last executing test programs: 27.167004714s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "e6989f413bb91852f756a4ae6dddfbd1ce5d29c2ce29f8f1e6d0fa0da1e7f1ff0edf111f44960000c2fb5b78c678e677df701905b9aafab4ab426855a3f6a004", "f76c47c6780820d1cbf7966d61fdcf335263c093fce47d85272036dc78388e3dc177e9b49600", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 25.674715093s ago: executing program 3 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) set_mempolicy(0x6, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{}]}) mkdir(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r2, &(0x7f0000001700)={&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/237, 0xed}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000001580)=""/96, 0x60}], 0x5, &(0x7f0000001680)=""/78, 0x4e}, 0x140) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xc7) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06000d08", @ANYRESDEC=r4, @ANYRESDEC, @ANYRES8=r1, @ANYRES8=r3], 0x9) socket$nl_generic(0x10, 0x3, 0x10) 20.500586866s ago: executing program 3 (id=21): syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$eJzs3d1rLGcZAPBnNtmer+iu2otaaHuwlZyiZzdpbBu8aCuIdwWl3h9Dsgkhm2zIbupJKJqD9woi2tteeSMI3grS/0BRCnovKkrRUwV7oY7M7OTkZLub5JD9oMnvB2/mnZmdeZ53kn3n85wJ4NK6GRGvRcRURDwfEZVieqkocdAt2ec+uP/WclaSSNM3/p5EUkzLPpYUJXOjWOxqd5D7d3o8bntvf2Op2WzsFOP1zuZ2vb23f3t9c2mtsdbYWliYf2nx5cUXF+eG0s6sXa989S8//sFPv/bKr7747T/e+dut72T5zhTzD9sxbN1tUs62xQPTEbEzimATMFW0pzzpRAAAOJPsGP/TEfG5/Pi/ElP50dzZJCPNDAAAABiW9NWZ+E8SkQIAAAAXVil/BjYp1YpnAWaiVKrVus/wPh7XS81Wu/OF1dbu1kr3WdlqlEur683GXPFMbTXKSTY+n9ePxl94MJ4cPHy94UeVa/n82nKruTK5yx4AAABwqdzoOf//V6V7/n+Ce2NLDgAAABie6lE1rUwyEQAAAGBkqh+Z8s5E8gAAAABG56Pn/wAAAMAF8vXXX89Kmr//uhqx8ube7kbrzdsrjfZGbXN3ubbc2tmurbVaa830SsTmaetrtlrbX4qt3bv1TqPdqbf39u9stna3OnfWj70CGwAAABijTz3z7h+SiDj48rW8ZB7LfkwNWMCzAnBhlB7lw38eXR7A+A3azQMX3/SkEwAmptwdJJPOA5ic0zqAgQ/v/Gb4uQAAAKMx+9n+9/+nj64NABfUI93/By4U9//h8nL/Hy6vsiMAuPRGf/8/TU9dFwAAMFIzeUlKteJe4EyUPky7ohrlZHW92ZiLiE9GxO8r5SvZ+Hy+ZOIfDQAAAAAAAAAAAAAAAAAAAAAAAADAGaVpEikAAABwoUWU/poU7/+arTw303t94LHkw0o+zN8O8MZP7i51Ojvz2fR/FNMjOm8X0194lCsP3jwOAAAAo3J4nn54Hg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/TB/beWD8vxOaWRxn3/KxFR7Rd/Oq7mw6tRjojr/0xi+nChZyKSiJgaQvyDexHxRL/4SZZWVIssjsUvtsq1PIuRx38qTdPv9ot/49zR4XJ7N+t/Xuv3/SvFzXzY//s/XZTzGtz/lR70f1N94mc9zyfOsP4rEfHkez+vD54b8eR0//7nMH4yIP6z/VbZZ6N865v7+4PyS9+JmD3a/3z/eISjWr2zuV1v7+3fXt9cWmusNbYWFuZfWnx58cXFufrqerNR/Owb44dP/fJ/g+K/fy/iet/9X7f/faj9S73tfy6rlAet+ch/37t7/zN5rZL2rCKPf+vZ/r//J47HP7Zps7+Jzxf7gWz+7GH9oFt/2NM/++3TJ7V/ZUD7T/v93+pZ16D98fPf+N6fTtxAAMBYtff2N5aazcbOyCtvp2k6plj5gci42nXuyuMfn1Tbe7/4Xbfyau+smye0Ir0y7j82lXNXenuKX4+/cwIAAIbq6KB/0pkAAAAAAAAAAAAAAAAAAADA5TWO/06sN+bBZJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCi/wcAAP//rgHbtw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1}, 0x38) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000300)=0x80000039bc, 0x36) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 17.116194607s ago: executing program 4 (id=30): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_init(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.619475315s ago: executing program 2 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 15.617795087s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndmidi(&(0x7f0000003ac0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0xc0245720, &(0x7f0000000180)) 14.677995098s ago: executing program 2 (id=35): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4086, 0x0, 0xfffffffffffffeae}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x0) 14.551427953s ago: executing program 4 (id=36): syz_read_part_table(0x601, &(0x7f0000000000)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00', @ANYRESOCT, @ANYRES32, @ANYBLOB="35a68d901abc34e05575c9afdf9b11d1940c679ba28a8844a89a6b8dd8c8b044fc5aede2b47f90388765069068593b9147183261f2dfa75abf7b03", @ANYRESHEX=r1, @ANYRES16, @ANYBLOB="dec4c6cab5b76e7dd5c92446e381d6b0faece17dcb0a99f9a4101eb0f853547718222d87fe657beed794a425495366eae44abee6b92683c23487265abf31"], 0x1, 0x5ec, &(0x7f00000012c0)="$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") 14.143064951s ago: executing program 2 (id=38): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xf000000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x8010}], 0x5, 0x0, 0x200000000000600, 0x7000000}}], 0xff00, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 12.734602441s ago: executing program 4 (id=39): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81}}}, 0x6) readahead(0xffffffffffffffff, 0xee, 0x8000000000000001) shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x0) 12.385083819s ago: executing program 0 (id=41): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xfc68f3af10fe046c, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r0], 0x10) 11.364427214s ago: executing program 2 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x8000, 0x600}, 0x8) 11.25499601s ago: executing program 4 (id=44): socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x6}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.043654544s ago: executing program 0 (id=45): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x4}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.020611287s ago: executing program 4 (id=46): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfffffff8}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x0, 0x0, 0x8}, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xfffffffffffffcc2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) 8.08700033s ago: executing program 2 (id=48): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x80, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @sit={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x16}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_ENCAP_SPORT={0x2, 0x11, 0x4e21}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 7.758511747s ago: executing program 0 (id=50): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010080, &(0x7f0000000040)=ANY=[], 0x1, 0x304, &(0x7f0000000680)="$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") socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x451, &(0x7f00000016c0)="$eJzs3M9PHFUcAPDv7rK0tEWw/iy2ilYj8QcU+sMevNRo4kETEz3UeEKgDXZbTMHENkTRAx5NE+/Go4l/gRfrxagnE696NybEcLF6WjO7M3SBXVhgYWv380kG3tv3Nu99Z+btvn2zswF0rMHkTy7iUET8FhF91ezqCoPVf7eW5yf+WZ6fyEW5/OZfuUq9v5fnJ7Kq2fMOVjPl8gbtLr4TMV4qTV1N8yNzl98fmb12/fnpy+MXpy5OXRk7e/bUyWPdZ8ZOtyTO3qSvAx/NHD3y6ts3Xp84f+Pdn75J+nsoLa+No1UGq3u3rqda3Vib9dakc11t7AhbUoiI5HAVK+O/LwrRs1LWF6982tbOAbuqXM6X9zUuXigDd7Fkog50ouyNPvn8m217NPW4Iyydi5V1jFvpVi3pinxap5h+RtoNgxFxfuHfL5MtdmkdAgCg1s1zEfFcvflfPh6sqXdPem2oPyLujYjDEXFfRNwfEQ9EVOo+FBEPb7H9tVdI1s9/yn3bCqxJyfzvxfTa1ur5Xzb7i/5CmuutxF/MXZguTZ1I98lQFPcl+dEN2vj+5V8/b1RWO/9LtqT9bC6Y9uPPrjULdJPjc+M7ibnW0icRA1314s+tzHmT+fGRiBjYZhvTz3x9tFFZ/6bxb6AFk/LyVxFPV4//QqyJP5NreH1y9IUzY6dH9kdp6sRIdlas9/Mvi280an/z47+7lm6W40Dd838l/v7c/ojZa9cvVa7Xzm69jcXfP2v4mWa753937q1Kujt97MPxubmroxHdudfWPz52+7lZPqufnP9Dx+uP/8Nxe088EhHJSXwsIh6NiMfSvj8eEU9ExPEN4v/xpSff23r8G6zKt1AS/+Rmxz9qj//WE4VLP3xbt/Fis8f/VCU1lD7SzOtfsx3c4e4DAACA/4V85TvwufzwSjqfHx6OWKis7R7Il2Zm5569MPPBlcnqd+X7o5jPVrr6atZDR9O1vCw/tiZ/Ml03/qLQU8kPT8yUJtsdPHS4g9n4L6we/4k/Cu3uHbDr3K8Fncv4h85l/EPnMv6hcxn/0Lnqjf+P29APYO9t8v7fs1f9APae+T90LuMfOpfxDx2p4b3x+R3d8i/RpsR33Tv7rYbmE5G/Q0K+axLFqFvU1fSPWWwzsa9uUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrjvwAAAP//gk3jgQ==") gettid() timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2604c090, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(r0, &(0x7f0000001740)={0x8, {"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", 0x1000}}, 0x1006) 7.409425787s ago: executing program 1 (id=51): socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x880) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) 6.37133599s ago: executing program 1 (id=52): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) ftruncate(0xffffffffffffffff, 0x0) r3 = socket(0x22, 0x2, 0x4) bind$bt_hci(r3, &(0x7f0000000000)={0x22}, 0x6) 5.281757732s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 5.263451431s ago: executing program 0 (id=54): syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xf3, 0x54, 0xed, 0x10, 0xb05, 0x1736, 0xdb1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0x3e, 0xa}}]}}]}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='host1x_channel_submitted\x00'}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000005940)={'filter\x00', 0x7, 0x4, 0x3e4, 0x10c, 0x304, 0x10c, 0x304, 0x304, 0x304, 0x4, 0x0, {[{{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'netdevsim0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x430) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) timer_settime(r1, 0x1, &(0x7f0000000480)={{}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00/'], 0x38}}, 0x0) 4.326012549s ago: executing program 1 (id=55): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000ffff0000000000000200000018100000b1fb250b281070b97decc86038b2a3dee25ad6411b651535d625f4bdc8b5eaa0ba645b7483c3da8aacd0866928a293a11fcbf057f0e38d08edc321b9628e7747656673ba478dbc64a11c21639c95c2ac5c431e0e437de41d2bee261568db69b1771d6f01fb84cae94c88a94eeddee28e41d1db8cbc26b2220aabf694f71cbc614e80ddcc76e8ed2decc293a7c206a2d6c32e68ffaf5b0d464e906d21b7220fe399a9e7c2b38df9166a769b69086f937a3cd85ffaa3b9de74bd4398cfe096e57986c3bee727f19097f431c9b95fb59c6d", @ANYRES32, @ANYRES32, @ANYBLOB="000a020078e64ff2004ae6b671b8b82d8143013641535969fd4f5e9c7025cf6c49e80bcc9e85f6250080812f4a5e01c6f2ac8cefc4f124999c9d79cced8a211d31ce41cc9e49219179165c9c4e8f51ecc6b5dbbb0b04"], &(0x7f0000000140)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc3e7}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000780), 0x8, 0xde, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x4, [@datasec={0x8, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x38, 0x3ff}, {0x3, 0x10001, 0x1}, {0x2, 0xd666fed7, 0x4}, {0x4, 0xffff, 0x3ff}, {0x1, 0xfffffffe, 0x7}, {0x4, 0x3, 0x401}, {0x4, 0x100, 0xac}], 'J3'}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x5, 0x7ff}, {0x5, 0x51e41f01}, {0x0, 0x3}, {0x4, 0x40}, {0x5, 0x3}, {0x4, 0x6}]}]}, {0x0, [0xe, 0x30]}}, &(0x7f0000000b00)=""/178, 0xbc, 0xb2, 0x1, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1f, 0x20, 0x9, 0x7, 0x50, 0xffffffffffffffff, 0x39a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000002c0), &(0x7f0000000300)=""/111, 0x0, 0x0, 0x8}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@map_fd, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x0, 0x10, 0xc3e7}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x6802}], 0x1}, 0x20000000) 4.239167539s ago: executing program 1 (id=56): sendmsg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 598.001475ms ago: executing program 1 (id=58): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000600)={0x0, 0x3000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 577.684281ms ago: executing program 0 (id=59): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 951.188µs ago: executing program 0 (id=60): socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x6}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=61): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000540)={[{@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@journal_dev={'journal_dev', 0x3d, 0xe927}}, {@quota}, {@quota}]}, 0xff, 0x450, &(0x7f000001a340)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) clock_gettime(0x0, &(0x7f0000000280)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts. [ 59.245559][ T5213] cgroup: Unknown subsys name 'net' [ 59.411060][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.933918][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.265401][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.274834][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.284038][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.292082][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.322189][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.329714][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.337309][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.339056][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.353087][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.357949][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.361757][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.368148][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.375979][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.384496][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.389209][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.397337][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.402771][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.409751][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.416223][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.425288][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.436289][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.442131][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.444864][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.459340][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.467447][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.472942][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.481975][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.490648][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.507998][ T4621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.515834][ T4621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.940504][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 63.957326][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 64.071893][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 64.090493][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 64.145177][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 64.224571][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.231828][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.239510][ T5242] bridge_slave_0: entered allmulticast mode [ 64.246957][ T5242] bridge_slave_0: entered promiscuous mode [ 64.259180][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.266658][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.273976][ T5242] bridge_slave_1: entered allmulticast mode [ 64.280982][ T5242] bridge_slave_1: entered promiscuous mode [ 64.313181][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.320331][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.331791][ T5231] bridge_slave_0: entered allmulticast mode [ 64.338764][ T5231] bridge_slave_0: entered promiscuous mode [ 64.396575][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.404043][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.411198][ T5231] bridge_slave_1: entered allmulticast mode [ 64.418645][ T5231] bridge_slave_1: entered promiscuous mode [ 64.468780][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.480100][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.487800][ T5225] bridge_slave_0: entered allmulticast mode [ 64.495586][ T5225] bridge_slave_0: entered promiscuous mode [ 64.505501][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.518530][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.526215][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.533642][ T5229] bridge_slave_0: entered allmulticast mode [ 64.540460][ T5229] bridge_slave_0: entered promiscuous mode [ 64.556089][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.563382][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.570562][ T5225] bridge_slave_1: entered allmulticast mode [ 64.577984][ T5225] bridge_slave_1: entered promiscuous mode [ 64.595637][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.621369][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.628607][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.637503][ T5229] bridge_slave_1: entered allmulticast mode [ 64.644513][ T5229] bridge_slave_1: entered promiscuous mode [ 64.661354][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.695530][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.702991][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.710180][ T5224] bridge_slave_0: entered allmulticast mode [ 64.717890][ T5224] bridge_slave_0: entered promiscuous mode [ 64.734995][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.746128][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.761520][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.774800][ T5242] team0: Port device team_slave_0 added [ 64.781083][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.788326][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.795944][ T5224] bridge_slave_1: entered allmulticast mode [ 64.803080][ T5224] bridge_slave_1: entered promiscuous mode [ 64.811191][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.838946][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.858404][ T5242] team0: Port device team_slave_1 added [ 64.891379][ T5229] team0: Port device team_slave_0 added [ 64.941471][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.952273][ T5229] team0: Port device team_slave_1 added [ 64.961139][ T5231] team0: Port device team_slave_0 added [ 64.969921][ T5231] team0: Port device team_slave_1 added [ 64.978116][ T5225] team0: Port device team_slave_0 added [ 64.985104][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.992081][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.018786][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.031736][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.038838][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.064900][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.077951][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.134721][ T5225] team0: Port device team_slave_1 added [ 65.158864][ T5224] team0: Port device team_slave_0 added [ 65.166066][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.173691][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.199927][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.214561][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.221621][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.248776][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.260723][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.268132][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.294205][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.306871][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.313981][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.340472][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.370925][ T5224] team0: Port device team_slave_1 added [ 65.420771][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.428238][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.454800][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.480998][ T5242] hsr_slave_0: entered promiscuous mode [ 65.488019][ T5242] hsr_slave_1: entered promiscuous mode [ 65.494608][ T4621] Bluetooth: hci2: command tx timeout [ 65.494869][ T4621] Bluetooth: hci3: command tx timeout [ 65.508407][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.515927][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.542080][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.554633][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.561630][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.573865][ T4621] Bluetooth: hci0: command tx timeout [ 65.587769][ T5241] Bluetooth: hci4: command tx timeout [ 65.593350][ T5244] Bluetooth: hci1: command tx timeout [ 65.598857][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.626353][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.633672][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.660415][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.685109][ T5231] hsr_slave_0: entered promiscuous mode [ 65.691502][ T5231] hsr_slave_1: entered promiscuous mode [ 65.698100][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.706260][ T5231] Cannot create hsr debugfs directory [ 65.733097][ T5229] hsr_slave_0: entered promiscuous mode [ 65.739706][ T5229] hsr_slave_1: entered promiscuous mode [ 65.746330][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.754094][ T5229] Cannot create hsr debugfs directory [ 65.839700][ T5225] hsr_slave_0: entered promiscuous mode [ 65.848198][ T5225] hsr_slave_1: entered promiscuous mode [ 65.854553][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.862122][ T5225] Cannot create hsr debugfs directory [ 65.870731][ T5224] hsr_slave_0: entered promiscuous mode [ 65.877613][ T5224] hsr_slave_1: entered promiscuous mode [ 65.884155][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.891728][ T5224] Cannot create hsr debugfs directory [ 66.255326][ T5242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.269228][ T5242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.289543][ T5242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.307080][ T5242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.348227][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.358235][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.375292][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.395771][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.465419][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.500730][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.511132][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.521513][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.599458][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.613873][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.625797][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.637231][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.650224][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.718808][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.785961][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.809291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.816690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.827000][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.838841][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.857316][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.878331][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.900077][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.909276][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.916420][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.953540][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.003470][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.010614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.023948][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.031101][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.067818][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.086093][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.093292][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.110459][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.127234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.134431][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.234631][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.279689][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.286945][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.297564][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.304869][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.329199][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.399261][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.424721][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.494807][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.501995][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.555519][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562736][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.575452][ T5244] Bluetooth: hci2: command tx timeout [ 67.575462][ T4621] Bluetooth: hci3: command tx timeout [ 67.654796][ T5244] Bluetooth: hci4: command tx timeout [ 67.657677][ T4621] Bluetooth: hci1: command tx timeout [ 67.660258][ T5244] Bluetooth: hci0: command tx timeout [ 67.691011][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.840030][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.885209][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.926373][ T5242] veth0_vlan: entered promiscuous mode [ 67.948976][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.970098][ T5242] veth1_vlan: entered promiscuous mode [ 68.070215][ T5224] veth0_vlan: entered promiscuous mode [ 68.116540][ T5224] veth1_vlan: entered promiscuous mode [ 68.136411][ T5242] veth0_macvtap: entered promiscuous mode [ 68.164887][ T5242] veth1_macvtap: entered promiscuous mode [ 68.177257][ T5229] veth0_vlan: entered promiscuous mode [ 68.189834][ T5229] veth1_vlan: entered promiscuous mode [ 68.224809][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.279731][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.302117][ T5224] veth0_macvtap: entered promiscuous mode [ 68.328919][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.345485][ T5224] veth1_macvtap: entered promiscuous mode [ 68.357273][ T5229] veth0_macvtap: entered promiscuous mode [ 68.366702][ T5225] veth0_vlan: entered promiscuous mode [ 68.380103][ T5225] veth1_vlan: entered promiscuous mode [ 68.400666][ T5229] veth1_macvtap: entered promiscuous mode [ 68.409946][ T5242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.419946][ T5242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.429663][ T5242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438514][ T5242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.475961][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.487502][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.499753][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.511540][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.523797][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.537152][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.564004][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.574635][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.585415][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.596393][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.608673][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.620541][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.635912][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.646175][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.657449][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.668492][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.706138][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.716232][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.725034][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733789][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.745968][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.756885][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.765847][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.775831][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.792210][ T5225] veth0_macvtap: entered promiscuous mode [ 68.811297][ T5225] veth1_macvtap: entered promiscuous mode [ 68.883772][ T5231] veth0_vlan: entered promiscuous mode [ 68.897589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.913177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.931046][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.941861][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.952910][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.963726][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.974518][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.985107][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.997002][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.007498][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.019675][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.030068][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.042117][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.052248][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.063093][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.074283][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.090029][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.099190][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.109231][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118040][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.131527][ T5231] veth1_vlan: entered promiscuous mode [ 69.209682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.220930][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.237434][ T5231] veth0_macvtap: entered promiscuous mode [ 69.290895][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.301468][ T5231] veth1_macvtap: entered promiscuous mode [ 69.316263][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.359816][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.381296][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.396029][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.410115][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.440166][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.453593][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.464749][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.475706][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.490726][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.500868][ T5309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.503276][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.530251][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.546858][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.558684][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.584812][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.596554][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.615923][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.628074][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.644065][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.655765][ T5244] Bluetooth: hci3: command tx timeout [ 69.655793][ T4621] Bluetooth: hci2: command tx timeout [ 69.666918][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.687867][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.699138][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.711282][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.728887][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.733553][ T4621] Bluetooth: hci1: command tx timeout [ 69.738514][ T5244] Bluetooth: hci4: command tx timeout [ 69.743311][ T5241] Bluetooth: hci0: command tx timeout [ 69.754902][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.762451][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.765312][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.779898][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.789023][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.871837][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.887817][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.938287][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.972103][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.044271][ T5312] kvm: emulating exchange as write [ 70.054711][ T5314] loop0: detected capacity change from 0 to 1024 [ 70.115929][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.130085][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.206933][ T5318] loop3: detected capacity change from 0 to 1024 [ 70.300064][ T5314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.324645][ T5318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.339373][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.347700][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.493927][ T29] audit: type=1804 audit(1724293535.480:2): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1" name="/newroot/0/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 70.524368][ T29] audit: type=1800 audit(1724293535.480:3): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 70.692074][ T5318] loop3: detected capacity change from 1024 to 64 [ 71.414771][ T5328] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 71.612237][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.637260][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.726840][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.741558][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.748962][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.752997][ T4621] Bluetooth: hci2: command tx timeout [ 71.759038][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.761492][ T4621] Bluetooth: hci3: command tx timeout [ 71.777989][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.799370][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 71.832881][ T4621] Bluetooth: hci1: command tx timeout [ 71.838364][ T4621] Bluetooth: hci4: command tx timeout [ 71.843961][ T4621] Bluetooth: hci0: command tx timeout [ 72.104394][ T5337] loop4: detected capacity change from 0 to 2048 [ 72.209854][ T5337] EXT4-fs: Ignoring removed nobh option [ 72.564164][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 72.659209][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 72.672599][ T5337] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.756742][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 72.779041][ T5337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.810107][ T5229] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 73.292793][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.518546][ T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 73.535716][ T5350] loop0: detected capacity change from 0 to 32768 [ 73.542714][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.573445][ T5350] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9 (5350) [ 73.591576][ T25] usb 2-1: config 0 descriptor?? [ 73.671873][ T5350] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.706643][ T5350] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 73.719293][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.720749][ T5350] BTRFS info (device loop0): using free-space-tree [ 73.930268][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 73.945431][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 73.962258][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 74.010940][ T25] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 74.017832][ T25] [drm] Initialized udl on minor 2 [ 74.025459][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 74.037327][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 74.047599][ T5280] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 74.061583][ T25] usb 2-1: USB disconnect, device number 2 [ 74.093526][ T5280] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 74.259848][ T5369] loop4: detected capacity change from 0 to 1024 [ 74.319923][ T5369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.346312][ T5369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.369640][ T5350] BTRFS info (device loop0): checking UUID tree [ 74.379215][ T5369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.392663][ T5369] System zones: 0-1, 3-36 [ 74.406152][ T5369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.757763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.988829][ T5344] Zero length message leads to an empty skb [ 75.064971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.167315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.515556][ T5382] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 75.522337][ T5382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.536341][ T5382] vhci_hcd vhci_hcd.0: Device attached [ 75.591866][ T5322] kmmpd-loop3: attempt to access beyond end of device [ 75.591866][ T5322] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 75.622755][ T5322] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 75.674281][ T5322] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 75.707951][ T5386] vhci_hcd: connection closed [ 75.710988][ T61] vhci_hcd: stop threads [ 75.741871][ T61] vhci_hcd: release socket [ 75.804026][ T61] vhci_hcd: disconnect device [ 75.862651][ T9] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 75.870306][ T9] usb 17-1: enqueue for inactive port 0 [ 75.983198][ T5224] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.172714][ T9] vhci_hcd: vhci_device speed not set [ 76.198402][ T5229] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 76.218275][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.231564][ T5322] kmmpd-loop3: attempt to access beyond end of device [ 76.231564][ T5322] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 76.255208][ T5322] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 76.452927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.500325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.583873][ T941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.693053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 76.704431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.803046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.815022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.908235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.951716][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 77.033263][ T941] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 77.086699][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.131912][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.161146][ T941] usb 3-1: Product: syz [ 77.199570][ T941] usb 3-1: Manufacturer: syz [ 77.243342][ T941] usb 3-1: SerialNumber: syz [ 77.344726][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.426236][ T941] usb 3-1: config 0 descriptor?? [ 77.798305][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 77.807994][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 77.817136][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.328825][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.693029][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.701870][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.710663][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.753442][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.769720][ T4621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.780456][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.796735][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.810230][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.818567][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.859565][ T5391] bond0: entered promiscuous mode [ 78.887080][ T5391] bond_slave_0: entered promiscuous mode [ 78.907115][ T5416] x_tables: unsorted underflow at hook 1 [ 78.916868][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.923426][ T5391] bond_slave_1: entered promiscuous mode [ 78.958452][ T5391] dummy0: entered promiscuous mode [ 78.998535][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 79.007706][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 79.016905][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 79.040983][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.061279][ T51] usb 3-1: USB disconnect, device number 2 [ 79.191030][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.762161][ T5410] chnl_net:caif_netlink_parms(): no params data found [ 79.821521][ T12] bridge_slave_1: left allmulticast mode [ 79.852325][ T12] bridge_slave_1: left promiscuous mode [ 79.861345][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.934709][ T12] bridge_slave_0: left allmulticast mode [ 79.963253][ T12] bridge_slave_0: left promiscuous mode [ 79.989613][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.647309][ T5426] loop1: detected capacity change from 0 to 32768 [ 80.854641][ T5241] Bluetooth: hci2: command tx timeout [ 81.705568][ T5461] loop0: detected capacity change from 0 to 64 [ 82.426713][ T8] cfg80211: failed to load regulatory.db [ 82.463879][ T5461] hfs: get root inode failed [ 82.842856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.923740][ T5472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.936514][ T5241] Bluetooth: hci2: command tx timeout [ 82.948666][ T5471] loop4: detected capacity change from 0 to 2048 [ 82.983874][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.008865][ T12] bond0 (unregistering): Released all slaves [ 83.108397][ T5471] loop4: p2 < > p4 [ 83.381410][ T5471] loop4: p4 size 8192 extends beyond EOD, truncated [ 84.376248][ T5238] udevd[5238]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 84.390569][ T5245] udevd[5245]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 84.482854][ T5480] trusted_key: syz.2.38 sent an empty control message without MSG_MORE. [ 85.012464][ T5241] Bluetooth: hci2: command tx timeout [ 85.783938][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.791100][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.798513][ T5410] bridge_slave_0: entered allmulticast mode [ 85.805714][ T5410] bridge_slave_0: entered promiscuous mode [ 85.814638][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.822244][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.829662][ T5410] bridge_slave_1: entered allmulticast mode [ 85.836996][ T5410] bridge_slave_1: entered promiscuous mode [ 86.086056][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.116617][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.247537][ T5410] team0: Port device team_slave_0 added [ 86.347723][ T12] hsr_slave_0: left promiscuous mode [ 86.367180][ T12] hsr_slave_1: left promiscuous mode [ 86.392826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.415563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.434022][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.441712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.487961][ T12] veth1_macvtap: left promiscuous mode [ 86.497690][ T12] veth0_macvtap: left promiscuous mode [ 86.507791][ T12] veth1_vlan: left promiscuous mode [ 86.515978][ T12] veth0_vlan: left promiscuous mode [ 88.731407][ T5241] Bluetooth: hci2: command tx timeout [ 88.738793][ T5241] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 88.749577][ T5241] Bluetooth: hci1: Injecting HCI hardware error event [ 88.768253][ T5241] Bluetooth: hci1: hardware error 0x00 [ 89.597343][ T5533] loop0: detected capacity change from 0 to 64 [ 89.629028][ T5533] hfs: invalid btree extent records (0 size) [ 89.639358][ T5533] hfs: unable to open catalog tree [ 89.661165][ T5533] hfs: can't find a HFS filesystem on dev loop0 [ 89.696397][ T5533] loop0: detected capacity change from 0 to 512 [ 89.776752][ T5533] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 89.843228][ T5533] EXT4-fs (loop0): 1 truncate cleaned up [ 89.849932][ T5533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.177954][ T5535] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 91.553342][ T5241] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 91.828631][ T12] team0 (unregistering): Port device team_slave_1 removed [ 91.991369][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.039421][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.773832][ T5280] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.993187][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 93.031880][ T5280] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 93.050809][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.072773][ T5280] usb 1-1: Product: syz [ 93.077031][ T5280] usb 1-1: Manufacturer: syz [ 93.084556][ T5280] usb 1-1: SerialNumber: syz [ 93.109486][ T5280] usb 1-1: config 0 descriptor?? [ 95.295463][ T5559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.54'. [ 95.360302][ T5280] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 96.406018][ T5280] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 96.504135][ T5280] dib0700: firmware download failed at 7 with -22 [ 96.518103][ T5280] usb 1-1: USB disconnect, device number 2 [ 96.810177][ T4621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.874187][ T4621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.883238][ T4621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.891271][ T4621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.900357][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.908601][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.963738][ T5410] team0: Port device team_slave_1 added [ 96.975088][ T5515] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 97.023390][ T5570] loop1: detected capacity change from 0 to 2048 [ 97.035601][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 97.112058][ T5570] loop1: p3 < > p4 < > [ 97.117754][ T5570] loop1: partition table partially beyond EOD, truncated [ 97.131927][ T5570] loop1: p3 start 4284289 is beyond EOD, truncated [ 97.205347][ T4682] loop1: p3 < > p4 < > [ 97.218014][ T4682] loop1: partition table partially beyond EOD, truncated [ 97.252559][ T4682] loop1: p3 start 4284289 is beyond EOD, truncated [ 97.286577][ [ 97.286577][ T5562] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __schedule+0x2543/0x4b30 [ 97.286942][ T5562] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: insn_get_addr_ref+0xe0d/0xe10 [ 97.287269][ T5562] Kernel Offset: disabled