last executing test programs: 13.343687309s ago: executing program 1 (id=177): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xeb}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) 12.211027056s ago: executing program 3 (id=182): syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r1, &(0x7f00000019c0)=[{&(0x7f0000000040)=""/223, 0xdf}], 0x1, 0x1fdc0000, 0x6) 11.005986464s ago: executing program 3 (id=186): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x40) dup3(r1, r0, 0x80000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"}) 8.734940217s ago: executing program 3 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f0000000a40)=""/4144, 0x1030}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000001a80)=""/4103, 0x1007}, {&(0x7f0000000240)=""/21, 0x15}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) syz_clone3(0x0, 0x0) 8.239987858s ago: executing program 1 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 8.14204238s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 7.374774118s ago: executing program 2 (id=198): timer_create(0x0, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) mlockall(0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfeffffff}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.334111519s ago: executing program 1 (id=199): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='hpfs\x00', 0x124000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910ac0000000000c40900000000aa009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r3 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x0, @loopback, 0x9}}, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x6}}}, 0x108) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000003a000/0x1000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 7.333205979s ago: executing program 4 (id=200): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) 6.143418547s ago: executing program 0 (id=201): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x70) 6.142684367s ago: executing program 1 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000240), &(0x7f0000000280)=@udp=r4}, 0x20) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) 5.930159801s ago: executing program 0 (id=203): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 5.527609091s ago: executing program 3 (id=204): fsopen(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 5.273977157s ago: executing program 2 (id=205): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xeb}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) 5.14205702s ago: executing program 0 (id=206): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.244612151s ago: executing program 2 (id=207): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000080)='wg1\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x5]}, {0x2, 0x1bcc, 0x3, 0x10001}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) 4.173979903s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "0800d5f023cdbd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x4000024, 0xffffffff, 0x7, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x4000000, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x2, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0xfffffff2, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0xfee, 0xea4, 0xa, 0xd, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x0, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ee, 0x2, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0xfffffff9, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffffd, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0xba, 0x5, 0x4, 0x54fe12da, 0x0, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0xdb7e, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x2, 0xd367, 0x51bf, 0x5, 0xce7, 0x5, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0xfffffffd, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0x2, 0x8, 0x9, 0x21, 0x6c09, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x7, 0xfff, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 4.104154904s ago: executing program 3 (id=209): socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.786053221s ago: executing program 0 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 3.666919174s ago: executing program 0 (id=211): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x0) listen(0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a34d942225517620514bf62a6f357d0272270a1da1b7240030feaab952ac3003cad04be68807e50e997fc26e40a1f55ceb93", 0x52}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f654a2cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec919157824087", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000840)="ab65faa98379b3ed763097c555c7d8a8eef38de8f453a57cf07384460b8062f874f81ed4234c94554df2f82d2c99e848be9abd5a338b35aa8bc73eef282c18baa83c", 0x42}, {&(0x7f0000000a40)="f1224bee5303d70f916d929c27b8f99efa1a1d37a7e826e39670ea91a7eb14ae8eb94ca33ea995dae5f216341221a36e03ca9da27cfe011bba58924d69fba229da90a40651d9bb2d7d7837770bae752783f4b2c8b4cb8a777fb7ecf766ab91c5fdb501913393972e8915e32d45453b3a8b9ee1bf1c19518ed1a661e437fe485a7d0ea46175294d69e3c6c8e49e01dc390460ce402b21208711acfc5a20eb90f9e39637e1a3d4ce30279cf3dcfeae6e171763", 0xb2}], 0x3}}], 0x6, 0x2090) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 2.693177227s ago: executing program 2 (id=212): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x0) listen(0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a34d942225517620514bf62a6f357d0272270a1da1b7240030feaab952ac3003cad04be68807e50e997fc26e40a1f55ceb93", 0x52}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f654a2cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec919157824087", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000840)="ab65faa98379b3ed763097c555c7d8a8eef38de8f453a57cf07384460b8062f874f81ed4234c94554df2f82d2c99e848be9abd5a338b35aa8bc73eef282c18baa83c", 0x42}, {&(0x7f0000000a40)="f1224bee5303d70f916d929c27b8f99efa1a1d37a7e826e39670ea91a7eb14ae8eb94ca33ea995dae5f216341221a36e03ca9da27cfe011bba58924d69fba229da90a40651d9bb2d7d7837770bae752783f4b2c8b4cb8a777fb7ecf766ab91c5fdb501913393972e8915e32d45453b3a8b9ee1bf1c19518ed1a661e437fe485a7d0ea46175294d69e3c6c8e49e01dc390460ce402b21208711acfc5a20eb90f9e39637e1a3d4ce30279cf3dcfeae6e171763", 0xb2}], 0x3}}], 0x6, 0x2090) 2.670693638s ago: executing program 4 (id=213): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='hpfs\x00', 0x124000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910ac0000000000c40900000000aa009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r3 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x0, @loopback, 0x9}}, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x6}}}, 0x108) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000003a000/0x1000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2.663092488s ago: executing program 0 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x3a, 0xca, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='ad', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) 2.525996051s ago: executing program 1 (id=215): timer_create(0x0, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) mlockall(0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfeffffff}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.432466796s ago: executing program 2 (id=216): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 1.321938129s ago: executing program 4 (id=217): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xeb}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="bc", 0x1}], 0x1) 870.018979ms ago: executing program 2 (id=218): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) epoll_create1(0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 869.810069ms ago: executing program 4 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000002c0)=""/211) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) fcntl$setpipe(r3, 0x407, 0x8011) 840.18182ms ago: executing program 3 (id=220): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB='&\n\x00'], 0x0}, 0x94) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 4 (id=221): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './mnt/module/block2mtd/parameters/block2mtd'}, 0x2f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 57.890445][ T4170] cgroup: Unknown subsys name 'net' [ 58.056713][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.521570][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.382955][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.466310][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.544063][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.557144][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.564382][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.573263][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.584529][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.591859][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.599796][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.607521][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.634690][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.654939][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.686511][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.713960][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.721612][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.729741][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.769298][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.776563][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.785769][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.795246][ T4185] team0: Port device team_slave_0 added [ 61.818522][ T4185] team0: Port device team_slave_1 added [ 61.861840][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.894631][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.902160][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.909907][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.918928][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.928846][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.936316][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.962352][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.981129][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.988237][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.996886][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.004333][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.011561][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.019568][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.032216][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.039183][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.065391][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.079973][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.087447][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.095505][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.103391][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.110482][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.118511][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.138907][ T4186] team0: Port device team_slave_0 added [ 62.146016][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.153220][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.161226][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.181906][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.192701][ T4186] team0: Port device team_slave_1 added [ 62.199873][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.250931][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.262938][ T4189] team0: Port device team_slave_0 added [ 62.282887][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.293250][ T4189] team0: Port device team_slave_1 added [ 62.300457][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.311305][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.324090][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.331187][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.338476][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.345641][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.372328][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.389918][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.396951][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.423500][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.470473][ T4187] team0: Port device team_slave_0 added [ 62.485574][ T4187] team0: Port device team_slave_1 added [ 62.494478][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.501893][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.528117][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.541067][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.548033][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.574475][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.596105][ T4184] team0: Port device team_slave_0 added [ 62.624064][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.631155][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.657197][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.669503][ T4184] team0: Port device team_slave_1 added [ 62.703620][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.710226][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.717125][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.725314][ T4186] Cannot create hsr debugfs directory [ 62.731522][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.738477][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.764553][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.781274][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.788237][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.814431][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.852581][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.859548][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.885863][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.901734][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.908447][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.915681][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.923488][ T4189] Cannot create hsr debugfs directory [ 63.013521][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.020380][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.027415][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.035011][ T4184] Cannot create hsr debugfs directory [ 63.072142][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.078854][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.085595][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.093681][ T4187] Cannot create hsr debugfs directory [ 63.141503][ T4188] Bluetooth: hci1: command 0x0409 tx timeout [ 63.141503][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 63.141901][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 63.147666][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 63.160821][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 63.351886][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.370515][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.379765][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.390027][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.427671][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.437214][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.449444][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.458639][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.527414][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.538346][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.562342][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.571402][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.619884][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.630202][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.664726][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.674104][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.729776][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.757687][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.768919][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.778245][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.812599][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.827590][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.834895][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.848723][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.858212][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.893954][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.906215][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.917255][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.929262][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.953868][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.962065][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.971757][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.980745][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.987991][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.997071][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.006101][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.016485][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.036987][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.047981][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.056887][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.064008][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.071944][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.095473][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.105726][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.114597][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.121699][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.131964][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.140506][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.149326][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.156427][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.164259][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.172983][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.183545][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.190619][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.198220][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.207608][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.216127][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.223206][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.230794][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.248360][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.268085][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.276917][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.285781][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.296405][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.305552][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.324772][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.334087][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.343284][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.352754][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.362456][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.371983][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.381791][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.395478][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.416177][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.424769][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.433767][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.442701][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.451908][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.458970][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.466660][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.477241][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.485765][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.492850][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.504410][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.518958][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.527869][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.561818][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.575763][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.586456][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.599500][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.608263][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.617252][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.626202][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.636606][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.645618][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.654295][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.663252][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.672174][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.680423][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.689784][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.698726][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.707888][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.718956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.727526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.741797][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.757897][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.771308][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.779032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.788742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.797661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.806668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.815538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.829795][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.844380][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.861921][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.873694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.884042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.909464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.923695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.950423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.977151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.998926][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.009411][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.034185][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.041345][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.068882][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.086089][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.125177][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.136457][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.151510][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.164274][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.173229][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.182202][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.191033][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.199450][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.206577][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.215369][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.220929][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 65.223633][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 65.229521][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 65.236363][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.248158][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 65.249401][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 65.259245][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.285501][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.303136][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.318575][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.326680][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.343125][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.356473][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.372328][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.381764][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.390276][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.398974][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.418230][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.444582][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.452740][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.460246][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.470293][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.478767][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.488725][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.499110][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.508651][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.520483][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.533059][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.598726][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.618626][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.648559][ T4186] device veth0_vlan entered promiscuous mode [ 65.667100][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.678505][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.689556][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.698661][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.708204][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.717412][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.729306][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.758778][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.767655][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.786935][ T4186] device veth1_vlan entered promiscuous mode [ 65.798065][ T4184] device veth0_vlan entered promiscuous mode [ 65.819069][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.829575][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.840147][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.869095][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.878715][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.887886][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.908628][ T4184] device veth1_vlan entered promiscuous mode [ 65.924205][ T4186] device veth0_macvtap entered promiscuous mode [ 65.943431][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.952197][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.961289][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.969688][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.978508][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.987849][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.003542][ T4186] device veth1_macvtap entered promiscuous mode [ 66.021992][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.030229][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.039787][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.047534][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.068252][ T4185] device veth0_vlan entered promiscuous mode [ 66.088475][ T4185] device veth1_vlan entered promiscuous mode [ 66.100997][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.109319][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.118476][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.128106][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.135953][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.147654][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.178823][ T4184] device veth0_macvtap entered promiscuous mode [ 66.188838][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.197357][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.207545][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.216926][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.225671][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.234512][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.243229][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.252656][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.260466][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.268813][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.279060][ T4189] device veth0_vlan entered promiscuous mode [ 66.287668][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.306298][ T4184] device veth1_macvtap entered promiscuous mode [ 66.316454][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.327555][ T4185] device veth0_macvtap entered promiscuous mode [ 66.334930][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.344200][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.353427][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.362405][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.371147][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.379781][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.405366][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.414912][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.428134][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.436979][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.474706][ T4189] device veth1_vlan entered promiscuous mode [ 66.485557][ T4185] device veth1_macvtap entered promiscuous mode [ 66.507879][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.518936][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.531245][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.568032][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.578984][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.590841][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.602961][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.614286][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.622284][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.631778][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.639774][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.647972][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.657632][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.672035][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.681124][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.689918][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.698582][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.707948][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.719644][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.731944][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.746237][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.755195][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.764473][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.773344][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.798666][ T4189] device veth0_macvtap entered promiscuous mode [ 66.810167][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.819340][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.828517][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.838504][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.847465][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.872710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.883322][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.893724][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.905047][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.916020][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.933491][ T4189] device veth1_macvtap entered promiscuous mode [ 66.949995][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.958671][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.969145][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.978472][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.989537][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.998701][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.007230][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.015695][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.025183][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.034011][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.043570][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066735][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.078731][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.088751][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.099302][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.109374][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.119938][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.131667][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.143257][ T4187] device veth0_vlan entered promiscuous mode [ 67.156467][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.169247][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.170098][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.184224][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.195324][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.217113][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.230074][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.240615][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.251437][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.262418][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.273138][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.284615][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.314533][ T4187] device veth1_vlan entered promiscuous mode [ 67.317496][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 67.327660][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 67.330315][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.342664][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.346394][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 67.351603][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.357571][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 67.368702][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.377599][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 67.381317][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.396677][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.406709][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.455856][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.465059][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.503325][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.511833][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.521688][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.530224][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.571275][ T4187] device veth0_macvtap entered promiscuous mode [ 67.601857][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.614749][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.631719][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.653200][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.669301][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.685400][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.693900][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.739372][ T4187] device veth1_macvtap entered promiscuous mode [ 67.757572][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.770841][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.778688][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.787285][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.797791][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.806799][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.840611][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.858964][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.871563][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.883158][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.893358][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.905513][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.915510][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.926223][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.944895][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.958205][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.977200][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.992795][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.012982][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.029341][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.531531][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.552122][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.562504][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.602776][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.616218][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.642171][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.652555][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.663586][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689669][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.713096][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.727160][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.736052][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.749718][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.805856][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.813031][ T4274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.833909][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 ¼[ 68.898562][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.940968][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.957095][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.391213][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 69.397468][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 69.421105][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 69.427158][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 69.462876][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 70.045520][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.192534][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.810693][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.820714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.830690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.840691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.850686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.881045][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.889467][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.980689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 70.999994][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.117590][ T4313] syz.4.14 (4313): attempted to duplicate a private mapping with mremap. This is not supported. [ 71.618305][ T4313] FAULT_INJECTION: forcing a failure. [ 71.618305][ T4313] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.631907][ T4313] CPU: 1 PID: 4313 Comm: syz.4.14 Not tainted syzkaller #0 [ 71.639138][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.649222][ T4313] Call Trace: [ 71.652527][ T4313] [ 71.655480][ T4313] dump_stack_lvl+0x188/0x250 [ 71.660201][ T4313] ? show_regs_print_info+0x20/0x20 [ 71.665436][ T4313] ? load_image+0x410/0x410 [ 71.669977][ T4313] ? uncharge_page+0x490/0x490 [ 71.674777][ T4313] should_fail+0x383/0x4b0 [ 71.679232][ T4313] prepare_alloc_pages+0x1e3/0x5b0 [ 71.684384][ T4313] __alloc_pages+0x11b/0x480 [ 71.689031][ T4313] ? zone_statistics+0x170/0x170 [ 71.694004][ T4313] ? rcu_lock_acquire+0x30/0x30 [ 71.698882][ T4313] ? alloc_pages+0x452/0x560 [ 71.703659][ T4313] __get_free_pages+0x8/0x30 [ 71.708276][ T4313] __tlb_remove_page_size+0x1f2/0x3f0 [ 71.713687][ T4313] unmap_page_range+0xfcf/0x2410 [ 71.718686][ T4313] unmap_vmas+0x131/0x250 [ 71.723040][ T4313] ? unmap_page_range+0x2410/0x2410 [ 71.728259][ T4313] ? __mutex_lock_common+0x435/0x2400 [ 71.733665][ T4313] ? exit_mm_release+0x16/0x30 [ 71.738462][ T4313] exit_mmap+0x3b9/0x640 [ 71.742741][ T4313] ? vm_brk+0x20/0x20 [ 71.746764][ T4313] ? uprobe_clear_state+0x2f6/0x460 [ 71.751990][ T4313] __mmput+0x115/0x390 [ 71.756081][ T4313] exit_mm+0x632/0x7b0 [ 71.760172][ T4313] ? perf_pmu_migrate_context+0xb70/0xb70 [ 71.765924][ T4313] ? do_exit+0x2110/0x2110 [ 71.770359][ T4313] ? __ia32_sys_timer_delete+0x40/0x40 [ 71.775839][ T4313] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 71.781328][ T4313] ? tty_audit_exit+0x149/0x1f0 [ 71.786208][ T4313] do_exit+0x5b8/0x2110 [ 71.790395][ T4313] ? put_task_struct+0x80/0x80 [ 71.795182][ T4313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.801199][ T4313] ? _raw_spin_lock_irq+0xb7/0xf0 [ 71.806251][ T4313] do_group_exit+0x12c/0x2f0 [ 71.810867][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 71.816095][ T4313] get_signal+0x7eb/0x12e0 [ 71.820655][ T4313] arch_do_signal_or_restart+0xe6/0x12a0 [ 71.826318][ T4313] ? release_firmware_map_entry+0x190/0x190 [ 71.832251][ T4313] ? futex_exit_release+0x1c0/0x1c0 [ 71.837479][ T4313] ? get_sigframe_size+0x10/0x10 [ 71.842455][ T4313] ? __context_tracking_exit+0x4c/0x80 [ 71.847949][ T4313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.853960][ T4313] ? exit_to_user_mode_loop+0x3b/0x130 [ 71.859452][ T4313] exit_to_user_mode_loop+0x9e/0x130 [ 71.864767][ T4313] exit_to_user_mode_prepare+0xee/0x180 [ 71.870359][ T4313] syscall_exit_to_user_mode+0x16/0x40 [ 71.875851][ T4313] do_syscall_64+0x58/0xa0 [ 71.880291][ T4313] ? clear_bhb_loop+0x30/0x80 [ 71.884996][ T4313] ? clear_bhb_loop+0x30/0x80 [ 71.889699][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.895625][ T4313] RIP: 0033:0x7f274dbeb159 [ 71.900063][ T4313] Code: Unable to access opcode bytes at RIP 0x7f274dbeb12f. [ 71.907444][ T4313] RSP: 002b:00007f274be220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.915884][ T4313] RAX: fffffffffffffe00 RBX: 00007f274de73098 RCX: 00007f274dbeb159 [ 71.923883][ T4313] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f274de73098 [ 71.931880][ T4313] RBP: 00007f274de73090 R08: 0000000000000000 R09: 0000000000000000 [ 71.939875][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.947903][ T4313] R13: 00007f274de73128 R14: 00007ffef9b698c0 R15: 00007ffef9b699a8 [ 71.956005][ T4313] [ 71.970686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.980678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.990678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.000678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.283706][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.303263][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.319202][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.999443][ T4328] mmap: syz.0.17 (4328) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.361728][ T4188] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.630909][ T4188] usb 5-1: Using ep0 maxpacket: 32 [ 75.756281][ T4188] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 75.835824][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.985473][ T4188] usb 5-1: config 0 descriptor?? [ 76.360910][ T4188] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 76.376952][ T4188] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.399983][ T4343] FAULT_INJECTION: forcing a failure. [ 76.399983][ T4343] name failslab, interval 1, probability 0, space 0, times 1 [ 77.131986][ T4188] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 77.144735][ T4188] usb 5-1: media controller created [ 77.145363][ T4343] CPU: 1 PID: 4343 Comm: syz.1.18 Not tainted syzkaller #0 [ 77.157284][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.163947][ T4188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.167444][ T4343] Call Trace: [ 77.167456][ T4343] [ 77.182011][ T4343] dump_stack_lvl+0x188/0x250 [ 77.186725][ T4343] ? show_regs_print_info+0x20/0x20 [ 77.191958][ T4343] ? load_image+0x410/0x410 [ 77.196496][ T4343] ? __might_sleep+0xf0/0xf0 [ 77.200929][ T4188] az6027: usb out operation failed. (-71) [ 77.201106][ T4343] ? __lock_acquire+0x7b50/0x7b50 [ 77.201138][ T4343] should_fail+0x383/0x4b0 [ 77.216472][ T4343] should_failslab+0x5/0x20 [ 77.221004][ T4343] slab_pre_alloc_hook+0x51/0xc0 [ 77.225969][ T4343] __kmalloc_node+0x6d/0x3a0 [ 77.230676][ T4343] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 77.235768][ T4188] az6027: usb out operation failed. (-71) [ 77.236687][ T4343] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 77.248229][ T4343] slab_post_alloc_hook+0xba/0x380 [ 77.253377][ T4343] ? __d_alloc+0x27/0x6d0 [ 77.254815][ T4188] stb0899_attach: Driver disabled by Kconfig [ 77.257736][ T4343] kmem_cache_alloc+0x15d/0x280 [ 77.257766][ T4343] __d_alloc+0x27/0x6d0 [ 77.257784][ T4343] ? d_alloc_pseudo+0xe/0x70 [ 77.277354][ T4343] d_alloc_pseudo+0x19/0x70 [ 77.281985][ T4343] alloc_file_pseudo+0xe0/0x200 [ 77.286886][ T4343] ? alloc_empty_file_noaccount+0x80/0x80 [ 77.292645][ T4343] ? alloc_fd+0x59e/0x650 [ 77.297005][ T4343] sock_alloc_file+0xb3/0x240 [ 77.301714][ T4343] __sys_socket+0x11d/0x170 [ 77.302528][ T4188] az6027: no front-end attached [ 77.302528][ T4188] [ 77.306248][ T4343] __x64_sys_socket+0x76/0x80 [ 77.306274][ T4343] do_syscall_64+0x4c/0xa0 [ 77.322428][ T4343] ? clear_bhb_loop+0x30/0x80 [ 77.327140][ T4343] ? clear_bhb_loop+0x30/0x80 [ 77.331852][ T4343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.337774][ T4343] RIP: 0033:0x7f6f1a6ea159 [ 77.342224][ T4343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.360846][ T4188] az6027: usb out operation failed. (-71) [ 77.361846][ T4343] RSP: 002b:00007f6f18942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 77.361876][ T4343] RAX: ffffffffffffffda RBX: 00007f6f1a971fa0 RCX: 00007f6f1a6ea159 [ 77.367628][ T4188] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 77.376007][ T4343] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 77.376024][ T4343] RBP: 00007f6f1a781024 R08: 0000000000000000 R09: 0000000000000000 [ 77.376036][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.376047][ T4343] R13: 00007f6f1a972038 R14: 00007f6f1a971fa0 R15: 00007ffdaa6651d8 [ 77.376076][ T4343] [ 77.818435][ T4353] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 77.855137][ T4353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.949759][ T4188] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 78.197837][ T4188] dvb-usb: schedule remote query interval to 400 msecs. [ 78.289054][ T4188] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 78.574302][ T4188] usb 5-1: USB disconnect, device number 2 [ 79.754428][ T4188] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 81.977744][ T4380] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 82.280942][ T26] audit: type=1326 audit(1788055927.926:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 83.162509][ T26] audit: type=1326 audit(1788055927.926:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 83.291490][ T26] audit: type=1326 audit(1788055927.926:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 83.435944][ T26] audit: type=1326 audit(1788055927.926:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 85.247491][ T26] audit: type=1326 audit(1788055927.926:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 85.300898][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.389383][ T4414] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 85.417537][ T26] audit: type=1326 audit(1788055927.926:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 85.571699][ T26] audit: type=1326 audit(1788055927.926:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 85.701355][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.741184][ T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 85.751673][ T26] audit: type=1326 audit(1788055927.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 85.821940][ T21] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 85.910684][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.956581][ T26] audit: type=1326 audit(1788055927.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 86.119214][ T21] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 86.155804][ T26] audit: type=1326 audit(1788055927.936:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4387 comm="syz.0.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 86.662492][ T7] cfg80211: failed to load regulatory.db [ 87.347363][ T21] usb 4-1: USB disconnect, device number 2 [ 87.528868][ T21] idmouse 4-1:1.0: disconnected [ 92.338052][ T4482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.39'. [ 92.405608][ T4483] Zero length message leads to an empty skb ¼[ 95.479143][ T4501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.55'. [ 96.898409][ T4524] sched: RT throttling activated [ 103.007612][ T4620] futex_wake_op: syz.1.89 tries to shift op by 144; fix this program [ 103.796037][ T4635] process 'syz.3.90' launched './file0' with NULL argv: empty string added [ 104.419273][ T4640] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.891175][ T4188] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.110854][ T4188] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 108.161797][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 108.212867][ T4188] usb 4-1: Product: syz [ 108.217103][ T4188] usb 4-1: SerialNumber: syz [ 108.243975][ T4188] usb 4-1: config 0 descriptor?? [ 108.826716][ T4693] netlink: 64 bytes leftover after parsing attributes in process `syz.4.110'. [ 108.913490][ T4695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.514225][ T4188] usb 4-1: USB disconnect, device number 3 [ 116.776139][ T4751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.125'. [ 120.634238][ T4270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.140705][ T21] Bluetooth: hci3: command 0x2016 tx timeout [ 121.313966][ T4797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.143'. [ 121.352279][ T4270] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.385769][ T4270] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 121.517347][ T4270] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 121.530757][ T4270] usb 4-1: config 220 has no interface number 2 [ 121.537082][ T4270] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.562968][ T4270] usb 4-1: config 220 interface 0 has no altsetting 0 [ 121.574405][ T4270] usb 4-1: config 220 interface 76 has no altsetting 0 [ 121.590740][ T4270] usb 4-1: config 220 interface 1 has no altsetting 0 [ 121.872207][ T4270] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.890538][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.915091][ T4270] usb 4-1: Product: syz [ 121.924697][ T4270] usb 4-1: Manufacturer: syz [ 121.939600][ T4270] usb 4-1: SerialNumber: syz [ 123.461548][ T4270] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 123.474015][ T4270] usb 4-1: No valid video chain found. [ 123.484975][ T4270] usb 4-1: selecting invalid altsetting 0 [ 123.741603][ T4270] usb 4-1: selecting invalid altsetting 0 [ 123.747525][ T4270] usbtest: probe of 4-1:220.1 failed with error -22 [ 123.825414][ T4270] usb 4-1: USB disconnect, device number 4 [ 126.378965][ T4844] md/raid10:md0: not clean -- starting background reconstruction [ 126.435724][ T4844] md/raid10:md0: active with 1 out of 2 devices [ 126.493306][ T4844] md0: detected capacity change from 0 to 2048 [ 126.691237][ T4464] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.219402][ T4464] usb 4-1: Using ep0 maxpacket: 16 [ 127.681295][ T4864] md: resync of RAID array md0 [ 127.727241][ T4864] md: md0: resync done. [ 127.770960][ T4464] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 127.790033][ T4464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.837628][ T4464] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 128.036064][ T4464] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.312859][ T4464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.330884][ T4464] usb 4-1: SerialNumber: syz [ 128.552005][ T4464] cdc_acm 4-1:1.0: skipping garbage [ 128.579895][ T4464] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 129.230072][ T7] usb 4-1: USB disconnect, device number 5 [ 131.026818][ T4901] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 132.934550][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940944][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.967533][ T4920] netlink: 564 bytes leftover after parsing attributes in process `syz.3.178'. [ 132.990185][ T4920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 137.777470][ T4974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.177'. [ 140.380680][ T4188] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.722663][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 140.722679][ T26] audit: type=1326 audit(1788055986.386:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 140.827285][ T26] audit: type=1326 audit(1788055986.426:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 140.896863][ T26] audit: type=1326 audit(1788055986.426:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 141.011409][ T5006] netlink: 64 bytes leftover after parsing attributes in process `syz.2.205'. [ 141.181591][ T4188] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 141.269869][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.564861][ T26] audit: type=1326 audit(1788055986.426:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 141.677618][ T4188] usb 5-1: config 0 descriptor?? [ 141.821037][ T4188] usb 5-1: can't set config #0, error -71 [ 141.842292][ T4188] usb 5-1: USB disconnect, device number 3 [ 141.909281][ T26] audit: type=1326 audit(1788055986.436:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 142.185113][ T26] audit: type=1326 audit(1788055986.436:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 142.274187][ T26] audit: type=1326 audit(1788055986.436:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.0.203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6d16159 code=0x7ffc0000 [ 144.919868][ T5049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.217'. [ 145.566669][ T5065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.175857][ T5057] [ 146.178671][ T5057] ====================================================== [ 146.185698][ T5057] WARNING: possible circular locking dependency detected [ 146.192826][ T5057] syzkaller #0 Not tainted [ 146.197249][ T5057] ------------------------------------------------------ [ 146.204275][ T5057] syz.3.220/5057 is trying to acquire lock: [ 146.210181][ T5057] ffff888023cc0918 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 146.221608][ T5057] [ 146.221608][ T5057] but task is already holding lock: [ 146.228985][ T5057] ffff888024be0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 146.237992][ T5057] [ 146.237992][ T5057] which lock already depends on the new lock. [ 146.237992][ T5057] [ 146.248402][ T5057] [ 146.248402][ T5057] the existing dependency chain (in reverse order) is: [ 146.257413][ T5057] [ 146.257413][ T5057] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 146.265146][ T5057] lock_sock_nested+0x44/0x100 [ 146.270432][ T5057] smc_listen_out+0xd4/0x3c0 [ 146.275560][ T5057] smc_listen_work+0x52a/0xd10 [ 146.280844][ T5057] process_one_work+0x867/0xff0 [ 146.286212][ T5057] worker_thread+0xad7/0x12a0 [ 146.291407][ T5057] kthread+0x42e/0x520 [ 146.295993][ T5057] ret_from_fork+0x1f/0x30 [ 146.300933][ T5057] [ 146.300933][ T5057] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 146.311088][ T5057] __lock_acquire+0x2c66/0x7b50 [ 146.316722][ T5057] lock_acquire+0x19e/0x400 [ 146.321742][ T5057] __flush_work+0x116/0x210 [ 146.326762][ T5057] __cancel_work_timer+0x3f4/0x560 [ 146.332391][ T5057] smc_clcsock_release+0x5c/0xe0 [ 146.337846][ T5057] __smc_release+0x644/0x7b0 [ 146.342974][ T5057] smc_close_non_accepted+0xd1/0x1f0 [ 146.348879][ T5057] smc_close_active+0xae2/0xea0 [ 146.354250][ T5057] __smc_release+0x9c/0x7b0 [ 146.359268][ T5057] smc_release+0x2c1/0x520 [ 146.364198][ T5057] sock_close+0xbf/0x210 [ 146.368981][ T5057] __fput+0x212/0x8c0 [ 146.373494][ T5057] task_work_run+0x125/0x1a0 [ 146.378607][ T5057] exit_to_user_mode_loop+0x10f/0x130 [ 146.384503][ T5057] exit_to_user_mode_prepare+0xee/0x180 [ 146.390574][ T5057] syscall_exit_to_user_mode+0x16/0x40 [ 146.396590][ T5057] do_syscall_64+0x58/0xa0 [ 146.401554][ T5057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.407992][ T5057] [ 146.407992][ T5057] other info that might help us debug this: [ 146.407992][ T5057] [ 146.418214][ T5057] Possible unsafe locking scenario: [ 146.418214][ T5057] [ 146.425659][ T5057] CPU0 CPU1 [ 146.431018][ T5057] ---- ---- [ 146.436390][ T5057] lock(sk_lock-AF_SMC/1); [ 146.440899][ T5057] lock((work_completion)(&new_smc->smc_listen_work)); [ 146.450347][ T5057] lock(sk_lock-AF_SMC/1); [ 146.457368][ T5057] lock((work_completion)(&new_smc->smc_listen_work)); [ 146.464297][ T5057] [ 146.464297][ T5057] *** DEADLOCK *** [ 146.464297][ T5057] [ 146.472432][ T5057] 2 locks held by syz.3.220/5057: [ 146.477457][ T5057] #0: ffff888063275010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 146.487648][ T5057] #1: ffff888024be0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 146.497044][ T5057] [ 146.497044][ T5057] stack backtrace: [ 146.502923][ T5057] CPU: 1 PID: 5057 Comm: syz.3.220 Not tainted syzkaller #0 [ 146.510206][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.520265][ T5057] Call Trace: [ 146.523556][ T5057] [ 146.526489][ T5057] dump_stack_lvl+0x188/0x250 [ 146.531174][ T5057] ? load_image+0x410/0x410 [ 146.535685][ T5057] ? show_regs_print_info+0x20/0x20 [ 146.540897][ T5057] ? print_circular_bug+0x12b/0x1a0 [ 146.546106][ T5057] check_noncircular+0x296/0x330 [ 146.551052][ T5057] ? deref_stack_reg+0xd0/0x120 [ 146.555904][ T5057] ? look_up_lock_class+0x71/0x110 [ 146.561016][ T5057] ? add_chain_block+0x9b0/0x9b0 [ 146.565954][ T5057] ? lockdep_lock+0xf1/0x1f0 [ 146.570543][ T5057] ? lock_release+0xb5/0x8a0 [ 146.575132][ T5057] ? mark_lock+0x94/0x320 [ 146.579456][ T5057] ? _find_first_zero_bit+0xd1/0xf0 [ 146.584806][ T5057] __lock_acquire+0x2c66/0x7b50 [ 146.589680][ T5057] ? hlock_conflict+0x59/0x1f0 [ 146.594452][ T5057] ? __bfs+0x27a/0x560 [ 146.598526][ T5057] ? verify_lock_unused+0x140/0x140 [ 146.603729][ T5057] ? mark_lock+0x94/0x320 [ 146.608064][ T5057] ? __lock_acquire+0x13dc/0x7b50 [ 146.613093][ T5057] ? lockdep_unlock+0x143/0x2e0 [ 146.617943][ T5057] lock_acquire+0x19e/0x400 [ 146.622444][ T5057] ? __flush_work+0xfa/0x210 [ 146.627033][ T5057] ? read_lock_is_recursive+0x10/0x10 [ 146.632417][ T5057] __flush_work+0x116/0x210 [ 146.636922][ T5057] ? __flush_work+0xfa/0x210 [ 146.641512][ T5057] ? flush_work+0x20/0x20 [ 146.645838][ T5057] ? try_to_grab_pending+0xfb/0x820 [ 146.651035][ T5057] ? mark_lock+0x94/0x320 [ 146.655371][ T5057] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.661352][ T5057] ? lock_chain_count+0x20/0x20 [ 146.666203][ T5057] ? mark_lock+0x94/0x320 [ 146.670529][ T5057] ? __cancel_work_timer+0x36a/0x560 [ 146.675813][ T5057] __cancel_work_timer+0x3f4/0x560 [ 146.680922][ T5057] ? cancel_work_sync+0x20/0x20 [ 146.685769][ T5057] ? __local_bh_enable_ip+0x136/0x1c0 [ 146.691137][ T5057] ? lockdep_hardirqs_on+0x94/0x140 [ 146.696335][ T5057] ? __local_bh_enable_ip+0x136/0x1c0 [ 146.701700][ T5057] ? _local_bh_enable+0xa0/0xa0 [ 146.706549][ T5057] smc_clcsock_release+0x5c/0xe0 [ 146.711495][ T5057] __smc_release+0x644/0x7b0 [ 146.716082][ T5057] smc_close_non_accepted+0xd1/0x1f0 [ 146.721366][ T5057] smc_close_active+0xae2/0xea0 [ 146.726214][ T5057] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 146.731849][ T5057] __smc_release+0x9c/0x7b0 [ 146.736350][ T5057] smc_release+0x2c1/0x520 [ 146.740767][ T5057] sock_close+0xbf/0x210 [ 146.745009][ T5057] ? sock_mmap+0x90/0x90 [ 146.749248][ T5057] __fput+0x212/0x8c0 [ 146.753236][ T5057] task_work_run+0x125/0x1a0 [ 146.757824][ T5057] exit_to_user_mode_loop+0x10f/0x130 [ 146.763191][ T5057] exit_to_user_mode_prepare+0xee/0x180 [ 146.768734][ T5057] syscall_exit_to_user_mode+0x16/0x40 [ 146.774196][ T5057] do_syscall_64+0x58/0xa0 [ 146.778607][ T5057] ? clear_bhb_loop+0x30/0x80 [ 146.783381][ T5057] ? clear_bhb_loop+0x30/0x80 [ 146.788061][ T5057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.793953][ T5057] RIP: 0033:0x7fcee1864159 [ 146.798371][ T5057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.817983][ T5057] RSP: 002b:00007ffd54f39d68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 146.826394][ T5057] RAX: 0000000000000000 RBX: 00007fcee1aedda0 RCX: 00007fcee1864159 [ 146.834365][ T5057] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 146.842334][ T5057] RBP: 00007fcee1aedda0 R08: 00007fcee1aec038 R09: 0000000000000000 [ 146.850303][ T5057] R10: 00000000003ffcfc R11: 0000000000000246 R12: 0000000000023bb1 [ 146.858270][ T5057] R13: 00007fcee1aebfac R14: 00000000000238a7 R15: 00007ffd54f39e70 [ 146.866250][ T5057] [ 149.300717][ T5072] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd