count+0x20/0x20 [ 104.439010][ C1] ? dummy_free_streams+0x520/0x520 [ 104.444215][ C1] __hrtimer_run_queues+0x522/0xc90 [ 104.449505][ C1] ? dummy_free_streams+0x520/0x520 [ 104.454715][ C1] ? hrtimer_interrupt+0x980/0x980 [ 104.459835][ C1] hrtimer_run_softirq+0x173/0x290 [ 104.464951][ C1] handle_softirqs+0x291/0x910 [ 104.469718][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 104.474576][ C1] ? do_softirq+0x210/0x210 [ 104.479167][ C1] ? hrtimer_interrupt+0x775/0x980 [ 104.484382][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 104.489766][ C1] __irq_exit_rcu+0x13b/0x230 [ 104.494448][ C1] ? irq_exit_rcu+0x20/0x20 [ 104.498967][ C1] irq_exit_rcu+0x5/0x20 [ 104.503212][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 104.508858][ C1] [ 104.512052][ C1] [ 104.514990][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.520982][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 104.527926][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 89 1e f7 65 8b 05 b0 3a c8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 104.548055][ C1] RSP: 0018:ffffc90004097080 EFLAGS: 00000206 [ 104.554135][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 3a9477c5081ece00 [ 104.562294][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 104.570269][ C1] RBP: ffffc90004097100 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 104.578242][ C1] R10: dffffc0000000000 R11: fffffbfff2162056 R12: dffffc0000000000 [ 104.586408][ C1] R13: dffffc0000000000 R14: ffff888145760000 R15: 1ffff92000812e10 [ 104.594397][ C1] ? _raw_spin_unlock+0x40/0x40 [ 104.599263][ C1] dummy_urb_enqueue+0x583/0x770 [ 104.604217][ C1] usb_hcd_submit_urb+0x314/0x1970 [ 104.609349][ C1] usb_start_wait_urb+0x13c/0x580 [ 104.614393][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 104.620224][ C1] usb_control_msg+0x231/0x3e0 [ 104.624995][ C1] usb_set_configuration+0x11a7/0x2030 [ 104.630486][ C1] usb_generic_driver_probe+0x89/0x150 [ 104.636178][ C1] usb_probe_device+0x126/0x250 [ 104.641175][ C1] ? usb_register_device_driver+0x230/0x230 [ 104.647099][ C1] really_probe+0x24a/0xb40 [ 104.651636][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 104.656888][ C1] __driver_probe_device+0x1f5/0x390 [ 104.662199][ C1] driver_probe_device+0x4f/0x420 [ 104.667233][ C1] __device_attach_driver+0x2c6/0x510 [ 104.672766][ C1] ? coredump_store+0x90/0x90 [ 104.677451][ C1] bus_for_each_drv+0x184/0x210 [ 104.682305][ C1] ? coredump_store+0x90/0x90 [ 104.686985][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 104.692718][ C1] __device_attach+0x2a7/0x480 [ 104.697505][ C1] ? device_attach+0x20/0x20 [ 104.702135][ C1] ? kobject_uevent_env+0x364/0x890 [ 104.707523][ C1] bus_probe_device+0xba/0x1d0 [ 104.712295][ C1] device_add+0xbcf/0x1050 [ 104.716723][ C1] usb_new_device+0xa01/0x15e0 [ 104.721509][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 104.726365][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.731569][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 104.736789][ C1] hub_event+0x2b2f/0x5200 [ 104.741248][ C1] ? hub_post_resume+0x120/0x120 [ 104.746192][ C1] ? read_lock_is_recursive+0x10/0x10 [ 104.751569][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.757497][ C1] ? _raw_spin_unlock+0x40/0x40 [ 104.762354][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.767670][ C1] ? process_one_work+0x7b4/0x1160 [ 104.772921][ C1] process_one_work+0x8ab/0x1160 [ 104.777884][ C1] ? worker_detach_from_pool+0x240/0x240 [ 104.783795][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.788833][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 104.794390][ C1] ? wq_worker_running+0x97/0x190 [ 104.799426][ C1] worker_thread+0xaf5/0x12a0 [ 104.804132][ C1] kthread+0x29d/0x330 [ 104.808225][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 104.813259][ C1] ? kthread_blkcg+0xd0/0xd0 [ 104.817851][ C1] ret_from_fork+0x1f/0x30 [ 104.822286][ C1] [ 104.825431][ C1] Kernel Offset: disabled [ 104.829820][ C1] Rebooting in 86400 seconds..