last executing test programs: 10.865393505s ago: executing program 1 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {0x0}], 0x2}, 0x4) 9.863932184s ago: executing program 1 (id=431): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c00070100000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x7}, 0x10) close(r0) 6.305793042s ago: executing program 2 (id=447): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x0) 5.676159558s ago: executing program 3 (id=449): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2000, 0x0) 5.350925998s ago: executing program 3 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) close(r1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r4, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000880)=""/83, 0x20000253}], 0x2, 0x0, 0xffffffffffffff3b, 0xf5000000}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 5.257810963s ago: executing program 4 (id=452): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.386551524s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0xfffffffffffffffe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 4.138200038s ago: executing program 1 (id=455): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.757732701s ago: executing program 2 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)}], 0x2}, 0x4) 3.749110331s ago: executing program 0 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000880)=""/83, 0x20000253}], 0x2, 0x0, 0xffffffffffffff3b, 0xf5000000}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 3.748165682s ago: executing program 3 (id=458): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000b80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '&\\\x16}{', 0x3a, '', 0x3a, './file2/../file0', 0x3a, [0x4f, 0x50, 0x43]}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@orlov}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x1c3902, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.6002709s ago: executing program 1 (id=459): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f0000000b40)=ANY=[@ANYBLOB="696f636861727365743d63703836392c757466383d312c756e695f786c6174653d312c696f636861727365743d69736f383835392d362c756e695f786c6174653d312c7574302c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d6d6163677265656b2c73686f72746e616d653d77696e6e742c696f636861727365743d63703836332c757466383d302c756e695f786c6174653d31c3f56e695f786c6174653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nonumtail=0,fsuuid=313be13f-\x009ba-389e-8467-bbb2dc48,defcontext=user_u,\x00'], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000019480)) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x40005) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1a, 0x1, @tid=r1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r4, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000204cbc92f278649c50668e000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() timer_gettime(0x0, 0x0) 3.414887401s ago: executing program 4 (id=460): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.223141452s ago: executing program 0 (id=461): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2000, 0x0) 2.592930528s ago: executing program 0 (id=462): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2.590357969s ago: executing program 2 (id=463): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.589132409s ago: executing program 3 (id=464): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x0) 2.557943851s ago: executing program 4 (id=465): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c00070100000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x7}, 0x10) close(r0) 2.193549612s ago: executing program 1 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r3 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), 0x0) io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3b00, 0x809c, 0x24, 0x0, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.460646925s ago: executing program 4 (id=467): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {0x2, 0x0, 0x0, 0x2000000000000, 0x100, 0x401}, {0x0, 0x0, 0x0, 0x4001}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x1}}, 0xe8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r2, r3, &(0x7f0000000000), 0x9) fcntl$setsig(r3, 0xa, 0x38) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xfffffff9, 0x648, 0x1, 0x2, 0xd59f85, 0x19f3, 0x42, 0x4, 0x3, 0x3, 0x2804, 0xa800, 0xfffffffe, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x40, 0x101000) fsetxattr(r4, &(0x7f0000000180)=@random={'btrfs.', '/dev/vbi#\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) 1.416354028s ago: executing program 2 (id=468): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 913.597057ms ago: executing program 0 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) close(r1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r4, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000880)=""/83, 0x20000253}], 0x2, 0x0, 0xffffffffffffff3b, 0xf5000000}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 477.618502ms ago: executing program 4 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 418.787156ms ago: executing program 1 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x7d5, 0x18}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 378.166138ms ago: executing program 3 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 280.998064ms ago: executing program 2 (id=473): memfd_create(0x0, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.510606ms ago: executing program 0 (id=474): socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) inotify_init() socket(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7}) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 123.661193ms ago: executing program 4 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)}], 0x2}, 0x4) 81.203776ms ago: executing program 3 (id=476): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @private}, &(0x7f0000000200)=0xc) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000001680)=""/4159, 0x103f}, {&(0x7f0000000140)=""/184, 0xb8}], 0x3}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=@ipmr_delroute={0xfc, 0x19, 0x100, 0x70bd2c, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x9, 0xfd, 0x0, 0xc8, 0x4, 0x1000}, [@RTA_GATEWAY={0x8, 0x5, @local}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TABLE={0x8, 0xf, 0x40}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_TABLE={0x8, 0xf, 0x5599}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x0, 0x2, r8}}, @RTA_METRICS={0x99, 0x8, 0x0, 0x1, "3b635259f6aa66d49e43f09ed4b0b6ce53235f06e49312edec4032e9691f235a5fa84e62fa922cf1131862da6af1ee11efd633026489c69a05ecc074775ed3b0e7cbcb2c3799e0b45dd3bc9687584f8156ce6020e9236eeb3a8c5aebe12f13332c1ea7097672c4ede51807017ba768929bf457419b857b6e68c1c189cf40b15bf2928a2a7fcac251c1e76eb76135de8023b7cda36c"}, @RTA_FLOW={0x8, 0xb, 0x7}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x3, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf0}, @exit], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000680)=""/155, 0x40f00, 0x6, '\x00', r4, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x7, 0x7}, 0x10, 0x0, r0, 0x3, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x5, 0xb, 0x1}, {0x1, 0x5, 0x2, 0xc}, {0x3, 0x1, 0x3, 0xc}], 0x10, 0x1}, 0x94) 0s ago: executing program 0 (id=477): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c00070100000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x7}, 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 64.141662][ T4171] cgroup: Unknown subsys name 'net' [ 64.281565][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.785104][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.726360][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.799197][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.820958][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.874509][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.929140][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.986438][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.993559][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.003389][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.027079][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.034157][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.042444][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.051144][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.058353][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.066597][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.078549][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.085840][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.094045][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.168822][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.178162][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.186096][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.194221][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.202348][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.209856][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.218263][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.228022][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.245963][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.256975][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.273494][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.281215][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.289803][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.297052][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.304262][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.313170][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.356946][ T4188] team0: Port device team_slave_0 added [ 68.370658][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.378133][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.386649][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.396692][ T4184] team0: Port device team_slave_0 added [ 68.402773][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409962][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.418307][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.433577][ T4188] team0: Port device team_slave_1 added [ 68.454599][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.466354][ T4184] team0: Port device team_slave_1 added [ 68.474458][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.504544][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.516089][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.533270][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.564311][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.571555][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.598403][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.612203][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.622149][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.629789][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.656075][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.668015][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.675231][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.701303][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.719759][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.727909][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.753924][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.789145][ T4185] team0: Port device team_slave_0 added [ 68.801504][ T4187] team0: Port device team_slave_0 added [ 68.819998][ T4186] team0: Port device team_slave_0 added [ 68.828694][ T4185] team0: Port device team_slave_1 added [ 68.841999][ T4187] team0: Port device team_slave_1 added [ 68.856706][ T4186] team0: Port device team_slave_1 added [ 68.904822][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.912097][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.938481][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.961038][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.968392][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.983948][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.990988][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.018075][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.030134][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.037436][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.066187][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.081815][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.089140][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.115428][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.137986][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.144742][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.151768][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.159923][ T4184] Cannot create hsr debugfs directory [ 69.166256][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.173336][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.199839][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.220485][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.227758][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.253835][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.361460][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.368490][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.380436][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.388126][ T4186] Cannot create hsr debugfs directory [ 69.399301][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.406602][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.413574][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.421746][ T4187] Cannot create hsr debugfs directory [ 69.436049][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 69.450753][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 69.457690][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 69.463876][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 69.476235][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 69.497544][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.504737][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.511547][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.519568][ T4185] Cannot create hsr debugfs directory [ 69.800058][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.813287][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.828651][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.851992][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.875776][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.900500][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.910171][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.927789][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.988143][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.008084][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.037355][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.048295][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.136497][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.159590][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.171847][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.183093][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.193251][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.235365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.246656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.255927][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.279162][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.298958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.310549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.321546][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.328941][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.350649][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.367622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.376796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.384656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.392742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.403824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.413130][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.420385][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.438418][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.462697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.472069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.482960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.494034][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.501170][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.509371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.518502][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.528105][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.541374][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.552425][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.568152][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.594709][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.607657][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.617901][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.627526][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.634623][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.643825][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.653858][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.663532][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.672334][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.680574][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.689853][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.700051][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.745412][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.754838][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.768225][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.778744][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.787801][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.794897][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.804262][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.817382][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.826257][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.833470][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.842016][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.850982][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.860329][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.869331][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.879932][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.889519][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.898888][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.910387][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.919759][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.929001][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.938096][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.946661][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.955309][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.971446][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.001950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.011905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.020758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.029714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.039144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.048581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.057089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.066013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.096608][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.110036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.131658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.163969][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.180925][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.194065][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.204757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.213699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.251403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.261850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.289454][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.325761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.345399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.366885][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.373575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.390595][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.397756][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.411850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.431384][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.449940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.464261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.473430][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.480610][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.490297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.515488][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 71.521814][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.522125][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 71.546004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.554590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.555981][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 71.564516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.579610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.588035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.599079][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 71.615082][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 71.624050][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.636697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.648843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.673601][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.680802][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.690532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.705650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.714213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.722781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.736046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.744743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.753861][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.761008][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.784880][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.795666][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.830875][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.846115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.856656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.865651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.874207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.886561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.895218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.903886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.912677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.920574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.930701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.940524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.948460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.956356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.966175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.975704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.983515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.048174][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.066525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.077105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.093902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.103819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.118182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.129755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.186655][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.206833][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.215998][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.224655][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.239780][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.249533][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.259216][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.269171][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.280997][ T4184] device veth0_vlan entered promiscuous mode [ 72.301059][ T4188] device veth0_vlan entered promiscuous mode [ 72.334626][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.364163][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.372540][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.387067][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.403230][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.412388][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.430626][ T4184] device veth1_vlan entered promiscuous mode [ 72.443995][ T4188] device veth1_vlan entered promiscuous mode [ 72.517834][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.533646][ T4184] device veth0_macvtap entered promiscuous mode [ 72.560362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.571768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.584323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.596029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.604195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.612833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.621247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.630775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.640453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.665363][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.676280][ T4184] device veth1_macvtap entered promiscuous mode [ 72.688511][ T4188] device veth0_macvtap entered promiscuous mode [ 72.699090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.708017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.717378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.724827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.735845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.744412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.766558][ T4188] device veth1_macvtap entered promiscuous mode [ 72.794132][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.804816][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.823193][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.833018][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.842295][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.861723][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.898684][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.909606][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.919386][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.928600][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.938426][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.947380][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.957664][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.966584][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.986359][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.996948][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.009589][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.022582][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.034315][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.047604][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.059159][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.067131][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.079316][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.088349][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.097496][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.107856][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.117907][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.131603][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.141832][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.150998][ T4186] device veth0_vlan entered promiscuous mode [ 73.165959][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175472][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.184194][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193428][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.209114][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.218969][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.228073][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237308][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.248840][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.258536][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.267450][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.278777][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.287667][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.295828][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.304944][ T4185] device veth0_vlan entered promiscuous mode [ 73.319098][ T4185] device veth1_vlan entered promiscuous mode [ 73.327349][ T4187] device veth0_vlan entered promiscuous mode [ 73.387981][ T4187] device veth1_vlan entered promiscuous mode [ 73.397688][ T4186] device veth1_vlan entered promiscuous mode [ 73.474652][ T4185] device veth0_macvtap entered promiscuous mode [ 73.503613][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.513245][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.522909][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.532452][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.540877][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.550112][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.559547][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.595530][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 73.605290][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 73.623266][ T4186] device veth0_macvtap entered promiscuous mode [ 73.638747][ T4185] device veth1_macvtap entered promiscuous mode [ 73.648879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.658014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.666851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.675754][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 73.682652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.686989][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 73.696681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.707591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.719315][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.722934][ T4187] device veth0_macvtap entered promiscuous mode [ 73.728831][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.735282][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 73.756577][ T4186] device veth1_macvtap entered promiscuous mode [ 73.766399][ T4187] device veth1_macvtap entered promiscuous mode [ 73.773923][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.783460][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.792133][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.802488][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.844430][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.856956][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.867325][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.878440][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.890325][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.917857][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.929271][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.940014][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.950797][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.961198][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.972058][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.983607][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.991636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.001469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.011106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.020316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.056496][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.064544][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.070756][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.090559][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.101813][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.113471][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.125893][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.137555][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.149281][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.162028][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.173252][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.184021][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.194670][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.204807][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.216017][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.228382][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.240130][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.251151][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.261798][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.272654][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.283234][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.294163][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.305885][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.320080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.330114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.339560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.350302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.359849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.368886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.378373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.389235][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.398469][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.408763][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.419764][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.429007][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.438129][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.459767][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.468763][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.481421][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.497042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.507907][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.517907][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.528602][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.538742][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.549990][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.561907][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.576174][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.586644][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.595947][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604819][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.618179][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.639429][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.648377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.663677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.673512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.688427][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.700332][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710011][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720061][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899863][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.967388][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.988911][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.035487][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.052594][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.077018][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.101739][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.125271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 75.126891][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.140310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.161480][ T4305] loop0: detected capacity change from 0 to 1024 [ 75.187803][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.219489][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.231287][ T4305] ======================================================= [ 75.231287][ T4305] WARNING: The mand mount option has been deprecated and [ 75.231287][ T4305] and is ignored by this kernel. Remove the mand [ 75.231287][ T4305] option from the mount to silence this warning. [ 75.231287][ T4305] ======================================================= [ 75.284491][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.300878][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.322184][ T4305] EXT4-fs (loop0): Ignoring removed oldalloc option [ 75.333826][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.351949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.374290][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.397761][ T4305] EXT4-fs (loop0): Ignoring removed bh option [ 75.418002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.428447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.445485][ T4305] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.619275][ T4315] loop4: detected capacity change from 0 to 128 [ 75.627705][ T4305] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 75.676459][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 75.695179][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 75.752249][ T4316] loop2: detected capacity change from 0 to 4096 [ 75.759804][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 75.782742][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 75.819803][ T26] audit: type=1804 audit(1769504006.347:2): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 75.819915][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 75.897674][ T4316] EXT4-fs (loop2): inline encryption not supported [ 76.029789][ T4302] loop3: detected capacity change from 0 to 32768 [ 76.734633][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.875580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.227876][ T4316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.238323][ T4302] JBD2: Ignoring recovery information on journal [ 77.281265][ T4316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 77.314397][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 77.324318][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 77.331921][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.342023][ T4199] Workqueue: hci1 hci_rx_work [ 77.346772][ T4199] Call Trace: [ 77.350078][ T4199] [ 77.353041][ T4199] dump_stack_lvl+0x188/0x250 [ 77.357765][ T4199] ? show_regs_print_info+0x20/0x20 [ 77.363006][ T4199] ? load_image+0x400/0x400 [ 77.367558][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 77.372880][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 77.377683][ T4199] ? process_one_work+0x85f/0x1010 [ 77.382834][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 77.384076][ T4316] System zones: [ 77.388067][ T4199] kobject_add_internal+0x6e0/0xd90 [ 77.388124][ T4199] kobject_add+0x160/0x230 [ 77.401327][ T4199] ? kobject_init+0x1d0/0x1d0 [ 77.401865][ T4316] 0-5 [ 77.406049][ T4199] ? klist_children_get+0x50/0x50 [ 77.406078][ T4199] ? get_device_parent+0x121/0x3f0 [ 77.406103][ T4199] device_add+0x483/0xfb0 [ 77.406136][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 77.428554][ T4199] le_conn_complete_evt+0xc48/0x15c0 [ 77.433906][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 77.434255][ T4316] [ 77.439156][ T4199] ? __mutex_trylock_common+0x155/0x260 [ 77.439192][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 77.439217][ T4199] ? hci_event_packet+0x37b/0x1370 [ 77.457202][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 77.462302][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 77.468518][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 77.474192][ T4199] ? mark_lock+0x94/0x320 [ 77.478553][ T4199] ? mutex_unlock+0x10/0x10 [ 77.483097][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 77.487084][ T4302] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 77.489313][ T4199] ? lock_chain_count+0x20/0x20 [ 77.503164][ T4199] ? __rwlock_init+0x140/0x140 [ 77.507990][ T4199] hci_event_packet+0xe48/0x1370 [ 77.512979][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 77.518226][ T4199] ? rcu_lock_release+0x20/0x20 [ 77.523140][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 77.528386][ T4199] hci_rx_work+0x255/0xa10 [ 77.532867][ T4199] process_one_work+0x85f/0x1010 [ 77.537863][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 77.543540][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 77.548964][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.554035][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 77.559634][ T4199] ? wq_worker_running+0x97/0x170 [ 77.564701][ T4199] worker_thread+0xaa6/0x1290 [ 77.569446][ T4199] kthread+0x436/0x520 [ 77.573552][ T4199] ? rcu_lock_release+0x20/0x20 [ 77.578443][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 77.583267][ T4199] ret_from_fork+0x1f/0x30 [ 77.587746][ T4199] [ 77.594125][ T4199] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.607433][ T4199] Bluetooth: hci1: failed to register connection device [ 77.615842][ T4199] Bluetooth: Frame is too long (len 11, expected len 4) [ 77.632247][ T4309] loop1: detected capacity change from 0 to 32768 [ 77.659967][ T4316] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 77.852995][ T4309] XFS (loop1): Mounting V5 Filesystem [ 78.006637][ T4309] XFS (loop1): Ending clean mount [ 78.035816][ T4309] XFS (loop1): Quotacheck needed: Please wait. [ 78.072640][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 78.144747][ T4309] XFS (loop1): Quotacheck: Done. [ 78.592851][ T4359] loop2: detected capacity change from 0 to 7 [ 78.643095][ T4359] Dev loop2: unable to read RDB block 7 [ 78.654785][ T4359] loop2: unable to read partition table [ 78.663641][ T4359] loop2: partition table beyond EOD, truncated [ 78.690549][ T4186] XFS (loop1): Unmounting Filesystem [ 78.704296][ T4359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.115435][ T4251] Bluetooth: hci2: command 0x0406 tx timeout [ 82.904963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.026315][ T4392] device syzkaller0 entered promiscuous mode [ 83.038153][ T4394] loop0: detected capacity change from 0 to 64 [ 83.112411][ T4390] loop1: detected capacity change from 0 to 8192 [ 83.392835][ T4390] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 83.525836][ T4390] REISERFS (device loop1): using ordered data mode [ 83.565261][ T4390] reiserfs: using flush barriers [ 83.824010][ T4390] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.248078][ T4403] loop2: detected capacity change from 0 to 1024 [ 84.255496][ T4390] REISERFS (device loop1): checking transaction log (loop1) [ 84.333429][ T4403] EXT4-fs (loop2): Ignoring removed orlov option [ 84.346259][ T4194] Bluetooth: hci1: command 0x0406 tx timeout [ 84.562303][ T4403] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,orlov,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 84.613580][ T4403] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.748163][ T4422] 9pnet: Insufficient options for proto=fd [ 85.074442][ T4390] REISERFS (device loop1): Using r5 hash to sort names [ 85.102513][ T4390] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 86.719159][ T1325] cfg80211: failed to load regulatory.db [ 88.290719][ T4450] loop0: detected capacity change from 0 to 128 [ 89.238361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #c8!!! [ 89.256233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 89.265421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 89.274453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 89.283737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 89.293013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 89.846558][ T4459] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 89.885855][ T4460] loop2: detected capacity change from 0 to 1024 [ 89.933021][ T4463] device syzkaller0 entered promiscuous mode [ 89.959166][ T4460] EXT4-fs (loop2): Ignoring removed orlov option [ 90.219828][ T4460] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,orlov,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 90.372001][ T4460] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.870812][ T4460] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.39: lblock 3 mapped to illegal pblock 3 (length 3) [ 90.942639][ T4460] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 90.959193][ T4460] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.959193][ T4460] [ 91.004263][ T144] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 91.034833][ T4476] QAT: Device 6 not found [ 91.088805][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 91.262682][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.262682][ T144] [ 93.245742][ T4476] loop0: detected capacity change from 0 to 32768 [ 93.446333][ T4476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.45 (4476) [ 93.527964][ T4504] 9pnet: Insufficient options for proto=fd [ 93.569475][ T4476] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.608079][ T4476] BTRFS info (device loop0): using free space tree [ 93.645452][ T4476] BTRFS info (device loop0): has skinny extents [ 93.727853][ T4516] hub 8-0:1.0: USB hub found [ 93.735857][ T4516] hub 8-0:1.0: 1 port detected [ 95.419099][ T4476] BTRFS error (device loop0): open_ctree failed: -12 [ 96.065564][ T4549] loop4: detected capacity change from 0 to 512 [ 96.118337][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 96.215629][ T4549] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 96.224465][ T4549] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: comm syz.4.61: inode #1792: comm syz.4.61: iget: illegal inode # [ 96.299577][ T4549] EXT4-fs (loop4): Remounting filesystem read-only [ 96.312807][ T4549] EXT4-fs (loop4): no journal found [ 96.320997][ T4549] EXT4-fs (loop4): can't get journal size [ 96.357389][ T4549] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 96.555654][ T4549] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 96.579428][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 96.629675][ T4556] loop3: detected capacity change from 0 to 32768 [ 97.141471][ T4549] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.61: Logical block already allocated [ 97.263011][ T4549] EXT4-fs (loop4): Remounting filesystem read-only [ 97.410022][ T4556] XFS (loop3): Mounting V5 Filesystem [ 97.457999][ T4557] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.593355][ T4576] device syzkaller0 entered promiscuous mode [ 97.755635][ T4557] usb 2-1: Using ep0 maxpacket: 32 [ 97.850683][ T4556] XFS (loop3): Ending clean mount [ 97.976467][ T4557] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.090434][ T4557] usb 2-1: config 0 has no interface number 0 [ 98.227893][ T4557] usb 2-1: config 0 interface 184 has no altsetting 0 [ 100.241996][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 100.391636][ T4602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 100.505331][ T4557] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 100.516505][ T4188] XFS (loop3): Unmounting Filesystem [ 101.259250][ T4557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.267395][ T4557] usb 2-1: Product: syz [ 101.271599][ T4557] usb 2-1: Manufacturer: syz [ 101.327192][ T4557] usb 2-1: config 0 descriptor?? [ 101.346442][ T4557] usb 2-1: can't set config #0, error -71 [ 101.365910][ T4557] usb 2-1: USB disconnect, device number 2 [ 101.432947][ T4615] loop1: detected capacity change from 0 to 128 [ 101.816757][ T4615] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 102.386654][ T4630] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.443710][ T4620] device syzkaller0 entered promiscuous mode [ 102.522071][ T4632] Zero length message leads to an empty skb [ 102.592282][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 102.646375][ T4633] loop2: detected capacity change from 0 to 2048 [ 102.698305][ T4632] device syzkaller0 entered promiscuous mode [ 102.823129][ T4633] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.635125][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.065002][ T4251] usb 3-1: Using ep0 maxpacket: 32 [ 104.185250][ T4251] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.193491][ T4251] usb 3-1: config 0 has no interface number 0 [ 104.300843][ T4251] usb 3-1: config 0 interface 184 has no altsetting 0 [ 104.465419][ T4251] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.480152][ T4186] sysv_free_block: flc_count > flc_size [ 104.486247][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.486300][ T4251] usb 3-1: Product: syz [ 104.486316][ T4251] usb 3-1: Manufacturer: syz [ 104.486340][ T4251] usb 3-1: SerialNumber: syz [ 104.512452][ T4251] usb 3-1: config 0 descriptor?? [ 104.521313][ T4186] sysv_free_block: flc_count > flc_size [ 104.531576][ T4186] sysv_free_block: flc_count > flc_size [ 104.549805][ T4186] sysv_free_block: flc_count > flc_size [ 104.563209][ T4186] sysv_free_block: flc_count > flc_size [ 104.570916][ T4251] smsc75xx v1.0.0 [ 104.577336][ T4186] sysv_free_block: flc_count > flc_size [ 104.593216][ T4186] sysv_free_block: flc_count > flc_size [ 104.603336][ T4186] sysv_free_block: flc_count > flc_size [ 104.623757][ T4186] sysv_free_block: flc_count > flc_size [ 104.651452][ T4186] sysv_free_block: flc_count > flc_size [ 104.668871][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 105.899854][ T4684] device syzkaller0 entered promiscuous mode [ 105.955330][ T4251] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.975029][ T4251] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.499185][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 106.665317][ T4251] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 108.204582][ T4251] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 108.214545][ T4251] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 108.224968][ T4251] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 108.236595][ T4251] usb 3-1: USB disconnect, device number 2 [ 111.019227][ T4717] loop3: detected capacity change from 0 to 2048 [ 111.126466][ T4717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.250698][ T4728] device syzkaller0 entered promiscuous mode [ 111.409947][ T4732] 9pnet: Insufficient options for proto=fd [ 111.665183][ T4557] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.783141][ T4557] usb 4-1: Using ep0 maxpacket: 32 [ 112.812493][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 112.905584][ T4557] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.945502][ T4557] usb 4-1: config 0 has no interface number 0 [ 113.063160][ T4557] usb 4-1: config 0 interface 184 has no altsetting 0 [ 113.356013][ T4557] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.445011][ T4557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.485069][ T4557] usb 4-1: Product: syz [ 113.489300][ T4557] usb 4-1: Manufacturer: syz [ 113.542623][ T4557] usb 4-1: SerialNumber: syz [ 113.574510][ T4557] usb 4-1: config 0 descriptor?? [ 113.807376][ T4557] smsc75xx v1.0.0 [ 114.557160][ T4765] loop2: detected capacity change from 0 to 4096 [ 114.679818][ T4767] device syzkaller0 entered promiscuous mode [ 114.686213][ T4557] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 114.704978][ T4557] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.748910][ T4765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.313651][ T4777] device syzkaller0 entered promiscuous mode [ 115.370616][ T4785] loop4: detected capacity change from 0 to 512 [ 115.445240][ T4557] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 115.477207][ T4557] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 115.529854][ T4557] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 115.580731][ T4557] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 115.664625][ T4785] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.684784][ T4785] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.700877][ T4785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.721919][ T4785] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 116.008036][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 117.264768][ T4543] usb 4-1: USB disconnect, device number 2 [ 117.693377][ T4827] device syzkaller0 entered promiscuous mode [ 117.854374][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 118.145084][ T4557] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.535587][ T4557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.610935][ T4557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.762777][ T4557] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.015710][ T4557] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.027581][ T4557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.051220][ T4557] usb 4-1: config 0 descriptor?? [ 119.880715][ T4299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.012334][ T4850] device syzkaller0 entered promiscuous mode [ 120.195130][ T4299] usb 1-1: Using ep0 maxpacket: 32 [ 120.245113][ T4557] usbhid 4-1:0.0: can't add hid device: -71 [ 120.256571][ T4557] usbhid: probe of 4-1:0.0 failed with error -71 [ 120.285354][ T4557] usb 4-1: USB disconnect, device number 3 [ 120.330784][ T4299] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.346623][ T4299] usb 1-1: config 0 has no interface number 0 [ 120.352793][ T4299] usb 1-1: config 0 interface 184 has no altsetting 0 [ 120.430594][ T4858] device syzkaller0 entered promiscuous mode [ 120.556526][ T4299] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.576206][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.594560][ T4299] usb 1-1: Product: syz [ 120.604480][ T4299] usb 1-1: Manufacturer: syz [ 120.609423][ T4299] usb 1-1: SerialNumber: syz [ 120.616172][ T4299] usb 1-1: config 0 descriptor?? [ 120.662809][ T4299] smsc75xx v1.0.0 [ 120.855201][ T4871] device syzkaller0 entered promiscuous mode [ 120.884716][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 121.024166][ T4877] tipc: Started in network mode [ 121.030118][ T4877] tipc: Node identity 2254620f85a8, cluster identity 4711 [ 121.038221][ T4877] tipc: Enabled bearer , priority 0 [ 121.051711][ T4877] device syzkaller0 entered promiscuous mode [ 121.071152][ T4877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.101706][ T4877] tipc: Resetting bearer [ 121.118608][ T4876] tipc: Resetting bearer [ 121.158644][ T4876] tipc: Disabling bearer [ 122.074972][ T4299] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 122.086127][ T4299] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.111084][ T4883] device syzkaller0 entered promiscuous mode [ 122.213523][ T4892] QAT: Device 6 not found [ 122.537808][ T4299] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 122.564969][ T4299] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 122.574650][ T4299] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.589441][ T4299] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 122.623941][ T4299] usb 1-1: USB disconnect, device number 2 [ 124.490387][ T4919] tipc: Started in network mode [ 124.556729][ T4919] tipc: Node identity 22253124f819, cluster identity 4711 [ 124.564031][ T4919] tipc: Enabled bearer , priority 0 [ 125.134929][ C0] sched: RT throttling activated [ 125.167191][ T4923] device syzkaller0 entered promiscuous mode [ 125.686957][ T4925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.725188][ T4299] tipc: Node number set to 3661377828 [ 125.885278][ T4925] tipc: Resetting bearer [ 125.937691][ T4925] tipc: Disabling bearer [ 126.773373][ T4936] device syzkaller0 entered promiscuous mode [ 126.897647][ T4942] 9pnet: Insufficient options for proto=fd [ 127.366694][ T4299] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.707200][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 128.015370][ T4299] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.023692][ T4299] usb 2-1: config 0 has no interface number 0 [ 128.107166][ T4299] usb 2-1: config 0 interface 184 has no altsetting 0 [ 129.085114][ T4299] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.094222][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.134988][ T4299] usb 2-1: Product: syz [ 129.139212][ T4299] usb 2-1: Manufacturer: syz [ 129.143842][ T4299] usb 2-1: SerialNumber: syz [ 129.186634][ T4299] usb 2-1: config 0 descriptor?? [ 129.226080][ T4299] smsc75xx v1.0.0 [ 129.612134][ T4988] kvm [4987]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0 [ 129.637264][ T4991] overlayfs: failed to resolve './bus': -2 [ 129.875088][ T4299] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.887255][ T4299] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.635150][ T4299] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 130.656658][ T4299] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 130.670354][ T4299] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 130.681883][ T4299] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 130.735462][ T5005] 9pnet: Insufficient options for proto=fd [ 132.799866][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.807017][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.585986][ T5030] loop3: detected capacity change from 0 to 256 [ 133.627319][ T4299] usb 2-1: USB disconnect, device number 3 [ 133.655684][ T5030] exfat: Deprecated parameter 'utf8' [ 133.661153][ T5030] exfat: Deprecated parameter 'utf8' [ 133.778233][ T5030] exfat: Deprecated parameter 'utf8' [ 133.842152][ T5036] loop2: detected capacity change from 0 to 512 [ 133.885911][ T5030] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 133.966169][ T5036] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.994278][ T5036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.010582][ T5036] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 134.401180][ T5048] device syzkaller0 entered promiscuous mode [ 136.553031][ T5063] 9pnet: Could not find request transport: fd0x0000000000000003 [ 137.998412][ T5075] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 138.019824][ T5075] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 138.055178][ T5080] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 138.096916][ T5080] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 138.272993][ T5094] loop1: detected capacity change from 0 to 256 [ 138.354502][ T5094] FAT-fs (loop1): Unrecognized mount option "ut0" or missing value [ 138.665775][ T5110] loop3: detected capacity change from 0 to 512 [ 138.725257][ T5110] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.745924][ T5110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.762669][ T5110] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 139.878128][ T5146] device syzkaller0 entered promiscuous mode [ 140.073704][ T5143] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.107886][ T5143] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.123770][ T5161] hub 8-0:1.0: USB hub found [ 140.129456][ T5161] hub 8-0:1.0: 1 port detected [ 142.734804][ T5194] tipc: Started in network mode [ 142.745063][ T5194] tipc: Node identity 9a661820e927, cluster identity 4711 [ 142.754831][ T5194] tipc: Enabled bearer , priority 0 [ 142.765704][ T5196] device syzkaller0 entered promiscuous mode [ 142.798751][ T5200] device syzkaller0 entered promiscuous mode [ 142.829215][ T5194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 142.861253][ T5194] tipc: Resetting bearer [ 142.926885][ T5192] tipc: Resetting bearer [ 142.962349][ T5192] tipc: Disabling bearer [ 143.014619][ T5202] device syzkaller0 entered promiscuous mode [ 143.186430][ T5210] 9pnet: Insufficient options for proto=fd [ 143.525324][ T5220] device syzkaller0 entered promiscuous mode [ 145.562035][ T5239] device syzkaller0 entered promiscuous mode [ 145.655576][ T5243] 9pnet: Insufficient options for proto=fd [ 145.860641][ T5248] device syzkaller0 entered promiscuous mode [ 145.873095][ T5250] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 145.978858][ T5250] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 146.010333][ T5250] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 146.035537][ T5250] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 146.679586][ T5276] device syzkaller0 entered promiscuous mode [ 147.573582][ T5298] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 147.646061][ T5310] 9pnet: Insufficient options for proto=fd [ 147.672115][ T5298] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 147.794748][ T5315] 9pnet: Insufficient options for proto=fd [ 150.003127][ T5337] loop2: detected capacity change from 0 to 512 [ 150.082168][ T5343] 9pnet: Insufficient options for proto=fd [ 150.137902][ T5337] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.174982][ T5337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.225134][ T5337] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 151.789685][ T5365] device syzkaller0 entered promiscuous mode [ 152.378470][ T5378] 9pnet: Insufficient options for proto=fd [ 155.567038][ T5411] 9pnet: Insufficient options for proto=fd [ 155.961615][ T5416] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 159.570115][ T5448] hub 8-0:1.0: USB hub found [ 159.576887][ T5448] hub 8-0:1.0: 1 port detected [ 160.025181][ T4259] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.058153][ T5452] 9pnet: Insufficient options for proto=fd [ 160.066233][ T5451] 9pnet: Insufficient options for proto=fd [ 160.225095][ T5460] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 160.275074][ T4259] usb 4-1: Using ep0 maxpacket: 32 [ 160.576267][ T5466] loop2: detected capacity change from 0 to 512 [ 160.645142][ T4259] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 160.663772][ T4259] usb 4-1: can't read configurations, error -71 [ 160.740579][ T5466] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.815854][ T5466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.894519][ T5466] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 162.774243][ T5492] hub 8-0:1.0: USB hub found [ 162.781550][ T5492] hub 8-0:1.0: 1 port detected [ 162.876668][ T5494] 9pnet: Insufficient options for proto=fd [ 163.006117][ T5497] 9pnet: Insufficient options for proto=fd [ 163.404003][ T5508] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 164.024263][ T5524] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 164.459092][ T5538] hub 8-0:1.0: USB hub found [ 164.464199][ T5538] hub 8-0:1.0: 1 port detected [ 164.572650][ T5541] 9pnet: Insufficient options for proto=fd [ 164.622885][ T5545] 9pnet: Insufficient options for proto=fd [ 166.799370][ T5575] 9pnet: Insufficient options for proto=fd [ 167.075067][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.415123][ T4251] usb 3-1: Using ep0 maxpacket: 32 [ 167.535355][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24909, setting to 1024 [ 167.595931][ T5591] loop1: detected capacity change from 0 to 256 [ 167.604063][ T4251] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.639347][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.649392][ T5591] exfat: Deprecated parameter 'utf8' [ 167.654760][ T5591] exfat: Deprecated parameter 'utf8' [ 167.671920][ T4251] usb 3-1: config 0 descriptor?? [ 167.677331][ T5591] exfat: Deprecated parameter 'utf8' [ 167.740365][ T5591] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 167.757033][ T4251] hub 3-1:0.0: USB hub found [ 167.975168][ T4251] hub 3-1:0.0: 1 port detected [ 169.283655][ T4237] usb 3-1: USB disconnect, device number 3 [ 169.295695][ T4251] usb 3-1-port1: config error [ 169.788887][ T5618] device syzkaller0 entered promiscuous mode [ 170.113928][ T5629] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 170.200210][ T5631] 9pnet: Insufficient options for proto=fd [ 170.493932][ T5640] 9pnet: Insufficient options for proto=fd [ 172.749394][ T5665] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 173.180299][ T4251] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 174.546047][ T5696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 175.275269][ T4251] usb 2-1: Using ep0 maxpacket: 32 [ 175.396331][ T4251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24909, setting to 1024 [ 175.432958][ T4251] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.460220][ T4251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.490164][ T4251] usb 2-1: config 0 descriptor?? [ 175.556348][ T4251] hub 2-1:0.0: USB hub found [ 175.855026][ T4251] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 175.965532][ T4251] usbhid 2-1:0.0: can't add hid device: -71 [ 175.974711][ T4251] usbhid: probe of 2-1:0.0 failed with error -71 [ 176.051974][ T4251] usb 2-1: USB disconnect, device number 4 [ 177.310572][ T5722] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 178.177077][ T5737] device syzkaller0 entered promiscuous mode [ 178.599330][ T5750] loop2: detected capacity change from 0 to 256 [ 178.703751][ T5750] FAT-fs (loop2): Unrecognized mount option "ut0" or missing value [ 180.862501][ T5770] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 181.428434][ T5787] loop2: detected capacity change from 0 to 1024 [ 181.548035][ T5787] EXT4-fs (loop2): Ignoring removed orlov option [ 181.612879][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,orlov,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 181.630630][ T5787] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.647682][ T5787] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.438: lblock 3 mapped to illegal pblock 3 (length 3) [ 181.663836][ T5787] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 181.676227][ T5787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.676227][ T5787] [ 181.702439][ T5798] 9pnet: Insufficient options for proto=fd [ 181.759534][ T5800] loop3: detected capacity change from 0 to 256 [ 181.769721][ T5800] FAT-fs (loop3): Unrecognized mount option "ut0" or missing value [ 182.415533][ T4276] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 182.584653][ T4276] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 182.604359][ T4276] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.604359][ T4276] [ 182.865727][ T5811] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 184.725563][ T5833] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 184.901861][ T5839] device syzkaller0 entered promiscuous mode [ 184.960784][ T5843] loop1: detected capacity change from 0 to 256 [ 185.113567][ T5844] loop3: detected capacity change from 0 to 1024 [ 185.151190][ T5843] FAT-fs (loop1): Unrecognized mount option "ut0" or missing value [ 185.233343][ T5844] EXT4-fs (loop3): Ignoring removed orlov option [ 185.426374][ T5844] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,orlov,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 185.445077][ T5844] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.463288][ T5844] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.458: lblock 3 mapped to illegal pblock 3 (length 3) [ 185.479088][ T5844] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 185.492079][ T5844] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.492079][ T5844] [ 185.831541][ T1216] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 185.917446][ T1216] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 186.025281][ T1216] EXT4-fs (loop3): This should not happen!! Data will be lost [ 186.025281][ T1216] [ 188.403585][ T5909] device syzkaller0 entered promiscuous mode [ 188.416588][ T5903] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 188.481232][ T5903] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 188.519560][ T5903] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 188.610297][ T5903] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 188.641979][ T5903] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 188.680040][ T5903] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 188.723444][ T5903] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 188.746942][ T5903] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 188.762815][ T5903] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 189.555751][ T4199] ------------[ cut here ]------------ [ 189.561513][ T4199] WARNING: CPU: 1 PID: 4199 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.574432][ T4199] Modules linked in: [ 189.578447][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 189.586177][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.597389][ T4199] Workqueue: hci2 hci_conn_timeout [ 189.602631][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.608492][ T4199] Code: 89 8d e8 84 c9 e2 f8 48 8b 35 95 7e ae 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 93 72 f8 e8 41 c5 9d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.628425][ T4199] RSP: 0018:ffffc9000300fc08 EFLAGS: 00010293 [ 189.634663][ T4199] RAX: ffffffff88db5a5f RBX: ffff8880790e0138 RCX: ffff88801a9a1dc0 [ 189.642786][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.650900][ T4199] RBP: 00000000ffffffff R08: ffff8880790e0013 R09: 1ffff1100f21c002 [ 189.658927][ T4199] R10: dffffc0000000000 R11: ffffed100f21c003 R12: dffffc0000000000 [ 189.666982][ T4199] R13: dffffc0000000000 R14: ffff8880790e0000 R15: ffff8880790e0010 [ 189.675154][ T4199] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 189.684123][ T4199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.690907][ T4199] CR2: 0000001b3261bff8 CR3: 000000006426c000 CR4: 00000000003526e0 [ 189.699036][ T4199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.707115][ T4199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.715257][ T4199] Call Trace: [ 189.718576][ T4199] [ 189.721625][ T4199] process_one_work+0x85f/0x1010 [ 189.726777][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 189.732454][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 189.741242][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.746378][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.752065][ T4199] ? wq_worker_running+0x97/0x170 [ 189.757195][ T4199] worker_thread+0xaa6/0x1290 [ 189.761955][ T4199] kthread+0x436/0x520 [ 189.766113][ T4199] ? rcu_lock_release+0x20/0x20 [ 189.771002][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 189.775674][ T4199] ret_from_fork+0x1f/0x30 [ 189.780140][ T4199] [ 189.783216][ T4199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.790634][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 189.798305][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.808663][ T4199] Workqueue: hci2 hci_conn_timeout [ 189.814008][ T4199] Call Trace: [ 189.817324][ T4199] [ 189.820314][ T4199] dump_stack_lvl+0x188/0x250 [ 189.825039][ T4199] ? show_regs_print_info+0x20/0x20 [ 189.830275][ T4199] ? load_image+0x400/0x400 [ 189.834832][ T4199] panic+0x2e5/0x810 [ 189.838767][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 189.843297][ T4199] ? ret_from_fork+0x1f/0x30 [ 189.847908][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 189.852958][ T4199] __warn+0x248/0x2b0 [ 189.856956][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 189.862000][ T4199] report_bug+0x1b7/0x2e0 [ 189.866357][ T4199] handle_bug+0x3a/0x70 [ 189.870536][ T4199] exc_invalid_op+0x16/0x40 [ 189.875094][ T4199] asm_exc_invalid_op+0x16/0x20 [ 189.880064][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.885805][ T4199] Code: 89 8d e8 84 c9 e2 f8 48 8b 35 95 7e ae 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 93 72 f8 e8 41 c5 9d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.905453][ T4199] RSP: 0018:ffffc9000300fc08 EFLAGS: 00010293 [ 189.911551][ T4199] RAX: ffffffff88db5a5f RBX: ffff8880790e0138 RCX: ffff88801a9a1dc0 [ 189.919723][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.928143][ T4199] RBP: 00000000ffffffff R08: ffff8880790e0013 R09: 1ffff1100f21c002 [ 189.936244][ T4199] R10: dffffc0000000000 R11: ffffed100f21c003 R12: dffffc0000000000 [ 189.944230][ T4199] R13: dffffc0000000000 R14: ffff8880790e0000 R15: ffff8880790e0010 [ 189.952227][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 189.957281][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 189.962502][ T4199] process_one_work+0x85f/0x1010 [ 189.967463][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 189.973200][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 189.978509][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.983545][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.989203][ T4199] ? wq_worker_running+0x97/0x170 [ 189.994240][ T4199] worker_thread+0xaa6/0x1290 [ 189.998948][ T4199] kthread+0x436/0x520 [ 190.003035][ T4199] ? rcu_lock_release+0x20/0x20 [ 190.007909][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 190.012517][ T4199] ret_from_fork+0x1f/0x30 [ 190.016961][ T4199] [ 190.020263][ T4199] Kernel Offset: disabled [ 190.024836][ T4199] Rebooting in 86400 seconds..