last executing test programs: 14.27095412s ago: executing program 2 (id=108): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 13.081011589s ago: executing program 2 (id=114): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) 11.01037152s ago: executing program 4 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 10.972890361s ago: executing program 3 (id=125): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 10.880282443s ago: executing program 1 (id=126): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe800000000069ad6455"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/67, 0x226000, 0x800, 0x401, 0x2}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20000000) fsmount(r3, 0x0, 0x1) 10.861718154s ago: executing program 0 (id=127): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r0, &(0x7f0000001600)='dummy_udc.0', 0xb) 9.140895056s ago: executing program 3 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x888, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11223344) read(r1, &(0x7f0000000008), 0x8) r2 = eventfd(0x11223340) read(r2, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 8.858880823s ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7.724482311s ago: executing program 4 (id=130): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c06, 0x4) 7.697009291s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, 0x0) r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, 0x0, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(r1, 0x0, 0x0, 0x80800) 7.675259012s ago: executing program 1 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x9, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x5, 0xc, @loopback}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) 7.511992356s ago: executing program 0 (id=133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xd, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000088", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.511119176s ago: executing program 4 (id=134): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2400) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265891488a6", 0x0, 0x4008, 0x10022, 0x3, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000400000000000900020073797a3000000000050005000000000005000100060000000d0003006c6973543a7365740000e20000"], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000500)={0xa, @meta={0x53353543, 0xa2bc33f, 0xd3ed, 0x9e15, 0x6c2a92e7}}) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xb2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0x4}, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="5400000012000100"/24, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) acct(&(0x7f0000000040)='./file0\x00') r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES8=r2, @ANYRESOCT], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.495665286s ago: executing program 3 (id=135): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x20040800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x719467cd]}, 0x8) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000000000)) 7.34802407s ago: executing program 0 (id=136): socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) 6.244437997s ago: executing program 3 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 6.243415077s ago: executing program 2 (id=138): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 6.015161393s ago: executing program 1 (id=139): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x1, {0xa, 0xe2b, 0x7fffffff, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20020830) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) 5.384607278s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 5.251002412s ago: executing program 0 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2.590331367s ago: executing program 2 (id=142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2.328432263s ago: executing program 3 (id=143): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe800000000069ad6455"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/67, 0x226000, 0x800, 0x401, 0x2}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20000000) fsmount(r3, 0x0, 0x1) 2.242497646s ago: executing program 1 (id=144): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r0, &(0x7f0000001600)='dummy_udc.0', 0xb) 1.268553199s ago: executing program 0 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x888, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11223344) read(r1, &(0x7f0000000008), 0x8) r2 = eventfd(0x11223340) read(r2, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1.072266804s ago: executing program 4 (id=146): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2400) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265891488a6", 0x0, 0x4008, 0x10022, 0x3, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000400000000000900020073797a3000000000050005000000000005000100060000000d0003006c6973543a7365740000e20000"], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000500)={0xa, @meta={0x53353543, 0xa2bc33f, 0xd3ed, 0x9e15, 0x6c2a92e7}}) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xb2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0x4}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.015834725s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x7, 0x80000001, 0xa6d8, 0x2, 0x1, 0x40000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x80000003, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4001, 0x10000, 0x0, 0x8, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x3, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x3, 0x0, 0x40, 0x1, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x1, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0x7ffd, 0x7, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) 910.914728ms ago: executing program 3 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, 0x0) r3 = open(0x0, 0x4a6440, 0x1a0) migrate_pages(r2, 0x0, 0x0, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) accept4(r1, 0x0, 0x0, 0x80800) 424.199079ms ago: executing program 0 (id=149): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240)='-{$%}\x88:@^d(*!\x00', 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xe}) openat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x8800000, 0x1, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) write(r3, &(0x7f0000001600)='dummy_udc.0', 0xb) unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r4, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) 59.017569ms ago: executing program 1 (id=150): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2400) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265891488a6", 0x0, 0x4008, 0x10022, 0x3, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000400000000000900020073797a3000000000050005000000000005000100060000000d0003006c6973543a7365740000e20000"], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000500)={0xa, @meta={0x53353543, 0xa2bc33f, 0xd3ed, 0x9e15, 0x6c2a92e7}}) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xb2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0x4}, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="5400000012000100"/24, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) acct(&(0x7f0000000040)='./file0\x00') r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES8=r2, @ANYRESOCT], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 0s ago: executing program 4 (id=151): socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 66.354958][ T4259] cgroup: Unknown subsys name 'net' [ 66.457858][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.967464][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.859598][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.859787][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.869117][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.876113][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.883217][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.892612][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.898156][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.905117][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.911733][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.920105][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.925616][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.939905][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.940386][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.948768][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.955763][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.970637][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.978324][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.985985][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.994264][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.000368][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.002133][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.009322][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.016383][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.024490][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.030780][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.037722][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.054023][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.064779][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.077063][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.084663][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.456581][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 70.574562][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 70.670032][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.678802][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.687688][ T4280] device bridge_slave_0 entered promiscuous mode [ 70.699392][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 70.713574][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.726700][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.734412][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.742600][ T4280] device bridge_slave_1 entered promiscuous mode [ 70.797725][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 70.808744][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.816284][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.825008][ T4273] device bridge_slave_0 entered promiscuous mode [ 70.839653][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.846832][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.855106][ T4273] device bridge_slave_1 entered promiscuous mode [ 70.900247][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.937445][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.966596][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.976081][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.984875][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.996708][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.027229][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.034497][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.042499][ T4272] device bridge_slave_1 entered promiscuous mode [ 71.053186][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.108469][ T4280] team0: Port device team_slave_0 added [ 71.115044][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.122401][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.130121][ T4284] device bridge_slave_0 entered promiscuous mode [ 71.155000][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.165591][ T4280] team0: Port device team_slave_1 added [ 71.173007][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.183682][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.190996][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.199152][ T4284] device bridge_slave_1 entered promiscuous mode [ 71.206892][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.214365][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.222143][ T4281] device bridge_slave_0 entered promiscuous mode [ 71.232126][ T4273] team0: Port device team_slave_0 added [ 71.246797][ T4273] team0: Port device team_slave_1 added [ 71.266200][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.274386][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.282641][ T4281] device bridge_slave_1 entered promiscuous mode [ 71.316089][ T4272] team0: Port device team_slave_0 added [ 71.331153][ T4272] team0: Port device team_slave_1 added [ 71.351877][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.359254][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.385508][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.399238][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.424269][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.431264][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.457827][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.476343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.483008][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.495044][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.502030][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.528053][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.542431][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.554024][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.578014][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.585265][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.612448][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.630233][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.645873][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.653678][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.680804][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.711349][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.718409][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.744889][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.758794][ T4284] team0: Port device team_slave_0 added [ 71.789054][ T4281] team0: Port device team_slave_0 added [ 71.802890][ T4284] team0: Port device team_slave_1 added [ 71.825808][ T4281] team0: Port device team_slave_1 added [ 71.860291][ T4280] device hsr_slave_0 entered promiscuous mode [ 71.867218][ T4280] device hsr_slave_1 entered promiscuous mode [ 71.879354][ T4273] device hsr_slave_0 entered promiscuous mode [ 71.886652][ T4273] device hsr_slave_1 entered promiscuous mode [ 71.893912][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.901918][ T4273] Cannot create hsr debugfs directory [ 71.916068][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.923198][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.949462][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.969678][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.976746][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.003304][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.035995][ T4272] device hsr_slave_0 entered promiscuous mode [ 72.044457][ T4272] device hsr_slave_1 entered promiscuous mode [ 72.050984][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.058763][ T4272] Cannot create hsr debugfs directory [ 72.086352][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.095002][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.113722][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 72.126818][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.127514][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 72.138245][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 72.145140][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 72.150243][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 72.198613][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.205748][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.231783][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.271769][ T4284] device hsr_slave_0 entered promiscuous mode [ 72.279556][ T4284] device hsr_slave_1 entered promiscuous mode [ 72.287281][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.295086][ T4284] Cannot create hsr debugfs directory [ 72.391713][ T4281] device hsr_slave_0 entered promiscuous mode [ 72.400054][ T4281] device hsr_slave_1 entered promiscuous mode [ 72.406741][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.414712][ T4281] Cannot create hsr debugfs directory [ 72.671796][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.695158][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.707075][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.720952][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.756897][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.780986][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.798923][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.839876][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.856562][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.867680][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.890445][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.900012][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.930151][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.979008][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.989788][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.003547][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.070331][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.101405][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.115899][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.128385][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.143708][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.206312][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.216892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.230312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.260186][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.279460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.288362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.305188][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.316691][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.335093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.346263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.356268][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.363645][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.373518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.384999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.393920][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.400978][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.426477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.435137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.444376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.454074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.462833][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.470190][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.480016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.488409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.502635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.514570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.530374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.541998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.551457][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.558637][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.574618][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.594121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.608374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.617654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.628802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.639111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.648178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.657618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.666301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.692571][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.705543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.717818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.728928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.741326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.750417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.760391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.769770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.778943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.788064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.798152][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.805321][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.813925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.824019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.846304][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.856318][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.866179][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.873324][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.891210][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.902497][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.914747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.924471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.934414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.943745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.958130][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.969242][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.995831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.008870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.018708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.029215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.038884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.048393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.057590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.066539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.086146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.106406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.134149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.152885][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.176893][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.192387][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 74.193073][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 74.198429][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 74.204969][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 74.210930][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 74.233537][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.248713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.263182][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.271057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.281468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.298748][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.317852][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.348553][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.359167][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.367026][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.382032][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.393690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.408497][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.415687][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.430216][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.508366][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.537427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.565418][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.572715][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.604566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.623529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.642098][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.650007][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.663580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.674745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.683768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.693403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.702763][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.711201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.720765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.730097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.738696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.747733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.758864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.767546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.776163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.804474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.813922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.829781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.848349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.857420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.872399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.881076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.894818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.935111][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.951049][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.967803][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.976580][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.985416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.995349][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.005421][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.013968][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.024214][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.035206][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.080353][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.088598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.097370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.169484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.180018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.200846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.223635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.290246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.313837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.336517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.353069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.364492][ T4280] device veth0_vlan entered promiscuous mode [ 75.376768][ T4272] device veth0_vlan entered promiscuous mode [ 75.393336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.401298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.434993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.453756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.487098][ T4280] device veth1_vlan entered promiscuous mode [ 75.509481][ T4272] device veth1_vlan entered promiscuous mode [ 75.576108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.587824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.596826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.606215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.616463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.625909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.646216][ T4280] device veth0_macvtap entered promiscuous mode [ 75.670013][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.698998][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.714088][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.740628][ T4280] device veth1_macvtap entered promiscuous mode [ 75.752440][ T4272] device veth0_macvtap entered promiscuous mode [ 75.763106][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.782969][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.804458][ T4272] device veth1_macvtap entered promiscuous mode [ 75.840790][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.868546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.881440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.893539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.901171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.919946][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.966150][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.983597][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.995531][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.011054][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.018686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.029239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.039739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.048138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.057135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.074784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.091885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.100844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.116439][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.126801][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.135790][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.144997][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158037][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.167722][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.180763][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.193886][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.214939][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.223951][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.232954][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.241670][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.267413][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.275893][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 76.281935][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 76.282434][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 76.288185][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 76.294027][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 76.304325][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.315275][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.324169][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.370457][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.379696][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.389489][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.398863][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.408126][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.417138][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.433969][ T4281] device veth0_vlan entered promiscuous mode [ 76.451114][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.463637][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.485582][ T4284] device veth0_vlan entered promiscuous mode [ 76.500824][ T4281] device veth1_vlan entered promiscuous mode [ 76.508231][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.517982][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.527919][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.581124][ T4284] device veth1_vlan entered promiscuous mode [ 76.603963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.614311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.622773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.631047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.646075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.654623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.676983][ T4273] device veth0_vlan entered promiscuous mode [ 76.717099][ T4281] device veth0_macvtap entered promiscuous mode [ 76.727893][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.737422][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.746364][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.762956][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.771007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.786862][ T4281] device veth1_macvtap entered promiscuous mode [ 76.807342][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.817974][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.826793][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.851159][ T4273] device veth1_vlan entered promiscuous mode [ 76.888196][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.898465][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.921121][ T4284] device veth0_macvtap entered promiscuous mode [ 76.936614][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.947738][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.958404][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.969853][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.982565][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.991205][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.008498][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.039073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.048902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.060977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.070529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.086773][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.098559][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.109249][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.119973][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.131279][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.141638][ T4284] device veth1_macvtap entered promiscuous mode [ 77.151994][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.155923][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.171469][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.173644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.189516][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.190720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.206595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.215815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.228644][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.240399][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.249648][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.258626][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.301089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.310172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.323854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.336105][ T4273] device veth0_macvtap entered promiscuous mode [ 77.353034][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.364453][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.376398][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.387370][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.398796][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.409350][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.421778][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.467260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.478146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.488360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.499614][ T4273] device veth1_macvtap entered promiscuous mode [ 77.510884][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.539212][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.551965][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.569844][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.582102][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.599133][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.611252][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.659080][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.670110][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.691978][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.720700][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.758776][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.767995][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.780853][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.804191][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.816159][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.830061][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.840904][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.856726][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.868635][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.889621][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.904512][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.923739][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.939614][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 77.948284][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.965841][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.992419][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 77.993078][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.011382][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.022325][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.033442][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.052494][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.065095][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.075271][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.092261][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.107051][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.119452][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.136288][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.155697][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.171395][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.190002][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.202037][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 78.205995][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222530][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.241493][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.245583][ T4360] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.258061][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.288294][ T4360] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.352377][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 78.358893][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 78.365206][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 78.365224][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 78.371316][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 78.427285][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.448382][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.486660][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 78.578723][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.183950][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 79.242221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 79.288068][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.305428][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.346455][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 79.359382][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.443625][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 79.467674][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.492072][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.500891][ T4360] wlan0 speed is unknown, defaulting to 1000 [ 79.768085][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.828609][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.839661][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.860111][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.869366][ T4374] lo speed is unknown, defaulting to 1000 [ 79.892436][ T4374] lo speed is unknown, defaulting to 1000 [ 79.893623][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.066726][ T4287] Bluetooth: hci0: Malformed HCI Event [ 80.079514][ T4389] Bluetooth: MGMT ver 1.22 [ 80.743330][ T4387] Can't find ip_set type lisT:set [ 81.021473][ T4391] Can't find ip_set type lisT:set [ 81.047913][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.056629][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.078042][ T4374] lo speed is unknown, defaulting to 1000 [ 81.199825][ T4374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.273413][ T4374] lo speed is unknown, defaulting to 1000 [ 81.279962][ T4374] lo speed is unknown, defaulting to 1000 [ 81.333166][ T4374] lo speed is unknown, defaulting to 1000 [ 81.375362][ T4374] lo speed is unknown, defaulting to 1000 [ 81.405871][ T4374] lo speed is unknown, defaulting to 1000 [ 81.612018][ T4405] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0 [ 84.056848][ T4424] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 84.554410][ T4436] siw: device registration error -23 [ 85.154712][ T4439] netlink: 'syz.1.21': attribute type 3 has an invalid length. [ 86.692184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.837267][ T1182] cfg80211: failed to load regulatory.db [ 87.482204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 87.666890][ T4450] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 87.832192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.112284][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.372876][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 91.414970][ T4319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 91.433890][ T4319] usb 4-1: can't read configurations, error -71 [ 91.522210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.539538][ T4477] Zero length message leads to an empty skb [ 91.552205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.562195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.572195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.812191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 93.127386][ T4471] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 93.555220][ T4480] netlink: 'syz.4.33': attribute type 3 has an invalid length. [ 96.400758][ T4498] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 98.382571][ T1182] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.012418][ T1182] usb 1-1: Using ep0 maxpacket: 32 [ 100.537391][ T1182] usb 1-1: config 0 has no interfaces? [ 100.993223][ T1182] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.029571][ T1182] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.085372][ T1182] usb 1-1: Product: syz [ 101.089619][ T1182] usb 1-1: Manufacturer: syz [ 101.174287][ T1182] usb 1-1: config 0 descriptor?? [ 101.180521][ T1182] usb 1-1: can't set config #0, error -71 [ 101.225910][ T1182] usb 1-1: USB disconnect, device number 2 [ 101.382000][ T4526] siw: device registration error -23 [ 101.552216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.109358][ T4557] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 105.233624][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.112384][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 106.119928][ T4320] usb 2-1: config 0 has no interfaces? [ 106.168235][ T4320] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.222309][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.269613][ T4320] usb 2-1: Product: syz [ 106.278286][ T4320] usb 2-1: Manufacturer: syz [ 106.298208][ T4320] usb 2-1: SerialNumber: syz [ 106.353786][ T4320] usb 2-1: config 0 descriptor?? [ 107.295119][ T4320] usb 2-1: USB disconnect, device number 2 [ 108.514178][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 108.520270][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 108.562829][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 108.659370][ T4596] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 110.821522][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 110.889288][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 110.911047][ T4602] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 110.928495][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 110.961776][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 111.004245][ T4596] wlan0 speed is unknown, defaulting to 1000 [ 111.044410][ T4615] siw: device registration error -23 [ 112.293747][ T4620] zswap: compressor ˜¬ÄW not available [ 112.792397][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.022741][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 113.043771][ T41] usb 5-1: config 0 has no interfaces? [ 113.202734][ T41] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.408148][ T41] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.627689][ T41] usb 5-1: Product: syz [ 113.758941][ T41] usb 5-1: Manufacturer: syz [ 113.878169][ T41] usb 5-1: SerialNumber: syz [ 114.166029][ T41] usb 5-1: config 0 descriptor?? [ 117.440654][ T4322] usb 5-1: USB disconnect, device number 2 [ 117.527827][ T4656] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 118.071251][ T4672] siw: device registration error -23 [ 120.291954][ T4701] process 'syz.2.99' launched './file0' with NULL argv: empty string added [ 120.613123][ T1182] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.842495][ T1182] usb 4-1: Using ep0 maxpacket: 32 [ 120.850630][ T1182] usb 4-1: config 0 has no interfaces? [ 120.954872][ T1182] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.064568][ T1182] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.207147][ T1182] usb 4-1: Product: syz [ 121.261985][ T1182] usb 4-1: Manufacturer: syz [ 121.880541][ T1182] usb 4-1: SerialNumber: syz [ 122.100920][ T1182] usb 4-1: config 0 descriptor?? [ 123.338876][ T41] usb 4-1: USB disconnect, device number 4 [ 123.540859][ T4711] siw: device registration error -23 [ 125.812929][ T4758] siw: device registration error -23 [ 127.522365][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.972498][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 128.989964][ T4321] usb 5-1: config 0 has no interfaces? [ 129.154075][ T4321] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.153038][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.161366][ T4321] usb 5-1: Product: syz [ 130.165981][ T4321] usb 5-1: Manufacturer: syz [ 130.170715][ T4321] usb 5-1: SerialNumber: syz [ 130.183237][ T4321] usb 5-1: config 0 descriptor?? [ 130.199567][ T4321] usb 5-1: can't set config #0, error -71 [ 130.206457][ T4321] usb 5-1: USB disconnect, device number 3 [ 130.248675][ T4785] siw: device registration error -23 [ 131.794338][ T4287] Bluetooth: hci4: Malformed HCI Event [ 132.593136][ T4812] Can't find ip_set type lisT:set [ 132.916503][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928686][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.601172][ T4827] netlink: 'syz.1.139': attribute type 3 has an invalid length. [ 135.602397][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.822335][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 136.620472][ T4323] usb 5-1: config 0 has no interfaces? [ 136.628898][ T4323] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.638910][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.647300][ T4323] usb 5-1: Product: syz [ 136.651607][ T4323] usb 5-1: Manufacturer: syz [ 136.656491][ T4323] usb 5-1: SerialNumber: syz [ 136.662752][ T4323] usb 5-1: config 0 descriptor?? [ 136.717310][ T4837] loop2: detected capacity change from 0 to 256 [ 136.851484][ T4323] usb 5-1: can't set config #0, error -71 [ 136.894118][ T4323] usb 5-1: USB disconnect, device number 4 [ 137.092446][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.189719][ T4287] Bluetooth: hci4: Malformed HCI Event [ 137.336319][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.461297][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.713922][ T4321] usb 1-1: Dual-Role OTG device on HNP port [ 137.848793][ T4321] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 137.899760][ T4845] Can't find ip_set type lisT:set [ 137.957939][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.022114][ C0] ------------[ cut here ]------------ [ 138.027864][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 138.035017][ C0] WARNING: CPU: 0 PID: 4323 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 138.045314][ C0] Modules linked in: [ 138.049206][ C0] CPU: 0 PID: 4323 Comm: kworker/0:7 Not tainted syzkaller #0 [ 138.056746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.066796][ C0] Workqueue: events_freezable update_balloon_stats_func [ 138.073752][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 138.079209][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 138.098897][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 138.104962][ C0] RAX: 429fbd7079062100 RBX: ffff888027a880e0 RCX: ffff88802446bc00 [ 138.113119][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 138.121120][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 138.129120][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 138.137120][ C0] R13: ffff888027a8810d R14: ffff888027a880e8 R15: ffff8880557ba6ba [ 138.145115][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.154193][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.160817][ C0] CR2: 000000110c3fb791 CR3: 000000002898b000 CR4: 00000000003506f0 [ 138.168985][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.177163][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.185329][ C0] Call Trace: [ 138.188635][ C0] [ 138.191497][ C0] hidg_set_alt+0x126/0xa00 [ 138.196115][ C0] ? usb_gadget_set_state+0x142/0x310 [ 138.201500][ C0] set_config+0x6e8/0xf70 [ 138.205846][ C0] composite_setup+0x194c/0x2b00 [ 138.210973][ C0] configfs_composite_setup+0xc3/0x100 [ 138.216444][ C0] dummy_timer+0x12ea/0x3420 [ 138.221055][ C0] ? __lock_acquire+0x1465/0x7c40 [ 138.226112][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 138.231153][ C0] ? lock_chain_count+0x20/0x20 [ 138.236024][ C0] ? dummy_free_streams+0x520/0x520 [ 138.241238][ C0] __hrtimer_run_queues+0x522/0xc90 [ 138.246459][ C0] ? dummy_free_streams+0x520/0x520 [ 138.251683][ C0] ? hrtimer_interrupt+0x980/0x980 [ 138.256815][ C0] hrtimer_run_softirq+0x173/0x290 [ 138.262040][ C0] handle_softirqs+0x291/0x910 [ 138.266826][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 138.271693][ C0] ? do_softirq+0x210/0x210 [ 138.276202][ C0] ? hrtimer_interrupt+0x775/0x980 [ 138.281331][ C0] __irq_exit_rcu+0x13b/0x230 [ 138.286017][ C0] ? irq_exit_rcu+0x20/0x20 [ 138.290537][ C0] irq_exit_rcu+0x5/0x20 [ 138.294939][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 138.300585][ C0] [ 138.303551][ C0] [ 138.306492][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.312925][ C0] RIP: 0010:iowrite16+0x33/0x80 [ 138.317789][ C0] Code: ce 68 fd 48 81 fb 00 00 04 00 72 0a e8 a6 ce 68 fd 66 89 2b eb 55 48 81 fb 01 00 01 00 72 0d e8 93 ce 68 fd 89 e8 89 da 66 ef 3f 8b 2d 45 42 03 09 31 ff 89 ee e8 dc d1 68 fd 85 ed 74 27 e8 [ 138.337494][ C0] RSP: 0018:ffffc900041f7648 EFLAGS: 00000293 [ 138.343575][ C0] RAX: 0000000000000002 RBX: 000000000001c090 RCX: ffff88802446bc00 [ 138.351554][ C0] RDX: 000000000001c090 RSI: 000000000001c090 RDI: 0000000000000002 [ 138.359535][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: ffff88801d380000 [ 138.367601][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 138.375578][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff110284c9489 [ 138.383572][ C0] ? iowrite16+0x2d/0x80 [ 138.387827][ C0] vp_notify+0x53/0x70 [ 138.391913][ C0] virtqueue_kick+0x363/0x540 [ 138.396619][ C0] update_balloon_stats_func+0x69d/0xb30 [ 138.402268][ C0] ? virtballoon_restore+0x3b0/0x3b0 [ 138.407825][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 138.412862][ C0] ? _raw_spin_unlock+0x40/0x40 [ 138.417720][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.422942][ C0] ? process_one_work+0x7b4/0x1160 [ 138.428158][ C0] process_one_work+0x8ab/0x1160 [ 138.433119][ C0] ? worker_detach_from_pool+0x240/0x240 [ 138.438886][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 138.443920][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 138.449478][ C0] ? wq_worker_running+0x97/0x190 [ 138.454541][ C0] worker_thread+0xaf5/0x12a0 [ 138.459250][ C0] kthread+0x29d/0x330 [ 138.463329][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 138.468364][ C0] ? kthread_blkcg+0xd0/0xd0 [ 138.473051][ C0] ret_from_fork+0x1f/0x30 [ 138.477500][ C0] [ 138.480534][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.487814][ C0] CPU: 0 PID: 4323 Comm: kworker/0:7 Not tainted syzkaller #0 [ 138.495276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.505351][ C0] Workqueue: events_freezable update_balloon_stats_func [ 138.512301][ C0] Call Trace: [ 138.515581][ C0] [ 138.518430][ C0] dump_stack_lvl+0x188/0x24e [ 138.523135][ C0] ? memcpy+0x3c/0x60 [ 138.527122][ C0] ? show_regs_print_info+0x12/0x12 [ 138.532335][ C0] ? load_image+0x410/0x410 [ 138.536951][ C0] panic+0x2d3/0x710 [ 138.541059][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 138.545572][ C0] ? ret_from_fork+0x1f/0x30 [ 138.550199][ C0] __warn+0x2f8/0x4f0 [ 138.554187][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 138.558968][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 138.563946][ C0] report_bug+0x2ba/0x4f0 [ 138.568283][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 138.573081][ C0] handle_bug+0x3a/0x70 [ 138.577268][ C0] exc_invalid_op+0x16/0x40 [ 138.581797][ C0] asm_exc_invalid_op+0x16/0x20 [ 138.586679][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 138.592060][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 138.611678][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 138.617753][ C0] RAX: 429fbd7079062100 RBX: ffff888027a880e0 RCX: ffff88802446bc00 [ 138.625825][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 138.633885][ C0] RBP: 0000000000000081 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 138.641858][ C0] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 138.649930][ C0] R13: ffff888027a8810d R14: ffff888027a880e8 R15: ffff8880557ba6ba [ 138.657918][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 138.662706][ C0] hidg_set_alt+0x126/0xa00 [ 138.667213][ C0] ? usb_gadget_set_state+0x142/0x310 [ 138.672594][ C0] set_config+0x6e8/0xf70 [ 138.677206][ C0] composite_setup+0x194c/0x2b00 [ 138.682168][ C0] configfs_composite_setup+0xc3/0x100 [ 138.687723][ C0] dummy_timer+0x12ea/0x3420 [ 138.692329][ C0] ? __lock_acquire+0x1465/0x7c40 [ 138.697383][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 138.702445][ C0] ? lock_chain_count+0x20/0x20 [ 138.707319][ C0] ? dummy_free_streams+0x520/0x520 [ 138.712549][ C0] __hrtimer_run_queues+0x522/0xc90 [ 138.717778][ C0] ? dummy_free_streams+0x520/0x520 [ 138.723184][ C0] ? hrtimer_interrupt+0x980/0x980 [ 138.728350][ C0] hrtimer_run_softirq+0x173/0x290 [ 138.733496][ C0] handle_softirqs+0x291/0x910 [ 138.738279][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 138.743145][ C0] ? do_softirq+0x210/0x210 [ 138.747677][ C0] ? hrtimer_interrupt+0x775/0x980 [ 138.752803][ C0] __irq_exit_rcu+0x13b/0x230 [ 138.757494][ C0] ? irq_exit_rcu+0x20/0x20 [ 138.762038][ C0] irq_exit_rcu+0x5/0x20 [ 138.766286][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 138.771924][ C0] [ 138.774858][ C0] [ 138.777792][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.783780][ C0] RIP: 0010:iowrite16+0x33/0x80 [ 138.788643][ C0] Code: ce 68 fd 48 81 fb 00 00 04 00 72 0a e8 a6 ce 68 fd 66 89 2b eb 55 48 81 fb 01 00 01 00 72 0d e8 93 ce 68 fd 89 e8 89 da 66 ef 3f 8b 2d 45 42 03 09 31 ff 89 ee e8 dc d1 68 fd 85 ed 74 27 e8 [ 138.808349][ C0] RSP: 0018:ffffc900041f7648 EFLAGS: 00000293 [ 138.814425][ C0] RAX: 0000000000000002 RBX: 000000000001c090 RCX: ffff88802446bc00 [ 138.822404][ C0] RDX: 000000000001c090 RSI: 000000000001c090 RDI: 0000000000000002 [ 138.830463][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: ffff88801d380000 [ 138.838437][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 138.846420][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff110284c9489 [ 138.854406][ C0] ? iowrite16+0x2d/0x80 [ 138.859092][ C0] vp_notify+0x53/0x70 [ 138.863172][ C0] virtqueue_kick+0x363/0x540 [ 138.867870][ C0] update_balloon_stats_func+0x69d/0xb30 [ 138.873535][ C0] ? virtballoon_restore+0x3b0/0x3b0 [ 138.878906][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 138.883963][ C0] ? _raw_spin_unlock+0x40/0x40 [ 138.888948][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.894157][ C0] ? process_one_work+0x7b4/0x1160 [ 138.899274][ C0] process_one_work+0x8ab/0x1160 [ 138.904237][ C0] ? worker_detach_from_pool+0x240/0x240 [ 138.909882][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 138.914910][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 138.920465][ C0] ? wq_worker_running+0x97/0x190 [ 138.925504][ C0] worker_thread+0xaf5/0x12a0 [ 138.930354][ C0] kthread+0x29d/0x330 [ 138.934429][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 138.939458][ C0] ? kthread_blkcg+0xd0/0xd0 [ 138.944150][ C0] ret_from_fork+0x1f/0x30 [ 138.948683][ C0] [ 138.951831][ C0] Kernel Offset: disabled [ 138.956204][ C0] Rebooting in 86400 seconds..