last executing test programs: 9.287857607s ago: executing program 0 (id=1): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 7.789574102s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x2}) ftruncate(0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) syz_open_pts(r0, 0x200) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 6.716090438s ago: executing program 4 (id=14): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 6.394039226s ago: executing program 0 (id=16): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 6.176334222s ago: executing program 3 (id=18): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, 0x0, 0x0) 6.113993073s ago: executing program 1 (id=19): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB], 0x14}], 0x1}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)=@v2={0x2000000, [{0x1000, 0x7bb}, {0x2, 0x5}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 5.854442029s ago: executing program 2 (id=20): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000) syslog(0x9, 0x0, 0x0) 5.847462729s ago: executing program 0 (id=21): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0x72}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.527383961s ago: executing program 3 (id=22): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) r4 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) recvmmsg(r0, &(0x7f0000000980), 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 4.512564902s ago: executing program 4 (id=23): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.380770184s ago: executing program 2 (id=24): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.299967806s ago: executing program 1 (id=25): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.18805336s ago: executing program 3 (id=26): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 4.15571937s ago: executing program 4 (id=27): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0, 0x2be, &(0x7f0000000c80)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c94", 0xcb}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92"], 0xb8, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.214943743s ago: executing program 2 (id=28): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x2}) ftruncate(0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) syz_open_pts(r0, 0x200) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 2.308781364s ago: executing program 1 (id=29): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.216028787s ago: executing program 2 (id=30): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 2.215153127s ago: executing program 3 (id=31): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 1.950139693s ago: executing program 1 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, 0x0, 0x0) 1.895557764s ago: executing program 2 (id=33): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.765172958s ago: executing program 3 (id=34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000) syslog(0x9, 0x0, 0x0) 1.295965989s ago: executing program 1 (id=35): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r1}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 209.208545ms ago: executing program 3 (id=36): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r3, &(0x7f0000000800)='(', 0x1) r4 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000ec50034e0500192cbd7000fbdbdf252b0000000c000b00000000001600000066287c8204f581433e8fa6ee008d9d13c7f9888bdb9ff126e931d5bc2916d3dd69595b0adf4f10eb7f319fb0a3abd810"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) recvmmsg(r0, &(0x7f0000000980), 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 207.898905ms ago: executing program 4 (id=37): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 140.608737ms ago: executing program 1 (id=38): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 21.64931ms ago: executing program 0 (id=39): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) connect$pptp(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) 0s ago: executing program 2 (id=40): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 73.642534][ T4260] cgroup: Unknown subsys name 'net' [ 73.750210][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.282109][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.730562][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.739329][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.748714][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.756306][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.763931][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.771727][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.777337][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.780237][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.786200][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.793399][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.800635][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.808158][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.814338][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.821898][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.828255][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.835431][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.848955][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.857118][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.864835][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.872211][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.879411][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.885766][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.886535][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.894058][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.908476][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.915633][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.926716][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.936271][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.941254][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.950777][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.341100][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 77.392911][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.483604][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.493657][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.502568][ T4279] device bridge_slave_0 entered promiscuous mode [ 77.516135][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.530261][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.537554][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.546239][ T4279] device bridge_slave_1 entered promiscuous mode [ 77.553551][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 77.597614][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 77.628702][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.664150][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.691288][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.698653][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.707453][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.721442][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.728631][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.736773][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.763370][ T4279] team0: Port device team_slave_0 added [ 77.802620][ T4279] team0: Port device team_slave_1 added [ 77.852298][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.868408][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.875695][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.883425][ T4272] device bridge_slave_0 entered promiscuous mode [ 77.896325][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.903423][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.911721][ T4285] device bridge_slave_0 entered promiscuous mode [ 77.920800][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.930100][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.937593][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.946039][ T4273] device bridge_slave_0 entered promiscuous mode [ 77.953848][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.961294][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.969868][ T4272] device bridge_slave_1 entered promiscuous mode [ 77.978303][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.988451][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.014926][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.026566][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.033758][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.044724][ T4285] device bridge_slave_1 entered promiscuous mode [ 78.059570][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.067076][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.075303][ T4273] device bridge_slave_1 entered promiscuous mode [ 78.099568][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.106612][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.132684][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.178409][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.197307][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.217149][ T4274] team0: Port device team_slave_0 added [ 78.226230][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.237378][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.268404][ T4274] team0: Port device team_slave_1 added [ 78.275990][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.289530][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.309164][ T4279] device hsr_slave_0 entered promiscuous mode [ 78.315956][ T4279] device hsr_slave_1 entered promiscuous mode [ 78.350343][ T4272] team0: Port device team_slave_0 added [ 78.358478][ T4272] team0: Port device team_slave_1 added [ 78.369794][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.377066][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.403231][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.450453][ T4273] team0: Port device team_slave_0 added [ 78.457032][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.464099][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.490452][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.503626][ T4285] team0: Port device team_slave_0 added [ 78.513570][ T4285] team0: Port device team_slave_1 added [ 78.527237][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.534226][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.560560][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.578867][ T4273] team0: Port device team_slave_1 added [ 78.601862][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.609345][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.635363][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.683475][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.693531][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.722638][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.738638][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.746247][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.772244][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.792132][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.799389][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.825575][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.838164][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.845577][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.871977][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.899283][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.906539][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.913060][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.920904][ T4274] Cannot create hsr debugfs directory [ 78.954390][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.961017][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.967742][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.976103][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 78.976150][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 78.982316][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 78.988490][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 78.993438][ T4273] Cannot create hsr debugfs directory [ 79.041124][ T4272] device hsr_slave_0 entered promiscuous mode [ 79.049033][ T4272] device hsr_slave_1 entered promiscuous mode [ 79.055860][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 79.062751][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.070625][ T4272] Cannot create hsr debugfs directory [ 79.086860][ T4285] device hsr_slave_0 entered promiscuous mode [ 79.093512][ T4285] device hsr_slave_1 entered promiscuous mode [ 79.100230][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.107876][ T4285] Cannot create hsr debugfs directory [ 79.424031][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.439783][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.454344][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.472374][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.512644][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.521830][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.534512][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.564175][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.615260][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.625632][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.639552][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.674086][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.721471][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.739839][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.749445][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.769069][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.781419][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.850118][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.868476][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.883418][ T4285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.894442][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.911891][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.921309][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.930513][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.938038][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.948626][ T4285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.959946][ T4285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.981965][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.021333][ T4285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.035908][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.048787][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.062570][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.073657][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.080810][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.088761][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.097937][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.112452][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.125883][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.150420][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.159270][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.168035][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.195334][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.208460][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.226406][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.235258][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.243634][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.253242][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.279295][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.291813][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.308446][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.315581][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.325153][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.333733][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.343095][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.350275][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.358826][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.367453][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.376570][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.392008][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.435621][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.443509][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.452805][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.463100][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.472258][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.481654][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.490581][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.508911][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.521781][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.530588][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.537734][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.570655][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.589496][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.604569][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.622017][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.632175][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.646304][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.662984][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.672646][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.679821][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.696133][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.717051][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.729022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.740869][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.751974][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.761267][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.772464][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.795434][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.825612][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.832538][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.844436][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.860281][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.888168][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.916197][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.933141][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.956563][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.976534][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.995246][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.003916][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.020906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.031584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.044456][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.051909][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.060029][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 81.060047][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 81.066088][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 81.072204][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 81.087546][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.122456][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.130500][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.139829][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 81.149924][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.159471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.168059][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.175191][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.183189][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.191248][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.199581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.210660][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.284128][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.315643][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.333326][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.340532][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.367084][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.386374][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.405688][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.416489][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.426181][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.435326][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.467733][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.481819][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.499938][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.513294][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.522399][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.530671][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.544492][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.553526][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.562105][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.569273][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.577702][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.587011][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.595624][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.608420][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.616820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.626111][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.665789][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.676854][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.691266][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.716955][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.771729][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.791870][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.805999][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.821694][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.832363][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.846878][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.861229][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.876498][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.933329][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.944004][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.981931][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.991929][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.002156][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.015427][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.032025][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.051335][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.062836][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.083521][ T4279] device veth0_vlan entered promiscuous mode [ 82.100100][ T4273] device veth0_vlan entered promiscuous mode [ 82.112061][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.122011][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.130372][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.155868][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.181898][ T4279] device veth1_vlan entered promiscuous mode [ 82.198770][ T4273] device veth1_vlan entered promiscuous mode [ 82.213874][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.236109][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.261282][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.276551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.344005][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.353311][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.362217][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.375985][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.393952][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.406497][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.419182][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.434124][ T4279] device veth0_macvtap entered promiscuous mode [ 82.458319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.489760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.509290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.543864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.565731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.586283][ T4273] device veth0_macvtap entered promiscuous mode [ 82.594709][ T4279] device veth1_macvtap entered promiscuous mode [ 82.619378][ T4273] device veth1_macvtap entered promiscuous mode [ 82.629608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.641748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.681716][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.691154][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.708821][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.733864][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.752441][ T4285] device veth0_vlan entered promiscuous mode [ 82.764648][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.772721][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.781981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.799423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.820640][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.877262][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.890788][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.900339][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.910229][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.925223][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.937082][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.948221][ T4285] device veth1_vlan entered promiscuous mode [ 82.960942][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.971808][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.984456][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.995723][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.006865][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.021086][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.032136][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.040834][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.049532][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.058688][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.068664][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.099560][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.109586][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.120462][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130387][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.139301][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 83.139346][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 83.139372][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 83.145844][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 83.154689][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.172180][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.181497][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.216222][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 83.236344][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.246880][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.256428][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.265645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.289187][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.307123][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.319160][ T4285] device veth0_macvtap entered promiscuous mode [ 83.339332][ T4272] device veth0_vlan entered promiscuous mode [ 83.348407][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.359613][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.368073][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.381467][ T4285] device veth1_macvtap entered promiscuous mode [ 83.411715][ T4272] device veth1_vlan entered promiscuous mode [ 83.453052][ T4274] device veth0_vlan entered promiscuous mode [ 83.460142][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.473154][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.485907][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.494129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.505100][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.513102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.521575][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.530034][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.563407][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.572459][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.588873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.599263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.607580][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.626121][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.637328][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.647685][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.658522][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.670077][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.691423][ T4272] device veth0_macvtap entered promiscuous mode [ 83.720316][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.733363][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.750330][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.762370][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.774259][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.791021][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.801982][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.812174][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.823449][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.835427][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.848193][ T4274] device veth1_vlan entered promiscuous mode [ 83.867000][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.882224][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.904642][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.927565][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.937415][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.946507][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.958951][ T4272] device veth1_macvtap entered promiscuous mode [ 83.995183][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.003063][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.053562][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.074108][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.091060][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.103620][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.113967][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.125004][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.137165][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.145206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.153239][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.167052][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.176762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.210990][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.227271][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.238232][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.249116][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.260795][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.278893][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.294017][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.309861][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.314477][ T4274] device veth0_macvtap entered promiscuous mode [ 84.326784][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.370674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.411849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.451213][ T4360] loop1: detected capacity change from 0 to 1024 [ 84.553397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.644571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.736973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.854729][ T4274] device veth1_macvtap entered promiscuous mode [ 84.876866][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.891531][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915320][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.924064][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.023054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.048451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.176180][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.217589][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.225388][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 85.228214][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 85.233475][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 85.239710][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 85.260285][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.271913][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.299531][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 85.313922][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.332045][ T4370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.334583][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.357264][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.386615][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.416206][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.433700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.456763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.503400][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.505641][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.530504][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.531936][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.548964][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.559585][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.569613][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.580314][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.590496][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.601175][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.636512][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.666583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.681891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.711453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.726561][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.758748][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.767644][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784615][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.865378][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.872564][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.897095][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.897531][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.958119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.970045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.711148][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.737388][ T14] cfg80211: failed to load regulatory.db [ 86.814471][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.833078][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.905084][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.963850][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.013486][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.090329][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.104625][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.147005][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.891607][ T4398] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 88.158973][ T4400] 9pnet: Could not find request transport: fdÿÿ [ 88.164857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 88.479394][ T4405] loop2: detected capacity change from 0 to 256 [ 88.509112][ T4407] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 89.409462][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.505406][ T4401] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 92.496131][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 93.351989][ T4467] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 93.511461][ T4470] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 93.796090][ T4469] 9pnet: Could not find request transport: fdÿÿ [ 93.869606][ T4473] loop4: detected capacity change from 0 to 256 [ 94.620641][ T4487] loop0: detected capacity change from 0 to 1024 [ 96.399726][ T4511] ================================================================== [ 96.407824][ T4511] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 96.415051][ T4511] Read of size 8 at addr ffff8881466ab818 by task syz.1.38/4511 [ 96.422670][ T4511] [ 96.424988][ T4511] CPU: 1 PID: 4511 Comm: syz.1.38 Not tainted syzkaller #0 [ 96.432174][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.442224][ T4511] Call Trace: [ 96.445498][ T4511] [ 96.448421][ T4511] dump_stack_lvl+0x188/0x24e [ 96.453114][ T4511] ? read_lock_is_recursive+0x10/0x10 [ 96.458493][ T4511] ? show_regs_print_info+0x12/0x12 [ 96.463688][ T4511] ? load_image+0x410/0x410 [ 96.468182][ T4511] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 96.473635][ T4511] ? __virt_addr_valid+0x188/0x540 [ 96.478745][ T4511] ? __virt_addr_valid+0x467/0x540 [ 96.483852][ T4511] ? dvb_device_open+0xc5/0x360 [ 96.488700][ T4511] print_report+0xa8/0x210 [ 96.493108][ T4511] kasan_report+0x10b/0x140 [ 96.497620][ T4511] ? dvb_device_open+0xc5/0x360 [ 96.502491][ T4511] dvb_device_open+0xc5/0x360 [ 96.507196][ T4511] chrdev_open+0x585/0x5f0 [ 96.511621][ T4511] ? cd_forget+0x160/0x160 [ 96.516033][ T4511] ? fsnotify_perm+0x39b/0x550 [ 96.520790][ T4511] ? cd_forget+0x160/0x160 [ 96.525220][ T4511] do_dentry_open+0x7dd/0x10b0 [ 96.529979][ T4511] path_openat+0x2674/0x2f10 [ 96.534579][ T4511] ? verify_lock_unused+0x140/0x140 [ 96.539774][ T4511] ? do_sys_openat2+0xdd/0x4f0 [ 96.544547][ T4511] ? do_filp_open+0x420/0x420 [ 96.549221][ T4511] do_filp_open+0x1ee/0x420 [ 96.553719][ T4511] ? vfs_tmpfile+0x470/0x470 [ 96.558326][ T4511] ? _raw_spin_unlock+0x24/0x40 [ 96.563200][ T4511] ? alloc_fd+0x590/0x640 [ 96.567531][ T4511] do_sys_openat2+0x14b/0x4f0 [ 96.572205][ T4511] ? do_sys_open+0xe0/0xe0 [ 96.576637][ T4511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.582631][ T4511] ? lock_chain_count+0x20/0x20 [ 96.587480][ T4511] __x64_sys_openat+0x135/0x160 [ 96.592326][ T4511] do_syscall_64+0x4c/0xa0 [ 96.596743][ T4511] ? clear_bhb_loop+0x60/0xb0 [ 96.601415][ T4511] ? clear_bhb_loop+0x60/0xb0 [ 96.606087][ T4511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.611976][ T4511] RIP: 0033:0x7fe4e6f5e90e [ 96.616387][ T4511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.635990][ T4511] RSP: 002b:00007fe4e7f58b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.644413][ T4511] RAX: ffffffffffffffda RBX: 00007fe4e7f596c0 RCX: 00007fe4e6f5e90e [ 96.652378][ T4511] RDX: 0000000000040402 RSI: 00007fe4e7f58c00 RDI: ffffffffffffff9c [ 96.660354][ T4511] RBP: 00007fe4e7f58c00 R08: 0000000000000000 R09: 0000000000000000 [ 96.668327][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 96.676312][ T4511] R13: 00007fe4e7226038 R14: 00007fe4e7225fa0 R15: 00007ffd76cfe718 [ 96.684286][ T4511] [ 96.687316][ T4511] [ 96.689635][ T4511] Allocated by task 1: [ 96.693694][ T4511] kasan_set_track+0x4b/0x70 [ 96.698287][ T4511] __kasan_kmalloc+0x8e/0xa0 [ 96.702873][ T4511] dvb_register_device+0x305/0x1dc0 [ 96.708070][ T4511] dvb_register_frontend+0x629/0x900 [ 96.713350][ T4511] vidtv_bridge_probe+0x9cf/0xf50 [ 96.718367][ T4511] platform_probe+0x137/0x1c0 [ 96.723041][ T4511] really_probe+0x24a/0xb40 [ 96.727537][ T4511] __driver_probe_device+0x1f5/0x390 [ 96.732835][ T4511] driver_probe_device+0x4f/0x420 [ 96.737863][ T4511] __driver_attach+0x43d/0x6c0 [ 96.742642][ T4511] bus_for_each_dev+0x182/0x1f0 [ 96.747571][ T4511] bus_add_driver+0x324/0x5d0 [ 96.752240][ T4511] driver_register+0x32d/0x430 [ 96.756996][ T4511] vidtv_bridge_init+0x39/0x67 [ 96.761755][ T4511] do_one_initcall+0x257/0x800 [ 96.766517][ T4511] do_initcall_level+0x13d/0x1ed [ 96.771467][ T4511] do_initcalls+0x4b/0x8a [ 96.775815][ T4511] kernel_init_freeable+0x401/0x5ab [ 96.781072][ T4511] kernel_init+0x19/0x1b0 [ 96.785446][ T4511] ret_from_fork+0x1f/0x30 [ 96.789860][ T4511] [ 96.792201][ T4511] Freed by task 4467: [ 96.794792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.796165][ T4511] kasan_set_track+0x4b/0x70 [ 96.804797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.808897][ T4511] kasan_save_free_info+0x27/0x40 [ 96.822100][ T4511] ____kasan_slab_free+0x126/0x1f0 [ 96.824795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.827219][ T4511] slab_free_freelist_hook+0x133/0x1b0 [ 96.840930][ T4511] __kmem_cache_free+0xb6/0x200 [ 96.844798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.845779][ T4511] dvb_device_open+0x2d2/0x360 [ 96.854776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.858675][ T4511] chrdev_open+0x585/0x5f0 [ 96.871279][ T4511] do_dentry_open+0x7dd/0x10b0 [ 96.874779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.876055][ T4511] path_openat+0x2674/0x2f10 [ 96.884781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.888782][ T4511] do_filp_open+0x1ee/0x420 [ 96.901684][ T4511] do_sys_openat2+0x14b/0x4f0 [ 96.904788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.906386][ T4511] __x64_sys_openat+0x135/0x160 [ 96.919526][ T4511] do_syscall_64+0x4c/0xa0 [ 96.924003][ T4511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.929914][ T4511] [ 96.932246][ T4511] The buggy address belongs to the object at ffff8881466ab800 [ 96.932246][ T4511] which belongs to the cache kmalloc-256 of size 256 [ 96.944791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.946290][ T4511] The buggy address is located 24 bytes inside of [ 96.946290][ T4511] 256-byte region [ffff8881466ab800, ffff8881466ab900) [ 96.967718][ T4511] [ 96.970047][ T4511] The buggy address belongs to the physical page: [ 96.976455][ T4511] page:ffffea000519aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1466aa [ 96.986684][ T4511] head:ffffea000519aa80 order:1 compound_mapcount:0 compound_pincount:0 [ 96.995017][ T4511] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 97.003079][ T4511] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 97.011667][ T4511] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 97.020252][ T4511] page dumped because: kasan: bad access detected [ 97.026667][ T4511] page_owner tracks the page as allocated [ 97.032377][ T4511] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16919885534, free_ts 0 [ 97.052080][ T4511] post_alloc_hook+0x173/0x1a0 [ 97.056851][ T4511] get_page_from_freelist+0x206b/0x2180 [ 97.062410][ T4511] __alloc_pages+0x1ec/0x4f0 [ 97.067010][ T4511] alloc_page_interleave+0x24/0x1e0 [ 97.072207][ T4511] alloc_slab_page+0x5d/0x180 [ 97.076895][ T4511] new_slab+0x87/0x2d0 [ 97.080962][ T4511] ___slab_alloc+0xbc5/0x1240 [ 97.085632][ T4511] __kmem_cache_alloc_node+0x126/0x270 [ 97.091083][ T4511] kmalloc_trace+0x26/0xe0 [ 97.095509][ T4511] bus_add_driver+0xdc/0x5d0 [ 97.100124][ T4511] driver_register+0x32d/0x430 [ 97.104908][ T4511] usb_register_driver+0x201/0x3c0 [ 97.110027][ T4511] do_one_initcall+0x257/0x800 [ 97.114795][ T4511] do_initcall_level+0x13d/0x1ed [ 97.119734][ T4511] do_initcalls+0x4b/0x8a [ 97.124058][ T4511] kernel_init_freeable+0x401/0x5ab [ 97.129257][ T4511] page_owner free stack trace missing [ 97.134612][ T4511] [ 97.136944][ T4511] Memory state around the buggy address: [ 97.142560][ T4511] ffff8881466ab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.150713][ T4511] ffff8881466ab780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.158780][ T4511] >ffff8881466ab800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.166840][ T4511] ^ [ 97.171689][ T4511] ffff8881466ab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.179765][ T4511] ffff8881466ab900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.187818][ T4511] ================================================================== [ 97.196017][ T4511] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.203207][ T4511] CPU: 1 PID: 4511 Comm: syz.1.38 Not tainted syzkaller #0 [ 97.210411][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.220459][ T4511] Call Trace: [ 97.223749][ T4511] [ 97.226677][ T4511] dump_stack_lvl+0x188/0x24e [ 97.231354][ T4511] ? memcpy+0x3c/0x60 [ 97.235330][ T4511] ? show_regs_print_info+0x12/0x12 [ 97.240716][ T4511] ? load_image+0x410/0x410 [ 97.245220][ T4511] panic+0x2d3/0x710 [ 97.249117][ T4511] ? bpf_jit_dump+0xd0/0xd0 [ 97.253628][ T4511] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 97.259517][ T4511] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.265420][ T4511] ? _raw_spin_unlock+0x40/0x40 [ 97.270266][ T4511] check_panic_on_warn+0x80/0xa0 [ 97.275214][ T4511] ? dvb_device_open+0xc5/0x360 [ 97.280057][ T4511] end_report+0x66/0x110 [ 97.284296][ T4511] kasan_report+0x118/0x140 [ 97.288795][ T4511] ? dvb_device_open+0xc5/0x360 [ 97.293660][ T4511] dvb_device_open+0xc5/0x360 [ 97.298357][ T4511] chrdev_open+0x585/0x5f0 [ 97.302782][ T4511] ? cd_forget+0x160/0x160 [ 97.307206][ T4511] ? fsnotify_perm+0x39b/0x550 [ 97.311960][ T4511] ? cd_forget+0x160/0x160 [ 97.316371][ T4511] do_dentry_open+0x7dd/0x10b0 [ 97.321234][ T4511] path_openat+0x2674/0x2f10 [ 97.325823][ T4511] ? verify_lock_unused+0x140/0x140 [ 97.331019][ T4511] ? do_sys_openat2+0xdd/0x4f0 [ 97.335950][ T4511] ? do_filp_open+0x420/0x420 [ 97.340621][ T4511] do_filp_open+0x1ee/0x420 [ 97.345134][ T4511] ? vfs_tmpfile+0x470/0x470 [ 97.349737][ T4511] ? _raw_spin_unlock+0x24/0x40 [ 97.354592][ T4511] ? alloc_fd+0x590/0x640 [ 97.358923][ T4511] do_sys_openat2+0x14b/0x4f0 [ 97.363593][ T4511] ? do_sys_open+0xe0/0xe0 [ 97.368002][ T4511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.373987][ T4511] ? lock_chain_count+0x20/0x20 [ 97.378835][ T4511] __x64_sys_openat+0x135/0x160 [ 97.383682][ T4511] do_syscall_64+0x4c/0xa0 [ 97.388095][ T4511] ? clear_bhb_loop+0x60/0xb0 [ 97.392767][ T4511] ? clear_bhb_loop+0x60/0xb0 [ 97.397518][ T4511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.403431][ T4511] RIP: 0033:0x7fe4e6f5e90e [ 97.407850][ T4511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.427477][ T4511] RSP: 002b:00007fe4e7f58b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.435900][ T4511] RAX: ffffffffffffffda RBX: 00007fe4e7f596c0 RCX: 00007fe4e6f5e90e [ 97.443866][ T4511] RDX: 0000000000040402 RSI: 00007fe4e7f58c00 RDI: ffffffffffffff9c [ 97.451852][ T4511] RBP: 00007fe4e7f58c00 R08: 0000000000000000 R09: 0000000000000000 [ 97.459845][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 97.467811][ T4511] R13: 00007fe4e7226038 R14: 00007fe4e7225fa0 R15: 00007ffd76cfe718 [ 97.475780][ T4511] [ 97.478924][ T4511] Kernel Offset: disabled [ 97.483246][ T4511] Rebooting in 86400 seconds..