last executing test programs: 14.122161234s ago: executing program 1 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12.829072442s ago: executing program 1 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 12.613747655s ago: executing program 1 (id=201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0x2, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x1, 'lblcr\x00', 0x18, 0xfffffff8}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000280), 0x101, 0x240) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 12.613037465s ago: executing program 2 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f00000006c0)={[&(0x7f0000000340)='sched_switch\x00', &(0x7f00000004c0)='[\x00', &(0x7f0000000500)='kmem_cache_free\x00', &(0x7f0000000600)='&([{\x00', &(0x7f0000000640)='\xd0#!\x00', &(0x7f0000000680)='\x00']}, 0x0, 0x100) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2e, 0x0, 0x6}]}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r9, 0x4b2f, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 11.309547723s ago: executing program 2 (id=205): r0 = socket(0x10, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 9.430874789s ago: executing program 4 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@chain) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@grpquota}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '[@'}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x569, &(0x7f0000000800)="$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") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) unshare(0x400) write(0xffffffffffffffff, &(0x7f0000000040)="260000002200470105000710", 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.270169641s ago: executing program 1 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x101, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000200)={[{@minixdf}, {@jqfmt_vfsv0}, {@nouser_xattr}, {@noblock_validity}, {@oldalloc}]}, 0x1, 0x454, &(0x7f0000000400)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x810411, 0x0, 0x1, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000900)=""/4105, 0x1009) 8.256578255s ago: executing program 2 (id=213): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x10) 8.040010108s ago: executing program 0 (id=215): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.757984522s ago: executing program 4 (id=217): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) 7.078807712s ago: executing program 0 (id=218): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 7.078378782s ago: executing program 2 (id=219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 4.833941103s ago: executing program 0 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.535898317s ago: executing program 4 (id=222): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a00)=""/113, 0x71}], 0x2) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.489526547s ago: executing program 0 (id=223): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.383200839s ago: executing program 2 (id=224): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) 4.32406945s ago: executing program 4 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 4.32353826s ago: executing program 1 (id=226): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) munlockall() 3.651056659s ago: executing program 0 (id=227): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0xf00, 0x10000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x594, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002c40)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x0, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x16}, {0xbba, 0x9, 0x1, 0x7, 0xfffffffffffffe00, 0xfffffffeffffffff, 0x0, 0x9}, {0x10000, 0x9, 0x9, 0x2}, 0x3, 0x6e6bb9, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010104, 0x0, 0x2, 0x3, 0xa4, 0x3, 0x9, 0x4}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000003d40)={0x0, 0x5}) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) 3.528843121s ago: executing program 2 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@chain) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@grpquota}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '[@'}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x569, &(0x7f0000000800)="$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") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) unshare(0x400) write(0xffffffffffffffff, &(0x7f0000000040)="260000002200470105000710", 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.217528875s ago: executing program 3 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3.092095727s ago: executing program 4 (id=230): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x284, 0x7f, 0xe3) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) 2.763250531s ago: executing program 4 (id=231): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x10) 2.641315403s ago: executing program 1 (id=232): openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0x5, 0xffffffff, 0x30000, 0x80000001, 0x8, 0x4, 0x5e5e}, &(0x7f0000000480), &(0x7f0000000500)={0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 225.829767ms ago: executing program 0 (id=233): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) 225.408587ms ago: executing program 3 (id=234): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 186.341167ms ago: executing program 3 (id=235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 125.218538ms ago: executing program 3 (id=236): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a00)=""/113, 0x71}], 0x2) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 28.14656ms ago: executing program 3 (id=237): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) 0s ago: executing program 3 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x73, 0x7, 0x9, 0x0, 0x800, 0x0, 0x9, 0x80, 0x1, 0xc8, 0xcd, 0x5, 0x0, 0x4, 0x9, 0x1, 0x7f, 0x48, 0x6, '\x00', 0x6, 0x804c}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 84.015438][ T4161] cgroup: Unknown subsys name 'net' [ 84.156715][ T4161] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.960474][ T4161] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 88.254556][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 88.313834][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 88.367904][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 88.504172][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 88.536418][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.546576][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.556351][ T4174] device bridge_slave_0 entered promiscuous mode [ 88.581583][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591627][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.601677][ T4176] device bridge_slave_0 entered promiscuous mode [ 88.628466][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.638671][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.651087][ T4174] device bridge_slave_1 entered promiscuous mode [ 88.675238][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.685639][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.697038][ T4176] device bridge_slave_1 entered promiscuous mode [ 88.781469][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.791354][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.801738][ T4171] device bridge_slave_0 entered promiscuous mode [ 88.835331][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.850414][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.869518][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.877349][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.889512][ T4171] device bridge_slave_1 entered promiscuous mode [ 88.909558][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.928443][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.939541][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 89.043547][ T4176] team0: Port device team_slave_0 added [ 89.054725][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.066846][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.077356][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.090967][ T4173] device bridge_slave_0 entered promiscuous mode [ 89.104594][ T4174] team0: Port device team_slave_0 added [ 89.131074][ T4176] team0: Port device team_slave_1 added [ 89.149938][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.172407][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.181710][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.210906][ T4173] device bridge_slave_1 entered promiscuous mode [ 89.231505][ T4174] team0: Port device team_slave_1 added [ 89.338301][ T4171] team0: Port device team_slave_0 added [ 89.358178][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.378812][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.395538][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.408345][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.444163][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.473098][ T4171] team0: Port device team_slave_1 added [ 89.480372][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.492111][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.528600][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.553207][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.561357][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.611543][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.642473][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.653388][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.664772][ T4187] device bridge_slave_0 entered promiscuous mode [ 89.685044][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.693809][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.734645][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.760387][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 89.769618][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 89.771307][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 89.792545][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.801324][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.817176][ T4187] device bridge_slave_1 entered promiscuous mode [ 89.850394][ T1331] Bluetooth: hci1: command 0x0409 tx timeout [ 89.858562][ T4173] team0: Port device team_slave_0 added [ 89.872760][ T4173] team0: Port device team_slave_1 added [ 89.898316][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.908036][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.949856][ T1331] Bluetooth: hci4: command 0x0409 tx timeout [ 89.959417][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.034180][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.042367][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.092916][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.131401][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.140733][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.191338][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.206705][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.231269][ T4176] device hsr_slave_0 entered promiscuous mode [ 90.239627][ T4176] device hsr_slave_1 entered promiscuous mode [ 90.258086][ T4174] device hsr_slave_0 entered promiscuous mode [ 90.266882][ T4174] device hsr_slave_1 entered promiscuous mode [ 90.289250][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.299928][ T4174] Cannot create hsr debugfs directory [ 90.326563][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.336055][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.413677][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.437880][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.548290][ T4171] device hsr_slave_0 entered promiscuous mode [ 90.557577][ T4171] device hsr_slave_1 entered promiscuous mode [ 90.568492][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.577810][ T4171] Cannot create hsr debugfs directory [ 90.614438][ T4187] team0: Port device team_slave_0 added [ 90.627416][ T4187] team0: Port device team_slave_1 added [ 90.655749][ T4173] device hsr_slave_0 entered promiscuous mode [ 90.664359][ T4173] device hsr_slave_1 entered promiscuous mode [ 90.680456][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.692879][ T4173] Cannot create hsr debugfs directory [ 90.748821][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.756829][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.805710][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.905102][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.914902][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.957466][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.101296][ T4187] device hsr_slave_0 entered promiscuous mode [ 91.110596][ T4187] device hsr_slave_1 entered promiscuous mode [ 91.120829][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.133409][ T4187] Cannot create hsr debugfs directory [ 91.379395][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.427751][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.439200][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.454752][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.498126][ T4176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.525216][ T4176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.555931][ T4176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.571444][ T4176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.648587][ T4173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.695851][ T4173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.731583][ T4173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.753374][ T4173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.800689][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.814753][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.839619][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 91.848754][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.857452][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 91.869034][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 91.882918][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.902423][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.919737][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 91.934052][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.955500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.972015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.982422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.996170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.999645][ T4182] Bluetooth: hci4: command 0x041b tx timeout [ 92.011417][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.029786][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.046987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.096626][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.115662][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.135676][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.143593][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.183298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.236562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.254876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.273434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.292418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.311754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.331004][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.342035][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.358671][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.371704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.402308][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.420765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.434952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.454132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.467778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.491937][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.519595][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.542327][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.564124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.581844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.598686][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.663247][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.690216][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.714734][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.730286][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.738319][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.754678][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.767184][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.781251][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.794748][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.808829][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.825135][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.835682][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.870959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.894115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.912094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.933740][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.959623][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.969275][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.981274][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.994428][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.032997][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.045793][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.061865][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.074594][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.083836][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.096063][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.109771][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.126171][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.150866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.161111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.177479][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.195388][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.227499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.237432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.251568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.261080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.274757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.303774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.315928][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.330332][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.341590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.368751][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.403562][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.430685][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.461849][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.510751][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.528059][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.548003][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.559775][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.573573][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.581925][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.600268][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.612896][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.623939][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.639575][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.653820][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.662408][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.683120][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.698552][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.715336][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.725339][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.748138][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.767082][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.780337][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.800246][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.811249][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.830391][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.846013][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.860962][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.872835][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.884434][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.896430][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.916115][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.930097][ T1331] Bluetooth: hci3: command 0x040f tx timeout [ 93.938197][ T1331] Bluetooth: hci2: command 0x040f tx timeout [ 93.948283][ T1331] Bluetooth: hci0: command 0x040f tx timeout [ 93.967733][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.981287][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.002757][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.014267][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.023461][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 94.034793][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.046745][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.057966][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.070499][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.080061][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 94.080085][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.098519][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.121615][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.134421][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.146959][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.157813][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.170969][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.180963][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.195062][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.203517][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.231311][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.251786][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.268905][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.281209][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.308725][ T4174] device veth0_vlan entered promiscuous mode [ 94.327760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.342164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.357193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.370944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.401145][ T4174] device veth1_vlan entered promiscuous mode [ 94.435547][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.479953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.502123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.513877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.526751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.553752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.564947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.576010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.589209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.599659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.647677][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.671638][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.698573][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.728268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.738694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.749184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.760396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.771197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.781828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.818130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.835475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.853258][ T4174] device veth0_macvtap entered promiscuous mode [ 94.876474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.898628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.911574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.923951][ T4174] device veth1_macvtap entered promiscuous mode [ 94.967482][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.985347][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.014079][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.042640][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.059029][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.087830][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.098175][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.113639][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.151420][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.161204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.172902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.186219][ T4176] device veth0_vlan entered promiscuous mode [ 95.207022][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.226007][ T4187] device veth0_vlan entered promiscuous mode [ 95.272555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.286260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.296799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.312353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.323453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.335068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.353525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.365254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.380026][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.393370][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.403789][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.417671][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.444766][ T4176] device veth1_vlan entered promiscuous mode [ 95.466125][ T4187] device veth1_vlan entered promiscuous mode [ 95.498393][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.520999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.537086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.548230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.620569][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.636291][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.658357][ T4187] device veth0_macvtap entered promiscuous mode [ 95.670841][ T4176] device veth0_macvtap entered promiscuous mode [ 95.701267][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.712083][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.723616][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.739018][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.782954][ T4176] device veth1_macvtap entered promiscuous mode [ 95.797311][ T4187] device veth1_macvtap entered promiscuous mode [ 95.813284][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.822157][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.834241][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.846032][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.858989][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.872258][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.936775][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.951249][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.973850][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.984730][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.000137][ T4171] device veth0_vlan entered promiscuous mode [ 96.010874][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 96.019000][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 96.029030][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.035476][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.042249][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.054332][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.069714][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 96.082449][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.091902][ T4239] Bluetooth: hci1: command 0x0419 tx timeout [ 96.096008][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.112890][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.126053][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.148857][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.160054][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 96.171267][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.195297][ T4171] device veth1_vlan entered promiscuous mode [ 96.205392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.217210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.230663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.241884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.255386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.265842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.290134][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.304868][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.321232][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.360038][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.373840][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.388264][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.402151][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.418259][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.432518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.442916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.455393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.467455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.478672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.506208][ T4176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517931][ T4176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.532214][ T4176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.544131][ T4176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.566671][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.579032][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.594294][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.606415][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.625419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.637209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.647298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.658896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.685734][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.697112][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.705669][ T4173] device veth0_vlan entered promiscuous mode [ 96.724493][ T4171] device veth0_macvtap entered promiscuous mode [ 96.747352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.763118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.777255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.788044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.822758][ T4173] device veth1_vlan entered promiscuous mode [ 96.857647][ T4171] device veth1_macvtap entered promiscuous mode [ 96.928383][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.951705][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.969151][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.982322][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.996700][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.010110][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.034135][ T4262] loop0: detected capacity change from 0 to 256 [ 97.035502][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.070955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.083674][ T4262] exfat: Deprecated parameter 'namecase' [ 97.123074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.136198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.144871][ T4262] exfat: Deprecated parameter 'utf8' [ 97.154642][ T4262] exfat: Deprecated parameter 'namecase' [ 97.161297][ T4262] exfat: Deprecated parameter 'utf8' [ 97.164535][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.189123][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.207506][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.216998][ T4262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 97.255398][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.279181][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.297815][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.316254][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.346458][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.363154][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.380192][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.401067][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.416393][ T4173] device veth0_macvtap entered promiscuous mode [ 97.455683][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.462504][ T4267] loop0: detected capacity change from 0 to 128 [ 97.505635][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520637][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.545149][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.695242][ T4173] device veth1_macvtap entered promiscuous mode [ 97.767296][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.799769][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.820470][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.846605][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.884954][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.562704][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.589979][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.636541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.828390][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.875894][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.886685][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.886710][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.886721][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.886735][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.886746][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.886759][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.886773][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.886786][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.888518][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.038217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.058625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.072938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.155808][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.203211][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.238456][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.298278][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.328795][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.345121][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.362599][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.386057][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.418415][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.462942][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.485459][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.504705][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.526255][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.597637][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.624703][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.697713][ T4284] syz.3.10[4284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.698457][ T4284] syz.3.10[4284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.772358][ T4284] loop3: detected capacity change from 0 to 512 [ 99.854379][ T4284] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.862596][ T4284] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 100.001924][ T4284] EXT4-fs (loop3): inline encryption not supported [ 100.257693][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.385303][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.609308][ C0] sched: RT throttling activated [ 101.590118][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.113944][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.212184][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.331586][ T4284] fscrypt: Error allocating hmac(sha512): -2 [ 102.346859][ T4284] EXT4-fs (loop3): Error processing option "test_dummy_encryption" [-2] [ 102.591808][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.808895][ T1342] cfg80211: failed to load regulatory.db [ 102.861439][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.872378][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.936511][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.381990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 103.528267][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.538767][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.602798][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.608432][ T4305] loop1: detected capacity change from 0 to 2048 [ 103.630826][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.639837][ T4303] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.12' sets config #0 [ 103.670204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.683296][ T4303] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.12' sets config #1 [ 103.741442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.808969][ T4305] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.13: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 103.882782][ T4305] EXT4-fs (loop1): get root inode failed [ 103.931452][ T4305] EXT4-fs (loop1): mount failed [ 103.947520][ T4309] loop0: detected capacity change from 0 to 512 [ 104.052960][ T4309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.072518][ T4309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.321958][ T4309] EXT4-fs (loop0): 1 truncate cleaned up [ 104.329193][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 109.120552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 109.130370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 109.140834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 109.151474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 109.161445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 109.172968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 109.182941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 109.193800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 109.205718][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 109.543925][ T4325] loop2: detected capacity change from 0 to 4096 [ 109.615666][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 110.060413][ T4339] netlink: 'syz.0.17': attribute type 27 has an invalid length. [ 110.222864][ T4340] loop1: detected capacity change from 0 to 1024 [ 110.364094][ T4340] EXT4-fs (loop1): Ignoring removed orlov option [ 110.433704][ T4340] EXT4-fs (loop1): blocks per group (0) and clusters per group (32) inconsistent [ 112.359658][ T4351] syz.4.23[4351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.359765][ T4351] syz.4.23[4351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.629583][ T4356] mmap: syz.2.20 (4356) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 114.741193][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.752480][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.285748][ T4380] loop4: detected capacity change from 0 to 1024 [ 116.345289][ T4382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 116.413922][ T4382] loop3: detected capacity change from 0 to 2048 [ 116.430271][ T4380] ======================================================= [ 116.430271][ T4380] WARNING: The mand mount option has been deprecated and [ 116.430271][ T4380] and is ignored by this kernel. Remove the mand [ 116.430271][ T4380] option from the mount to silence this warning. [ 116.430271][ T4380] ======================================================= [ 116.545831][ T4382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.553450][ T4380] EXT4-fs (loop4): Ignoring removed nobh option [ 116.607330][ T4380] EXT4-fs (loop4): Ignoring removed bh option [ 116.634985][ T4380] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.757017][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.945260][ T4397] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 118.742510][ T4397] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.28: Allocating blocks 497-513 which overlap fs metadata [ 119.040628][ T4397] EXT4-fs (loop4): pa ffff88805e494380: logic 128, phys. 385, len 8 [ 119.050297][ T4397] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 119.186100][ T4400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 120.018791][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.128813][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.037490][ T4415] loop4: detected capacity change from 0 to 512 [ 122.086654][ T4415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.147458][ T4415] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.174128][ T4415] EXT4-fs (loop4): 1 truncate cleaned up [ 122.182149][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 122.491382][ T4421] ptrace attach of "./syz-executor exec"[4173] was attempted by ""[4421] [ 122.604541][ T4339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.630012][ T4339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.641255][ T4339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.656796][ T4339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.848997][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.881037][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.897718][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.913204][ T4341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.978784][ T4341] syz.0.17 (4341) used greatest stack depth: 20448 bytes left [ 123.383316][ T4422] device syzkaller0 entered promiscuous mode [ 123.640025][ T4448] loop4: detected capacity change from 0 to 256 [ 123.799377][ T4448] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 124.780297][ T4450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'. [ 124.840542][ T4450] loop2: detected capacity change from 0 to 2048 [ 124.883186][ T4437] tipc: Started in network mode [ 124.904656][ T4437] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 124.937323][ T4450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.027586][ T4437] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 125.095038][ T4437] tipc: Enabled bearer , priority 10 [ 125.471294][ T4455] loop1: detected capacity change from 0 to 1024 [ 125.882110][ T4455] EXT4-fs (loop1): Ignoring removed nobh option [ 126.582432][ T4455] EXT4-fs (loop1): Ignoring removed bh option [ 126.595149][ T4271] tipc: Node number set to 1 [ 126.606627][ T4455] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.873070][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.955903][ T4464] loop3: detected capacity change from 0 to 512 [ 127.650551][ T4474] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.43: Allocating blocks 497-513 which overlap fs metadata [ 127.718673][ T4474] EXT4-fs (loop1): pa ffff88805ff1b540: logic 128, phys. 385, len 8 [ 127.728495][ T4474] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 128.272179][ T4464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.299558][ T4464] EXT4-fs (loop3): 1 truncate cleaned up [ 128.306335][ T4464] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 130.085684][ T4483] ptrace attach of "./syz-executor exec"[4187] was attempted by ""[4483] [ 130.470418][ T4491] overlayfs: missing 'lowerdir' [ 130.478913][ T26] audit: type=1107 audit(1747095405.515:2): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 131.037900][ T4497] loop1: detected capacity change from 0 to 128 [ 131.271997][ T4498] ipt_CLUSTERIP: Please specify destination IP [ 131.381216][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.708486][ T4497] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.589394][ T1342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.671719][ T4517] loop0: detected capacity change from 0 to 128 [ 133.814193][ T4517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.829650][ T4517] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.851237][ T4522] loop1: detected capacity change from 0 to 2048 [ 133.899469][ T1342] usb 5-1: Using ep0 maxpacket: 32 [ 133.985231][ T4522] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.56: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 134.049745][ T1342] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.143171][ T4522] EXT4-fs (loop1): get root inode failed [ 134.161338][ T4522] EXT4-fs (loop1): mount failed [ 134.161672][ T1342] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.216939][ T4532] loop3: detected capacity change from 0 to 512 [ 134.245075][ T1342] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 134.285068][ T1342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.545669][ T1342] usb 5-1: config 0 descriptor?? [ 135.259830][ T1342] usb 5-1: can't set config #0, error -71 [ 135.328550][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 135.349693][ T4532] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.365659][ T1342] usb 5-1: USB disconnect, device number 2 [ 135.551713][ T4544] loop4: detected capacity change from 0 to 512 [ 135.811558][ T4544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.985969][ T4546] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 136.591334][ T4544] EXT4-fs (loop4): 1 truncate cleaned up [ 136.598321][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 136.978545][ T4550] ptrace attach of "./syz-executor exec"[4173] was attempted by ""[4550] [ 138.423964][ T4560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.572878][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.580960][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.836053][ T4563] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.111287][ T4566] bridge: RTM_NEWNEIGH with invalid ether address [ 140.699583][ T4583] loop1: detected capacity change from 0 to 512 [ 141.261698][ T4583] EXT4-fs (loop1): Ignoring removed nobh option [ 141.530624][ T4583] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 141.905322][ T4583] loop1: detected capacity change from 0 to 8192 [ 141.976596][ T4583] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.017185][ T4595] loop3: detected capacity change from 0 to 512 [ 142.086533][ T4595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.292533][ T4595] EXT4-fs (loop3): 1 truncate cleaned up [ 142.377003][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 143.427546][ T4602] ptrace attach of "./syz-executor exec"[4187] was attempted by ""[4602] [ 144.668485][ T4611] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 144.807421][ T4615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'. [ 144.852407][ T4603] loop0: detected capacity change from 0 to 40427 [ 144.967369][ T4603] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 145.929362][ T4428] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.063019][ T4615] loop1: detected capacity change from 0 to 2048 [ 146.118286][ T4627] binder: 4626:4627 ioctl c0306201 200000001d40 returned -11 [ 146.229392][ T4428] usb 4-1: Using ep0 maxpacket: 16 [ 146.289649][ T4615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.383307][ T4428] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.415501][ T4428] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.639873][ T4428] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.690944][ T4428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.778240][ T4428] usb 4-1: Product: syz [ 146.792116][ T4428] usb 4-1: Manufacturer: syz [ 146.868624][ T4636] loop4: detected capacity change from 0 to 128 [ 148.589361][ T4428] usb 4-1: SerialNumber: syz [ 149.087822][ T4642] overlayfs: missing 'lowerdir' [ 149.548699][ T26] audit: type=1107 audit(1747095424.145:3): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 149.550126][ T4636] EXT4-fs: error -4 creating inode table initialization thread [ 149.572819][ T4636] EXT4-fs (loop4): mount failed [ 149.601301][ T4428] usb 4-1: can't set config #1, error -71 [ 149.610491][ T4428] usb 4-1: USB disconnect, device number 2 [ 150.240966][ T4644] loop3: detected capacity change from 0 to 1024 [ 150.256426][ T4646] loop2: detected capacity change from 0 to 2048 [ 150.349632][ T4651] loop1: detected capacity change from 0 to 128 [ 150.374424][ T4646] loop2: p1 < > p3 [ 150.572904][ T4646] loop2: p3 size 134217728 extends beyond EOD, truncated [ 150.593248][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.628752][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.791852][ T4651] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.002228][ T3546] loop2: p1 < > p3 [ 151.169219][ T3546] loop2: p3 size 134217728 extends beyond EOD, truncated [ 151.344780][ T4648] kvm: emulating exchange as write [ 151.502148][ T4644] EXT4-fs warning (device loop3): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 151.814950][ T4667] loop0: detected capacity change from 0 to 1024 [ 151.850735][ T4669] binder: 4668:4669 ioctl c0306201 200000001d40 returned -11 [ 151.912160][ T4671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 151.933308][ T4667] EXT4-fs (loop0): Ignoring removed nobh option [ 151.959702][ T4667] EXT4-fs (loop0): Ignoring removed bh option [ 151.986155][ T4667] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.110124][ T4667] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.219057][ T4671] loop2: detected capacity change from 0 to 2048 [ 152.886376][ T4685] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.98: Allocating blocks 497-513 which overlap fs metadata [ 153.432820][ T4671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.444844][ T4685] EXT4-fs (loop0): pa ffff88805ff1bd20: logic 128, phys. 385, len 8 [ 153.454959][ T4685] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 154.196191][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 154.230520][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.295882][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 154.321374][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.942201][ T4699] IPv6: sit1: Disabled Multicast RS [ 155.081438][ T4702] loop4: detected capacity change from 0 to 1024 [ 156.090989][ T4702] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.174941][ T4710] loop0: detected capacity change from 0 to 2048 [ 156.351379][ T4509] loop0: p1 < > p3 [ 156.382644][ T4509] loop0: p3 size 134217728 extends beyond EOD, truncated [ 156.390454][ T4702] EXT4-fs warning (device loop4): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 156.469035][ T4710] loop0: p1 < > p3 [ 156.502094][ T4710] loop0: p3 size 134217728 extends beyond EOD, truncated [ 156.570698][ T3546] loop0: p1 < > p3 [ 156.582669][ T4716] binder: 4715:4716 ioctl c0306201 200000001d40 returned -11 [ 156.596759][ T3546] loop0: p3 size 134217728 extends beyond EOD, truncated [ 156.761349][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.803233][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 158.674923][ T4723] loop1: detected capacity change from 0 to 1024 [ 158.690241][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 158.715505][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 158.763144][ T4723] EXT4-fs (loop1): Ignoring removed nobh option [ 158.809410][ T4723] EXT4-fs (loop1): Ignoring removed bh option [ 158.816565][ T4723] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.853021][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 158.885681][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 158.940084][ T4727] loop4: detected capacity change from 0 to 512 [ 159.083571][ T4723] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 160.281131][ T4723] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.114: Allocating blocks 497-513 which overlap fs metadata [ 160.307241][ T4727] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.113: inode #1: comm syz.4.113: iget: illegal inode # [ 160.332338][ T4739] syz.0.119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.350022][ T4723] EXT4-fs (loop1): pa ffff8880207dae00: logic 128, phys. 385, len 8 [ 160.358648][ T4723] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 160.467229][ T4741] loop0: detected capacity change from 0 to 512 [ 160.477753][ T4727] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.113: error while reading EA inode 1 err=-117 [ 160.540484][ T4741] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.547733][ T4741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.673360][ T4741] EXT4-fs (loop0): 1 truncate cleaned up [ 160.679772][ T4727] EXT4-fs (loop4): 1 orphan inode deleted [ 160.685872][ T4727] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 160.789473][ T4741] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,nombcache,,errors=continue. Quota mode: writeback. [ 160.890082][ T4741] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #12: comm syz.0.120: Siphash requires key [ 160.927278][ T4744] binder: 4743:4744 ioctl c0306201 200000001d40 returned -11 [ 161.325448][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 162.158599][ T4756] loop0: detected capacity change from 0 to 1024 [ 162.237664][ T4756] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.446719][ T4756] EXT4-fs warning (device loop0): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 163.116181][ T4759] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 163.152819][ T4759] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 164.980982][ T4779] loop4: detected capacity change from 0 to 2048 [ 165.224427][ T4779] loop4: p1 < > p3 [ 165.268338][ T4779] loop4: p3 size 134217728 extends beyond EOD, truncated [ 165.472817][ T3546] loop4: p1 < > p3 [ 165.482728][ T3546] loop4: p3 size 134217728 extends beyond EOD, truncated [ 165.738887][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 165.765894][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 165.836613][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 165.864720][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 165.950458][ T4789] binder: BINDER_SET_CONTEXT_MGR already set [ 165.956918][ T4789] binder: 4788:4789 ioctl 4018620d 200000000040 returned -16 [ 166.008607][ T4789] binder: 4788:4789 ioctl c0306201 200000001d40 returned -11 [ 166.150468][ T26] audit: type=1107 audit(1747095441.225:4): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 166.185604][ T4795] overlayfs: missing 'lowerdir' [ 167.897812][ T4803] loop3: detected capacity change from 0 to 1024 [ 168.100414][ T4807] loop1: detected capacity change from 0 to 512 [ 168.142815][ T4803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.214024][ T4807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.350033][ T4803] EXT4-fs warning (device loop3): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 168.395442][ T4807] EXT4-fs (loop1): 1 truncate cleaned up [ 168.403873][ T4807] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 168.607889][ T4814] input: syz1 as /devices/virtual/input/input10 [ 169.953309][ T4824] loop4: detected capacity change from 0 to 256 [ 170.059159][ T4824] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 170.395187][ T4830] ptrace attach of "./syz-executor exec"[4176] was attempted by ""[4830] [ 170.859126][ T4835] loop0: detected capacity change from 0 to 512 [ 172.678598][ T4838] loop2: detected capacity change from 0 to 40427 [ 173.612842][ T4838] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 173.623714][ T4838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 173.786447][ T4835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.832039][ T4838] F2FS-fs (loop2): invalid crc value [ 173.856703][ T4838] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 174.226514][ T4835] EXT4-fs: failed to create workqueue [ 174.261304][ T4835] EXT4-fs (loop0): mount failed [ 174.335016][ T4841] netlink: 'syz.4.148': attribute type 1 has an invalid length. [ 174.665250][ T4856] xt_NFQUEUE: number of total queues is 0 [ 174.758753][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 175.039683][ T4428] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.194863][ T4850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.252254][ T4850] bond1: (slave bond2): Enslaving as an active interface with an up link [ 175.299482][ T4428] usb 2-1: Using ep0 maxpacket: 8 [ 175.421616][ T4428] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 175.446178][ T4864] input: syz1 as /devices/virtual/input/input11 [ 175.453802][ T4428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.499470][ T4428] usb 2-1: config 0 descriptor?? [ 175.701925][ T4867] loop0: detected capacity change from 0 to 1024 [ 175.790453][ T4867] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 175.811323][ T26] audit: type=1107 audit(1747095450.885:5): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 175.839838][ T4868] overlayfs: missing 'lowerdir' [ 175.851700][ T4867] EXT4-fs error (device loop0): __ext4_iget:4893: inode #3: block 1803188595: comm syz.0.153: invalid block [ 175.931176][ T4867] EXT4-fs (loop0): no journal found [ 176.050891][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.070751][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.102539][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.123204][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.146419][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.162555][ T4428] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 176.183545][ T4428] wacom 0003:056A:00B4.0001: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 176.226168][ T4428] wacom 0003:056A:00B4.0001: hidraw0: USB HID vff.fb Device [HID 056a:00b4] on usb-dummy_hcd.1-1/input0 [ 176.270882][ T4428] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B4.0001/input/input12 [ 176.431110][ T4428] usb 2-1: USB disconnect, device number 2 [ 176.675031][ T4874] loop2: detected capacity change from 0 to 256 [ 176.739757][ T4872] fido_id[4872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 176.742179][ T4874] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 177.872617][ T4889] loop3: detected capacity change from 0 to 512 [ 178.279099][ T4892] loop0: detected capacity change from 0 to 512 [ 178.293398][ T4889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.350163][ T4897] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 178.414900][ T4892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.537601][ T4892] EXT4-fs (loop0): 1 truncate cleaned up [ 178.545794][ T4889] EXT4-fs (loop3): 1 truncate cleaned up [ 178.548279][ T4892] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 178.574184][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.584089][ T4889] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 178.606832][ T4897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.609019][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.697132][ T4903] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.772484][ T4897] bond1: (slave bond2): Enslaving as an active interface with an up link [ 179.665025][ T26] audit: type=1800 audit(1747095454.735:6): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.163" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 180.017083][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 180.068361][ T4910] device batadv_slave_1 entered promiscuous mode [ 180.592175][ T4904] device batadv_slave_1 left promiscuous mode [ 181.081085][ T4920] loop4: detected capacity change from 0 to 256 [ 181.118450][ T4917] ptrace attach of "./syz-executor exec"[4187] was attempted by ""[4917] [ 181.760351][ T4920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 181.826012][ T4927] loop2: detected capacity change from 0 to 512 [ 181.934520][ T4933] fuse: Bad value for 'fd' [ 182.003344][ T4927] EXT4-fs (loop2): inline encryption not supported [ 185.488545][ T4950] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 189.275347][ T4988] loop1: detected capacity change from 0 to 512 [ 189.339528][ T4988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.490914][ T4988] EXT4-fs (loop1): 1 truncate cleaned up [ 189.497112][ T4988] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 189.724880][ T26] audit: type=1800 audit(1747095464.795:7): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 189.791748][ T4995] loop2: detected capacity change from 0 to 2048 [ 190.174862][ T4995] loop2: p1 < > p3 [ 191.011139][ T5008] loop3: detected capacity change from 0 to 1024 [ 191.910952][ T4995] loop2: p3 size 134217728 extends beyond EOD, truncated [ 192.371577][ T5008] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.504393][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 192.860398][ T5008] EXT4-fs warning (device loop3): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 192.920986][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 193.060851][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 193.819426][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 193.898894][ T26] audit: type=1326 audit(1747095468.965:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26bb656969 code=0x0 [ 194.069497][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 194.199516][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.199547][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.319847][ T5046] loop1: detected capacity change from 0 to 512 [ 194.389552][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.389587][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.389609][ T7] usb 1-1: Product: syz [ 194.389625][ T7] usb 1-1: Manufacturer: syz [ 194.389641][ T7] usb 1-1: SerialNumber: syz [ 194.433088][ T5046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.599639][ T5046] EXT4-fs (loop1): 1 truncate cleaned up [ 194.599671][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 194.614824][ T26] audit: type=1800 audit(1747095469.695:9): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.201" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 195.320184][ T5062] loop2: detected capacity change from 0 to 512 [ 197.018283][ T5071] binder: 5068:5071 ioctl c0306201 0 returned -14 [ 197.025978][ T7] usb 1-1: 0:2 : does not exist [ 197.098405][ T7] usb 1-1: USB disconnect, device number 2 [ 197.131834][ T5062] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.205: inode #1: comm syz.2.205: iget: illegal inode # [ 197.160995][ T5070] loop4: detected capacity change from 0 to 2048 [ 197.214317][ T5070] loop4: p1 < > p3 [ 197.222223][ T5070] loop4: p3 size 134217728 extends beyond EOD, truncated [ 197.244952][ T5062] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.205: error while reading EA inode 1 err=-117 [ 197.293306][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 197.328279][ T3546] loop4: p1 < > p3 [ 197.330316][ T5062] EXT4-fs (loop2): 1 orphan inode deleted [ 197.344163][ T3546] loop4: p3 size 134217728 extends beyond EOD, truncated [ 197.367271][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 197.416984][ T5080] bond2 (unregistering): Released all slaves [ 197.417833][ T5086] syz.1.210 uses obsolete (PF_INET,SOCK_PACKET) [ 197.990035][ T5085] loop4: detected capacity change from 0 to 1024 [ 198.028830][ T5088] loop1: detected capacity change from 0 to 512 [ 198.298702][ T5088] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 198.298702][ T5088] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 198.298702][ T5088] [ 198.438320][ T5088] EXT4-fs (loop1): Ignoring removed oldalloc option [ 198.640525][ T5088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.370070][ T4509] udevd[4509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.165875][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.959359][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.074186][ T5116] binder: BINDER_SET_CONTEXT_MGR already set [ 201.607745][ T5088] EXT4-fs: error -4 creating inode table initialization thread [ 201.889494][ T5116] binder: 5112:5116 ioctl 4018620d 200000000040 returned -16 [ 201.903492][ T5088] EXT4-fs (loop1): mount failed [ 201.919561][ T5116] binder: 5112:5116 ioctl c0306201 0 returned -14 [ 201.992626][ T5128] loop3: detected capacity change from 0 to 512 [ 202.072957][ T5128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.261818][ T5128] EXT4-fs (loop3): 1 truncate cleaned up [ 202.269605][ T5128] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 202.302128][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 202.804840][ T26] audit: type=1800 audit(1747095477.875:10): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.220" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 202.955318][ T5147] loop0: detected capacity change from 0 to 1024 [ 203.023585][ T5149] loop2: detected capacity change from 0 to 2048 [ 203.050084][ T5137] bond3 (unregistering): Released all slaves [ 203.087762][ T5149] loop2: p1 < > p3 [ 203.104803][ T5149] loop2: p3 size 134217728 extends beyond EOD, truncated [ 203.249161][ T5147] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.611858][ T3546] loop2: p1 < > p3 [ 203.617202][ T3546] loop2: p3 size 134217728 extends beyond EOD, truncated [ 203.803976][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 203.818762][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 204.137711][ T5158] loop2: detected capacity change from 0 to 1024 [ 204.436601][ T5169] loop1: detected capacity change from 0 to 512 [ 206.096177][ T26] audit: type=1326 audit(1747095481.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5161 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d064e969 code=0x7fc00000 [ 206.263091][ T5173] binder: 5172:5173 ioctl c0306201 0 returned -14 [ 206.587677][ T5181] [ 206.590231][ T5181] ============================= [ 206.595203][ T5181] WARNING: suspicious RCU usage [ 206.629357][ T5181] 5.15.182-syzkaller #0 Not tainted [ 206.635409][ T5181] ----------------------------- [ 206.655924][ T5181] include/linux/kvm_host.h:889 suspicious rcu_dereference_check() usage! [ 206.673065][ T5181] [ 206.673065][ T5181] other info that might help us debug this: [ 206.673065][ T5181] [ 206.690672][ T5181] [ 206.690672][ T5181] rcu_scheduler_active = 2, debug_locks = 1 [ 206.712803][ T5181] 1 lock held by syz.3.238/5181: [ 206.718782][ T5181] #0: ffff8880596100c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1c8/0xb80 [ 206.738429][ T5181] [ 206.738429][ T5181] stack backtrace: [ 206.747099][ T5181] CPU: 0 PID: 5181 Comm: syz.3.238 Not tainted 5.15.182-syzkaller #0 [ 206.756007][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.767358][ T5181] Call Trace: [ 206.771204][ T5181] [ 206.775203][ T5181] dump_stack_lvl+0x168/0x230 [ 206.780789][ T5181] ? load_image+0x3b0/0x3b0 [ 206.785980][ T5181] ? show_regs_print_info+0x20/0x20 [ 206.791410][ T5181] ? lockdep_rcu_suspicious+0x110/0x180 [ 206.798195][ T5181] kvm_vcpu_memslots+0x1b6/0x200 [ 206.804075][ T5181] kvm_vcpu_gfn_to_memslot+0x2b/0x3c0 [ 206.809824][ T5181] ? sync_vmcs02_to_vmcs12+0xd33/0x19a0 [ 206.816023][ T5181] kvm_vcpu_unmap+0x5b/0x80 [ 206.820868][ T5181] nested_vmx_vmexit+0x13f5/0x28d0 [ 206.826465][ T5181] ? nested_mark_vmcs12_pages_dirty+0x290/0x290 [ 206.832901][ T5181] ? __might_fault+0xb7/0x110 [ 206.838488][ T5181] ? __lock_acquire+0x7c60/0x7c60 [ 206.844078][ T5181] vmx_leave_nested+0x7e/0xc0 [ 206.850719][ T5181] kvm_vcpu_ioctl_x86_set_vcpu_events+0x95b/0x1190 [ 206.857442][ T5181] kvm_arch_vcpu_ioctl+0x1092/0x19d0 [ 206.863157][ T5181] ? kvm_arch_vcpu_put+0x840/0x840 [ 206.869285][ T5181] ? is_bpf_text_address+0x254/0x270 [ 206.875990][ T5181] ? __kernel_text_address+0x9a/0x100 [ 206.881912][ T5181] ? mark_lock+0x94/0x320 [ 206.886594][ T5181] ? __lock_acquire+0x13ad/0x7c60 [ 206.891958][ T5181] ? kfree+0xef/0x2a0 [ 206.896515][ T5181] ? __se_sys_ioctl+0x48/0x170 [ 206.902293][ T5181] ? kfree+0xef/0x2a0 [ 206.907373][ T5181] ? kasan_set_track+0x62/0x70 [ 206.913111][ T5181] ? kasan_set_track+0x4b/0x70 [ 206.918180][ T5181] ? kasan_set_free_info+0x1f/0x40 [ 206.923691][ T5181] ? verify_lock_unused+0x140/0x140 [ 206.929679][ T5181] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 206.936473][ T5181] ? __mutex_trylock_common+0x14f/0x250 [ 206.943266][ T5181] ? rcu_lock_release+0x20/0x20 [ 206.949484][ T5181] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 206.957252][ T5181] ? rcu_lock_release+0x5/0x20 [ 206.962643][ T5181] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 206.967966][ T5181] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 206.972864][ T5181] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 206.978392][ T5181] ? __mutex_lock_common+0x431/0x2390 [ 206.984698][ T5181] ? kfree+0xef/0x2a0 [ 206.989138][ T5181] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 206.995263][ T5181] ? verify_lock_unused+0x140/0x140 [ 207.001112][ T5181] ? mutex_lock_io_nested+0x60/0x60 [ 207.007246][ T5181] kvm_vcpu_ioctl+0x6b1/0xb80 [ 207.012064][ T5181] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 207.018258][ T5181] ? bpf_lsm_file_ioctl+0x5/0x10 [ 207.024054][ T5181] ? security_file_ioctl+0x7c/0xa0 [ 207.034885][ T5181] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 207.040837][ T5181] __se_sys_ioctl+0xfa/0x170 [ 207.046128][ T5181] do_syscall_64+0x4c/0xa0 [ 207.053241][ T5181] ? clear_bhb_loop+0x15/0x70 [ 207.058305][ T5181] ? clear_bhb_loop+0x15/0x70 [ 207.063599][ T5181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.069820][ T5181] RIP: 0033:0x7f88d064e969 [ 207.075094][ T5181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.097377][ T5181] RSP: 002b:00007f88ce495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.106898][ T5181] RAX: ffffffffffffffda RBX: 00007f88d0876080 RCX: 00007f88d064e969 [ 207.115907][ T5181] RDX: 0000200000000080 RSI: 000000004040aea0 RDI: 0000000000000005 [ 207.126409][ T5181] RBP: 00007f88d06d0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.135565][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.145762][ T5181] R13: 0000000000000000 R14: 00007f88d0876080 R15: 00007ffeb7facba8 [ 207.155275][ T5181] [ 207.228450][ T5179] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 207.242820][ T5179] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 207.626538][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 207.783032][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 208.897107][ T4687] udevd[4687]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 208.935590][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 209.108765][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 209.137897][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 212.319468][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 212.319595][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 212.325707][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 212.339354][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 212.345093][ T7] Bluetooth: hci1: command 0x0406 tx timeout