last executing test programs: 1m39.572088123s ago: executing program 2 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m35.226812802s ago: executing program 2 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3e4cd25529e20900"}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) 1m34.059998079s ago: executing program 2 (id=339): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x482000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) setrlimit(0xb, 0x0) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, 0x0) 1m32.551496336s ago: executing program 2 (id=343): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='statm\x00') mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0'}, 0xb) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ftruncate(r4, 0x5) 1m28.166728717s ago: executing program 2 (id=349): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 1m19.205589001s ago: executing program 2 (id=365): socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xffffffffffffffaa, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4005, @loopback, 0x2c4}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m3.933109926s ago: executing program 32 (id=365): socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xffffffffffffffaa, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4005, @loopback, 0x2c4}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15.099226774s ago: executing program 4 (id=490): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x29, 0x7ff}], 0xc}}], 0x1, 0x4000000) 14.060139914s ago: executing program 4 (id=493): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) r1 = dup(r0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "22682f26a0d8473a3c1ac7505e5252d42a23ad7a"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 13.133083618s ago: executing program 4 (id=496): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, 0x0, 0x0) shutdown(r1, 0x1) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x13c}, &(0x7f0000000340), &(0x7f0000000480)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.980333707s ago: executing program 1 (id=497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001500), 0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(0xffffffffffffffff, 0xffffffff, 0x0) io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000000000000000851000000300000018000000000000000008000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket(0x23, 0x2, 0x1) 10.64458196s ago: executing program 3 (id=499): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 10.610403262s ago: executing program 5 (id=500): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="180000001814010000000000000000e0070001"], 0x18}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x26, 0x0, 0x0, 0x8e4}]}, 0x10) sendto(r1, 0x0, 0x0, 0x4008044, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x1000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 10.555329815s ago: executing program 4 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x400c744d, 0x0) 9.835413156s ago: executing program 3 (id=502): mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='m']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xb5ce, 0xd4, 0xe, 0x63, 0x200002000001, 0x0, 0x4000002004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.705267304s ago: executing program 4 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.654231507s ago: executing program 1 (id=505): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200900) syz_extract_tcp_res(&(0x7f0000000580), 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r4, 0x41424344, 0x1, 0x0, 0x9, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0xa, "ff9a30062b66ab5f"}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 9.562427622s ago: executing program 3 (id=506): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) r1 = dup(r0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "22682f26a0d8473a3c1ac7505e5252d42a23ad7a"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 9.405978011s ago: executing program 3 (id=507): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2b, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]}) 9.081230529s ago: executing program 5 (id=508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 9.07279415s ago: executing program 4 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 7.938045415s ago: executing program 5 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) 7.921930246s ago: executing program 3 (id=511): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffa, 0x1) 7.634237803s ago: executing program 3 (id=512): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 6.708072606s ago: executing program 1 (id=516): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0), 0x0, 0x0, 0x0, 0x10001040}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(0x0, 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_info_req={{0xa, 0xf5, 0x2}, {0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xa4}}, @l2cap_info_req={{0xa, 0xd, 0x2}, {0x7ff}}, @l2cap_conn_req={{0x2, 0xea, 0x4}, {0x4, 0x4}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x7, 0x4, 0x5d, 0x8}}]}}, 0x2f) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) 6.568371834s ago: executing program 0 (id=517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 4.484535783s ago: executing program 0 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 2.346818636s ago: executing program 5 (id=519): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="180000001814010000000000000000e0070001"], 0x18}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x26, 0x0, 0x0, 0x8e4}]}, 0x10) sendto(r1, 0x0, 0x0, 0x4008044, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x1000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 2.200175554s ago: executing program 0 (id=520): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) pipe2$watch_queue(&(0x7f0000001100), 0x80) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) 1.136275185s ago: executing program 0 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 1.058352919s ago: executing program 1 (id=522): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) openat$kvm(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x397) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000540), 0x24, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r4}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 975.481174ms ago: executing program 5 (id=523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 282.789044ms ago: executing program 0 (id=524): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) migrate_pages(0x0, 0x7, 0x0, 0x0) 161.459231ms ago: executing program 1 (id=525): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x31, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0x2000, 0x2}) 98.648384ms ago: executing program 0 (id=526): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200900) syz_extract_tcp_res(&(0x7f0000000580), 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r4, 0x41424344, 0x1, 0x0, 0x9, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0xa, "ff9a30062b66ab5f"}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 97.427114ms ago: executing program 5 (id=527): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0x0, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, @ringbuf_query, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000bc0)=[{0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0x8, 0x3}, {0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0xc, 0xa}], 0x10, 0xa29b}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000280)={0xa, 0x4e21, 0x3c, @empty, 0x3}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x40012103) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fadvise64(r5, 0x2, 0x0, 0x4) 0s ago: executing program 1 (id=528): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.515248][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.532279][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. syzkaller login: [ 64.071847][ T4172] cgroup: Unknown subsys name 'net' [ 64.185054][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.640239][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.104285][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.143537][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.208553][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.222381][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.279400][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.287157][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.295938][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.322953][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.332315][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.339723][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.347806][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.411317][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.418586][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.426515][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.453419][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.475118][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.482355][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.490360][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.516314][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.525620][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.532803][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.541207][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.555812][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.563177][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.571839][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.579393][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.586477][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.594908][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.606594][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.614086][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.622339][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.644838][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.683151][ T4192] team0: Port device team_slave_0 added [ 67.691030][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.712115][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.728924][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.736015][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.744895][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.754535][ T4192] team0: Port device team_slave_1 added [ 67.768396][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.780427][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.789904][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.796977][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.805059][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.838489][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.855032][ T4184] team0: Port device team_slave_0 added [ 67.861956][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.869807][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.896147][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.927897][ T4184] team0: Port device team_slave_1 added [ 67.941670][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.949122][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.975514][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.989449][ T4188] team0: Port device team_slave_0 added [ 68.003880][ T4188] team0: Port device team_slave_1 added [ 68.011595][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.029777][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.045587][ T4191] team0: Port device team_slave_0 added [ 68.059404][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.066479][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.092500][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.112975][ T4191] team0: Port device team_slave_1 added [ 68.132760][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.140046][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.166763][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.196318][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.203587][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.231230][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.250346][ T4190] team0: Port device team_slave_0 added [ 68.256909][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.264073][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.290117][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.319183][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.325943][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.335252][ T4190] team0: Port device team_slave_1 added [ 68.345555][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.352965][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.379217][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.412352][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.419756][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.445856][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.475435][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.482533][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.509045][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.532615][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.539763][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.546508][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.554882][ T4184] Cannot create hsr debugfs directory [ 68.565155][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.572368][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.598724][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.644549][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.652078][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.658874][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.666456][ T4188] Cannot create hsr debugfs directory [ 68.694985][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.702185][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.709205][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.716776][ T4191] Cannot create hsr debugfs directory [ 68.746999][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.754397][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.761638][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.769495][ T4190] Cannot create hsr debugfs directory [ 68.779432][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 68.786053][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 68.848327][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 68.858639][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 68.864883][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 69.110956][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.124778][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.134568][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.145272][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.215289][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.245346][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.273206][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.297135][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.306704][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.324884][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.352294][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.375456][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.423843][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.459021][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.480028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.491093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.510553][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.523612][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.549198][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.558093][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.577658][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.605374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.615517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.625440][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.632839][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.643578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.653516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.662240][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.669356][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.680542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.697761][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.708297][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.720757][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.731472][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.739532][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.755867][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.768241][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.794628][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.804976][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.814224][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.824998][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.833963][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.841091][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.849073][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.857697][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.866329][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.873433][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.881628][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.889652][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.898230][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.906847][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.917515][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.929375][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.955960][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.966665][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.982326][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.993462][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.006347][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.015184][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.023941][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.034022][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.042886][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.052237][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.061750][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.071069][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.080293][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.096572][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.122070][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.130687][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.138815][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.147624][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.156721][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.166119][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.175716][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.184785][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.194149][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.201281][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.211214][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.224955][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.241820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.259173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.287537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.325790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.344174][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.351433][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.393533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.415838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.449475][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.461118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.475264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.485875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.514955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.527048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.543556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.552919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.572291][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.586963][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.598828][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.622168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.636472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.645767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.655175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.663713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.685847][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.701988][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.713603][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.720754][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.735762][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.744052][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.757082][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.767454][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.781567][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.788707][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.796630][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.814254][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.830624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.848335][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 70.858960][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 70.876326][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.902817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.913734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.929430][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 70.948553][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 70.960969][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 70.969986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.982323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.991375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.002775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.013053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.025638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.051331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.061366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.071075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.080582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.112841][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.125670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.134522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.143579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.152866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.162423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.171306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.181444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.191599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.201596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.209762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.217228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.226059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.234605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.242741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.266001][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.267240][ T4192] device veth0_vlan entered promiscuous mode [ 71.275230][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285002][ T4184] device veth0_vlan entered promiscuous mode [ 71.304632][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.321907][ T4192] device veth1_vlan entered promiscuous mode [ 71.342830][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.356282][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.395009][ T4184] device veth1_vlan entered promiscuous mode [ 71.405336][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.417301][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.428598][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.469924][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.479388][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.488001][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.505493][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.515170][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.522321][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.537749][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.546819][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.561491][ T639] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.568626][ T639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.576701][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.585711][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.595065][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.603492][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.611603][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.622690][ T4190] device veth0_vlan entered promiscuous mode [ 71.657844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.669541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.679431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.689645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.698927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.707680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.718420][ T4192] device veth0_macvtap entered promiscuous mode [ 71.725708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.734980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.761609][ T4190] device veth1_vlan entered promiscuous mode [ 71.774104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.782934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.794017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.801963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.809854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.818532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.826869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.836417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.845041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.854332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.869132][ T4192] device veth1_macvtap entered promiscuous mode [ 71.876868][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.890576][ T4184] device veth0_macvtap entered promiscuous mode [ 71.901675][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.932064][ T4184] device veth1_macvtap entered promiscuous mode [ 71.951868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.971916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.986303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.996641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.011603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.025927][ T4190] device veth0_macvtap entered promiscuous mode [ 72.050443][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.060877][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.071258][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.089947][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.116072][ T4190] device veth1_macvtap entered promiscuous mode [ 72.130260][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.146694][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.164570][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.177838][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.199670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.208651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.217516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.229781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.239891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.252825][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.266187][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.277415][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.286790][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.303891][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.327977][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.345190][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.368640][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.377426][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.395076][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.407156][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.423331][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.434241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.452360][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.479584][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.488662][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.497386][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.507437][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520047][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.529867][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.543171][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.551281][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.561611][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.572906][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.583052][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.594161][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.614381][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.652922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.662014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.673656][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.709449][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.726658][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.736602][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.745792][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.767460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.776698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.855659][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.867794][ T4191] device veth0_vlan entered promiscuous mode [ 72.876461][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.889949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.903369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.912543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.922145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.931410][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 72.933708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.945103][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 72.952663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.961284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.976966][ T4191] device veth1_vlan entered promiscuous mode [ 73.019141][ T4247] Bluetooth: hci3: command 0x040f tx timeout [ 73.031985][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 73.040965][ T4247] Bluetooth: hci4: command 0x040f tx timeout [ 73.059936][ T639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.067975][ T639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.085158][ T4188] device veth0_vlan entered promiscuous mode [ 73.110078][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.118483][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.126750][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.140441][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.150068][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.158806][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.167572][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.177446][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.185923][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.209241][ T4188] device veth1_vlan entered promiscuous mode [ 73.221841][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.232287][ T4191] device veth0_macvtap entered promiscuous mode [ 73.241028][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.262656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.272474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.283735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.309373][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.317449][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.330692][ T4191] device veth1_macvtap entered promiscuous mode [ 73.370552][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.382458][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.391902][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.402668][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.416183][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.425164][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.456641][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.467039][ T4188] device veth0_macvtap entered promiscuous mode [ 73.498855][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.512897][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.524872][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.535057][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.546441][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.556873][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.578522][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.597477][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.600648][ T4188] device veth1_macvtap entered promiscuous mode [ 73.618061][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.619379][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.619991][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.620653][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.621266][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.632600][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.632621][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.632631][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.632645][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.632657][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.764349][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.782743][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.815817][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.847841][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.877826][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.933827][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.966542][ T4303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.002009][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.017373][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.033909][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.044939][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.056819][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.067841][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.077734][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.088664][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.451070][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.469196][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.477957][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.487151][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.496832][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.532738][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.577768][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.603913][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.627771][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.643851][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.659509][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.677468][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.705449][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.762352][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.835646][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.857872][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.887890][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897511][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912583][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.922656][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933756][ T4311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.000574][ T4310] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 75.009695][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.015221][ T639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.027050][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 75.040700][ T639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.089188][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 75.095645][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 75.102203][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 75.112420][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.165795][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.175279][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.198701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.281202][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.338263][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.397466][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.422740][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.439492][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.500940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.699228][ T4336] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3423474946 (3423474946 ns) > initial count (2274482713 ns). Using initial count to start timer. [ 76.529468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.538635][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.867756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.876748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.885692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.533903][ T26] audit: type=1326 audit(1769533431.897:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 77.634192][ T26] audit: type=1326 audit(1769533431.897:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 77.659011][ T26] audit: type=1326 audit(1769533431.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 77.659656][ T4368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 77.687589][ T4368] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.802530][ T26] audit: type=1326 audit(1769533432.167:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 77.827268][ T4368] vhci_hcd vhci_hcd.0: Device attached [ 77.858374][ T26] audit: type=1326 audit(1769533432.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 77.915221][ T4372] vhci_hcd: connection closed [ 77.924234][ T4350] vhci_hcd: stop threads [ 77.937254][ T4350] vhci_hcd: release socket [ 77.962999][ T4350] vhci_hcd: disconnect device [ 78.290356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.448806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.458969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.618605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.627897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.428296][ T4252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.810289][ T4252] usb 5-1: config 0 has no interfaces? [ 80.823401][ T4252] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 80.904199][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.086300][ T4252] usb 5-1: config 0 descriptor?? [ 81.383822][ T4413] process 'syz.0.29' launched './file2' with NULL argv: empty string added [ 82.253978][ T4414] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 82.302983][ T4247] usb 5-1: USB disconnect, device number 2 [ 82.348236][ T4252] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.598273][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 82.888449][ T4252] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 82.888501][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.888523][ T4252] usb 1-1: Product: syz [ 82.888538][ T4252] usb 1-1: Manufacturer: syz [ 82.888552][ T4252] usb 1-1: SerialNumber: syz [ 82.914457][ T4252] usb 1-1: config 0 descriptor?? [ 84.046344][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.054615][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.314630][ T4427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.32'. [ 86.078145][ C1] sched: RT throttling activated [ 86.920799][ T1346] cfg80211: failed to load regulatory.db [ 86.940189][ T4252] usb 1-1: USB disconnect, device number 2 [ 87.157542][ T4444] loop0: detected capacity change from 0 to 128 [ 88.112616][ T4441] attempt to access beyond end of device [ 88.112616][ T4441] loop0: rw=1, want=1041, limit=128 [ 88.180760][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.950692][ T4493] IPVS: length: 528 != 8 [ 90.024947][ T4493] 9pnet_virtio: no channels available for device syz [ 90.041812][ T26] audit: type=1326 audit(1769533444.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.027842][ T26] audit: type=1326 audit(1769533444.427:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.050150][ T26] audit: type=1326 audit(1769533444.437:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.074132][ T26] audit: type=1326 audit(1769533444.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.109140][ T26] audit: type=1326 audit(1769533444.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.185875][ T26] audit: type=1326 audit(1769533444.437:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.307074][ T26] audit: type=1326 audit(1769533444.437:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.445515][ T4501] ubi31: attaching mtd0 [ 91.450539][ T26] audit: type=1326 audit(1769533444.437:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 91.475188][ T4501] ubi31: scanning is finished [ 91.538014][ T4501] ubi31: empty MTD device detected [ 91.991549][ T4501] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 92.208295][ T26] audit: type=1326 audit(1769533444.437:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 94.136358][ T26] audit: type=1326 audit(1769533444.437:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f383ad00eb9 code=0x7ffc0000 [ 94.884515][ T4531] fuse: Unknown parameter '0x0000000000000004' [ 96.893997][ T4546] device vlan2 entered promiscuous mode [ 97.040259][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 97.189788][ T4548] binder: 4535:4548 ioctl 0 200000000040 returned -22                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       [ 244.641348][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 244.666386][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.697495][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.832231][ T4325] bond0 (unregistering): Released all slaves [ 248.959481][ T5975] tipc: Started in network mode [ 248.965046][ T5975] tipc: Node identity b62e2d7ed228, cluster identity 4711 [ 248.988491][ T5975] tipc: Enabled bearer , priority 0 [ 249.012639][ T5775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.907896][ T5990] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 249.943638][ T5979] tipc: Disabling bearer [ 250.337508][ T5775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.368300][ T5775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.396822][ T5775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.787310][ T6008] device syzkaller0 entered promiscuous mode [ 250.862507][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.043026][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.076475][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.118395][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.207432][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.250361][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.329074][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.336919][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.579415][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.593226][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.604197][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.612034][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.145360][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.365935][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.375857][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.385689][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.397917][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.408962][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.445777][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.460751][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.481547][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.499081][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.523137][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.538544][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.573296][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.667678][ T6035] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 252.814220][ T6035] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 254.137177][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.169020][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.492614][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.570959][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.577943][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.675326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.685764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.868198][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.887870][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.948998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.963606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.133854][ T5775] device veth0_vlan entered promiscuous mode [ 257.191995][ T5775] device veth1_vlan entered promiscuous mode [ 257.347018][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.368422][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.456097][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.483327][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.515692][ T5775] device veth0_macvtap entered promiscuous mode [ 257.557967][ T5775] device veth1_macvtap entered promiscuous mode [ 257.654762][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.728082][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.788154][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.860587][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.906808][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.954864][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.988252][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.020315][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.084976][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.146179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.169548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.219598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.258975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.311505][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.362102][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.415066][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.469322][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.531083][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.593553][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.651902][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.691891][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.725231][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.124651][ T6112] binder: BINDER_SET_CONTEXT_MGR already set [ 259.141766][ T6112] binder: 6110:6112 ioctl 4018620d 2000000001c0 returned -16 [ 261.311400][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.391520][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.978730][ T150] block nbd0: Possible stuck request ffff888020c60000: control (read@0,1024B). Runtime 120 seconds [ 261.990899][ T150] block nbd0: Possible stuck request ffff888020c60200: control (read@1024,1024B). Runtime 120 seconds [ 262.003414][ T150] block nbd0: Possible stuck request ffff888020c60400: control (read@2048,1024B). Runtime 120 seconds [ 262.016059][ T150] block nbd0: Possible stuck request ffff888020c60600: control (read@3072,1024B). Runtime 120 seconds [ 262.174256][ T6103] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.185413][ T6103] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.201675][ T6103] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.214360][ T6103] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.423835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.458898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.533804][ T5775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.551476][ T5775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.561221][ T5775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.570864][ T5775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.053412][ T6131] IPVS: length: 528 != 8 [ 263.087959][ T6131] 9pnet_virtio: no channels available for device syz [ 263.704171][ T6124] MTD: Couldn't look up '': -22 [ 264.342773][ T6124] ubi31: attaching mtd0 [ 264.348582][ T6124] ubi31: scanning is finished [ 264.420817][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.443120][ T6124] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 264.451514][ T6124] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 264.459576][ T6124] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 264.467294][ T6124] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 264.475536][ T6124] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 264.483292][ T6124] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 264.492191][ T6124] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2204382692 [ 264.503311][ T6124] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 264.518008][ T6139] ubi31: background thread "ubi_bgt31d" started, PID 6139 [ 264.602529][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.321912][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.368353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.402431][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.521358][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.845239][ T6221] binder: 6208:6221 ioctl 0 200000000040 returned -22 [ 278.826479][ T6282] 9pnet_virtio: no channels available for device syz [ 279.409698][ T6292] binder: BINDER_SET_CONTEXT_MGR already set [ 279.434801][ T6292] binder: 6289:6292 ioctl 4018620d 2000000001c0 returned -16 [ 279.762875][ T6302] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 279.798303][ T6302] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 279.824078][ T6302] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 279.843990][ T6302] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 279.858290][ T6302] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 279.867844][ T6302] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 279.932908][ T6302] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 279.979478][ T6302] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 280.011936][ T6302] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 280.041376][ T6302] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 281.779332][ T6343] binder: 6303:6343 ioctl 0 200000000040 returned -22 [ 282.569547][ T6358] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 282.616642][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 282.673527][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 287.204562][ T6380] binder: BINDER_SET_CONTEXT_MGR already set [ 287.238350][ T6380] binder: 6379:6380 ioctl 4018620d 2000000001c0 returned -16 [ 289.440093][ T6419] loop5: detected capacity change from 0 to 128 [ 290.919148][ T27] INFO: task udevd:4294 blocked for more than 144 seconds. [ 290.927442][ T27] Not tainted syzkaller #0 [ 290.943143][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.953007][ T27] task:udevd state:D stack:24688 pid: 4294 ppid: 3561 flags:0x00004002 [ 290.963228][ T27] Call Trace: [ 291.181845][ T27] [ 291.195228][ T27] __schedule+0x11ef/0x43c0 [ 291.208603][ T27] ? release_firmware_map_entry+0x190/0x190 [ 291.223947][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 291.231766][ T27] ? lock_chain_count+0x20/0x20 [ 291.237357][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 291.243631][ T27] schedule+0x11b/0x1e0 [ 291.250729][ T27] io_schedule+0x7c/0xd0 [ 291.255820][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 291.262479][ T27] ? wait_on_page_bit+0x50/0x50 [ 291.281849][ T27] ? blkdev_fallocate+0x4d0/0x4d0 [ 291.296575][ T27] ? rcu_lock_release+0x20/0x20 [ 291.314445][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 291.332085][ T27] do_read_cache_page+0xb05/0x1030 [ 291.347140][ T27] read_part_sector+0xd4/0x4f0 [ 291.362294][ T27] ? vsnprintf+0x14e/0x1c20 [ 291.377214][ T27] adfspart_check_ICS+0xc3/0xe40 [ 291.398880][ T27] ? vsnprintf+0x1b21/0x1c20 [ 291.414952][ T27] ? adfspart_check_ADFS+0x840/0x840 [ 291.430452][ T27] ? snprintf+0xe5/0x140 [ 291.444524][ T27] ? vscnprintf+0x80/0x80 [ 291.462240][ T27] bdev_disk_changed+0x933/0x16c0 [ 291.478377][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 291.499098][ T27] ? _atomic_dec_and_lock+0x8f/0x110 [ 291.514557][ T27] ? ilookup+0x165/0x220 [ 291.529036][ T27] blkdev_get_whole+0x2f9/0x390 [ 291.547807][ T27] blkdev_get_by_dev+0x2d0/0xa60 [ 291.567432][ T27] blkdev_open+0x12d/0x2c0 [ 291.582994][ T27] ? block_ioctl+0xf0/0xf0 [ 291.599398][ T27] do_dentry_open+0x7ff/0xf80 [ 291.618244][ T27] path_openat+0x26f5/0x2fa0 [ 291.635244][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 291.658487][ T27] ? do_filp_open+0x410/0x410 [ 291.673930][ T27] ? asm_sysvec_call_function_single+0x16/0x20 [ 291.693421][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 291.710686][ T27] ? asm_sysvec_call_function_single+0x16/0x20 [ 291.737676][ T27] do_filp_open+0x1e2/0x410 [ 291.754691][ T27] ? vfs_tmpfile+0x300/0x300 [ 291.763734][ T27] ? _raw_spin_unlock+0x24/0x40 [ 291.780880][ T27] ? alloc_fd+0x598/0x630 [ 291.791731][ T27] do_sys_openat2+0x150/0x4b0 [ 291.874463][ T27] ? lock_chain_count+0x20/0x20 [ 291.916392][ T27] ? do_sys_open+0xe0/0xe0 [ 291.922054][ T6428] binder: 6411:6428 ioctl 0 200000000040 returned -22 [ 291.986639][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 292.048501][ T150] block nbd0: Possible stuck request ffff888020c60000: control (read@0,1024B). Runtime 150 seconds [ 292.061867][ T150] block nbd0: Possible stuck request ffff888020c60200: control (read@1024,1024B). Runtime 150 seconds [ 292.078716][ T150] block nbd0: Possible stuck request ffff888020c60400: control (read@2048,1024B). Runtime 150 seconds [ 292.091009][ T150] block nbd0: Possible stuck request ffff888020c60600: control (read@3072,1024B). Runtime 150 seconds [ 292.110425][ T27] __x64_sys_openat+0x135/0x160 [ 292.159046][ T27] do_syscall_64+0x4c/0xa0 [ 292.203425][ T27] ? clear_bhb_loop+0x30/0x80 [ 292.250424][ T27] ? clear_bhb_loop+0x30/0x80 [ 292.298585][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.364690][ T27] RIP: 0033:0x7f6d2627d407 [ 292.414323][ T27] RSP: 002b:00007ffd0a2316f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 292.501485][ T27] RAX: ffffffffffffffda RBX: 00007f6d2618f880 RCX: 00007f6d2627d407 [ 292.571585][ T27] RDX: 00000000000a0800 RSI: 00005643e3839280 RDI: ffffffffffffff9c [ 292.644844][ T27] RBP: 00005643e3838910 R08: 0000000000000000 R09: 0000000000000000 [ 292.713549][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00005643e385af30 [ 292.777385][ T27] R13: 00005643e3850410 R14: 0000000000000000 R15: 00005643e385af30 [ 292.847270][ T27] [ 292.873879][ T27] [ 292.873879][ T27] Showing all locks held in the system: [ 292.912397][ T27] 2 locks held by kworker/1:1/23: [ 292.918133][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 292.958353][ T27] #1: ffffc90000ddfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 292.971428][ T27] 1 lock held by khungtaskd/27: [ 292.976881][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 292.988975][ T27] 2 locks held by udevd/3561: [ 292.994240][ T27] #0: ffff88802010fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 293.006221][ T27] #1: ffff8880202df468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 293.016871][ T27] 2 locks held by getty/3947: [ 293.022253][ T27] #0: ffff88807f129098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 293.033399][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 293.045008][ T27] 1 lock held by udevd/4294: [ 293.050240][ T27] #0: ffff888020c08518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 293.080475][ T27] 1 lock held by udevd/4971: [ 293.124613][ T27] #0: ffff88802010fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 293.190952][ T27] 1 lock held by syz-executor/5775: [ 293.215417][ T27] #0: ffff88802010fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 293.254111][ T27] 4 locks held by syz.3.499/6286: [ 293.274701][ T27] 4 locks held by syz.1.528/6416: [ 293.292632][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 293.311686][ T27] #1: ffff8881482b0628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_stop+0x11a/0x190 [ 293.323801][ T27] #2: ffff8881482b2938 (&local->key_mtx){+.+.}-{3:3}, at: ieee80211_free_keys+0xfb/0x5e0 [ 293.339431][ T27] #3: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 293.354081][ T27] 1 lock held by dhcpcd/6433: [ 293.361251][ T27] #0: ffff8880238b6120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.376683][ T27] 2 locks held by dhcpcd/6434: [ 293.383856][ T27] #0: ffff8880238b4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.398334][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 293.411617][ T27] 1 lock held by dhcpcd/6435: [ 293.416870][ T27] #0: ffff8880536fe120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.427979][ T27] 1 lock held by dhcpcd/6436: [ 293.433493][ T27] #0: ffff888061d56120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.444528][ T27] 1 lock held by dhcpcd/6437: [ 293.450127][ T27] #0: ffff888058f50120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.461254][ T27] 1 lock held by dhcpcd/6438: [ 293.466637][ T27] #0: ffff88807ac6a120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 293.480006][ T27] [ 293.482668][ T27] ============================================= [ 293.482668][ T27] [ 293.493046][ T27] NMI backtrace for cpu 0 [ 293.497842][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 293.505780][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.516861][ T27] Call Trace: [ 293.520487][ T27] [ 293.523733][ T27] dump_stack_lvl+0x188/0x250 [ 293.528907][ T27] ? show_regs_print_info+0x20/0x20 [ 293.534620][ T27] ? load_image+0x400/0x400 [ 293.539564][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 293.545478][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 293.551096][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 293.556526][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 293.563283][ T27] ? _printk+0xda/0x130 [ 293.567850][ T27] ? load_image+0x400/0x400 [ 293.572802][ T27] ? load_image+0x400/0x400 [ 293.577755][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 293.584426][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 293.591001][ T27] watchdog+0xe0f/0xe50 [ 293.595571][ T27] kthread+0x436/0x520 [ 293.600071][ T27] ? hungtask_pm_notify+0x40/0x40 [ 293.605589][ T27] ? kthread_blkcg+0xd0/0xd0 [ 293.610631][ T27] ret_from_fork+0x1f/0x30 [ 293.615488][ T27] [ 293.619286][ T27] Sending NMI from CPU 0 to CPUs 1: [ 293.625038][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 293.673587][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 293.681186][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 293.689099][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.700153][ T27] Call Trace: [ 293.703766][ T27] [ 293.707013][ T27] dump_stack_lvl+0x188/0x250 [ 293.712167][ T27] ? show_regs_print_info+0x20/0x20 [ 293.717928][ T27] ? load_image+0x400/0x400 [ 293.722889][ T27] panic+0x2e5/0x810 [ 293.727170][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 293.733364][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 293.738315][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 293.744408][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 293.751174][ T27] watchdog+0xe4e/0xe50 [ 293.755747][ T27] kthread+0x436/0x520 [ 293.760224][ T27] ? hungtask_pm_notify+0x40/0x40 [ 293.765740][ T27] ? kthread_blkcg+0xd0/0xd0 [ 293.770783][ T27] ret_from_fork+0x1f/0x30 [ 293.775650][ T27] [ 293.779283][ T27] Kernel Offset: disabled [ 293.784051][ T27] Rebooting in 86400 seconds..