last executing test programs: 15.250204141s ago: executing program 1 (id=116): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@jqfmt_vfsv1}, {@barrier_val}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}], [{@uid_gt}, {@appraise}]}, 0x45, 0x7b1, &(0x7f0000000c80)="$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") setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000047f000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="36f30f009f3427360f01c5660fe176e7650fc73d66b9800000c00f326635001000000f3067f30f009900000000baf80c66b8b4ed018666efbafc0cb0ffee64f20f1c44000f01c9660f381421", 0x4c}], 0x1, 0x13, 0x0, 0x0) 14.936085026s ago: executing program 4 (id=118): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x14, &(0x7f0000000040), 0x50) 13.707357295s ago: executing program 1 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0xf8, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xe, 0x1, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12.28694194s ago: executing program 4 (id=122): r0 = syz_clone(0x300100, 0x0, 0xfe06, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ptrace(0x10, r0) ptrace(0x8, r0) r4 = syz_pidfd_open(r0, 0x0) process_mrelease(r4, 0x700000000000000) 12.130252262s ago: executing program 0 (id=123): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 11.802079089s ago: executing program 0 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1a4) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 11.570257757s ago: executing program 0 (id=127): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r4, &(0x7f00000022c0)=0x0, 0x0) 11.247331024s ago: executing program 1 (id=129): userfaultfd(0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 10.754208133s ago: executing program 4 (id=130): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x19) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000900000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='z', 0x10a7a, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10.753950353s ago: executing program 1 (id=131): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d8, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000f9dbe5dd14a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 7.307912111s ago: executing program 1 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x400, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) 7.307643151s ago: executing program 2 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) close(0xffffffffffffffff) close(0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000003c0)='.+@\x00', 0x0) 7.116152466s ago: executing program 3 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 6.782165843s ago: executing program 3 (id=139): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000013b3f3c1cb0c7cb40000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000950bc299839669ce4dabd7030fb88444dbfb64258951c49a1fca23"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x141e02, 0x20) 6.737224887s ago: executing program 0 (id=140): syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x82, {{0x5}, {0x5, 0x24, 0x0, 0x337}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x1}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9d}, @mdlm_detail={0x4, 0x24, 0x13, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xf8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 6.725163418s ago: executing program 2 (id=141): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') getdents(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) 5.726240508s ago: executing program 3 (id=142): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ustat(0x9, &(0x7f0000000000)) 5.537493194s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) bpf$MAP_CREATE(0x0, 0x0, 0x48) utimes(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) readv(r2, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.406843834s ago: executing program 2 (id=144): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) 5.158111314s ago: executing program 4 (id=145): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000040), 0x50) 5.096723289s ago: executing program 2 (id=146): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000014c0)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c636865636b3d7374726963742c007dda7c45d5aad78cccfdc2ffc29d6a3b6e1b129f9d0266d865d85fd2bfa2ccc210c0dcd127a25f0d6c6d96a9a07afc56b8e1aba9cc2ada1d083e28a51159b7c76a012ba863bd2b72ca09635af17887064bb040ed8e5244d0f8d2cf2a0964bc96503d78291d"], 0x6, 0x2d8, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000f9dbe5dd14a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 3.488146309s ago: executing program 0 (id=147): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000d00)=[{0x0}], 0x1, 0x2, 0x200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) futex(&(0x7f0000000000), 0x0, 0xfffffffe, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 2.614331409s ago: executing program 3 (id=148): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0xb}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x29, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x7}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x3}}, @addba_resp={0x3, 0x1, {0x12, 0x32, {0x0, 0x0, 0xc, 0x8}, 0x100}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8808}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x2000c045) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x4}}}}}, 0x28}}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000300)={0x3, 0x19, 0xff7d, 0x4, 0x2, "501fe88fc2aa9677d426a819a92aaefe7d41cc", 0xb, 0x1}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) personality(0xc) personality(0x5000004) 2.525326747s ago: executing program 4 (id=149): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@jqfmt_vfsv1}, {@barrier_val}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}], [{@uid_gt}, {@appraise}]}, 0x45, 0x7b1, &(0x7f0000000c80)="$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") setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000047f000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="36f30f009f3427360f01c5660fe176e7650fc73d66b9800000c00f326635001000000f3067f30f009900000000baf80c66b8b4ed018666efbafc0cb0ffee64f20f1c44000f01c9660f381421", 0x4c}], 0x1, 0x13, 0x0, 0x0) 2.476782951s ago: executing program 1 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) 1.402743277s ago: executing program 3 (id=151): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r4, &(0x7f00000022c0)=0x0, 0x0) 841.081132ms ago: executing program 2 (id=152): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_devices(r2, &(0x7f00000004c0)=ANY=[@ANYRES16], 0xffdd) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000000b00)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUxNGboKGteNCLKSWFYi4qi38O4mJTlexa2MXF9tBtvIhHwaOevPWgBw89i6CINw9erSBV8aA9WbA6Mruzm93sJk3AbbX+fofhy3vvm/e9zJJMJuzbl1di4/RcnLl27WrMz5eivHJiJa6XYimSGLgYkypT2gCA/4brWRa/ZX17TCn1jslMywIAZqj3+//VQyMtb3+x2/isNAz/nGVdAMDsFH//L+w2Zn6njrMzKQkAmLGJ5/8PjnVXxv/VX/bYHwDuAM++8OJTx9cinknT+YjmO51apxZPbPUfPxOvRyPW40gsxo2I/o1Cfij1jidPra0eSdO0Gz8uRS3P6NQimt1OrX+ncDzp5VfjaCzGUpFf3G1kWZac/HRt9WjaExEXu735o1nq1ObiYDH/dwdjPY5FGndP5EecWls9lhYnqDUH+d2Iza3nFnn9y7EY37wSZ6MRpyPPrUT8np9hbfXC0TQ9ka2N5Xdq1d64vp2egLRmd2EAAAAAAAAAAAAAAAAAAAAAALijLadDS8P9b7Kt/XuWl6f0RzPp1Pr5xf5Am/39gbJqFln261uP1N5NYmx/oO3783Rq5Thwe5cOAAAAAAAAAAAAAAAAAAAA/xrtc5WoNxrrrfa58xujQbfVPncgIvKWN776+POFmBxzk6BczDHSlRZN5zfqWTIYnCVjY4ogyScftFy6nGct5IfRMdXhKqaWUd25q9E49MAPH2y13JcMzvzXgWFWEtMXmGwrYzRo3tUvaT/fqGFw7CZjrmRZtlP6hZcms6IUUd7/hds9yPLgy6uv3fNo+/BjvZbPsr6HHl587sr7H/28UW/kM0fvClZa7RvZRr34OuqXqvuZNBl5/ZSiHwxO1RtT3i19c7ylnnz7y/P3vvf13mbPRlvenDImr63eaHyyvavSD/Iyt3UtTJtrbrDAJ4cvm/v7Z15vtcv/2IU7/OFK/fKF73/aa9bIDwkbdQAAAAAAAAAAAAAAAAAAwC0x8l7xQvFm37ndsh5/evaVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCts/X5/yPB5kTLXoI/ujHZVV1vtSMqt3uZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8z/0dAAD//+JLbdg=") r5 = memfd_create(&(0x7f0000001600)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec\x00\x00\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8f\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\x03\x00\x00\x00\x00\x00\x00\x009d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$&}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x66, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 14.207669ms ago: executing program 2 (id=154): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3}, 0x50) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x7, 0x759, 0x49, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x1}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) 0s ago: executing program 4 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 58.467282][ T4173] cgroup: Unknown subsys name 'net' [ 58.610212][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.076665][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.541499][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.664518][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.727041][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.735378][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.743830][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.771438][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.781596][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.792883][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.803417][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.811544][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.878649][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.900573][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.926415][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.996163][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.003283][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.011688][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.022955][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.030234][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.038592][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.055802][ T4188] team0: Port device team_slave_0 added [ 62.062228][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.069589][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.078126][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.089014][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.096266][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.104600][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.119979][ T4188] team0: Port device team_slave_1 added [ 62.145412][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.152682][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.161393][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.201010][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.208379][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.216868][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.241113][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.260459][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.278398][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.285484][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.312140][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.326777][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.336577][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.344071][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.351900][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.361535][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.372647][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.390494][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.397796][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.424044][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.435603][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.442686][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.451038][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.468147][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.488466][ T4190] team0: Port device team_slave_0 added [ 62.527126][ T4190] team0: Port device team_slave_1 added [ 62.553248][ T4194] team0: Port device team_slave_0 added [ 62.586677][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.597249][ T4194] team0: Port device team_slave_1 added [ 62.605318][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.616665][ T4183] team0: Port device team_slave_0 added [ 62.630488][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.637936][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.664267][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.693289][ T4183] team0: Port device team_slave_1 added [ 62.708188][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.715627][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.743322][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.759020][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.766072][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.790914][ T4184] team0: Port device team_slave_0 added [ 62.803736][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.810717][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.837054][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.867645][ T4184] team0: Port device team_slave_1 added [ 62.882212][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.889710][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.916017][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.927725][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.935005][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.962105][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.977563][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.984602][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.010691][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.061898][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.068989][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.076338][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.084444][ T4190] Cannot create hsr debugfs directory [ 63.111450][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.119421][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.145496][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.184399][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.191385][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.218336][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.218756][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.241946][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.249678][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.258234][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.266073][ T4194] Cannot create hsr debugfs directory [ 63.273684][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.279964][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.283797][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 63.292051][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.348040][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.355375][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.362207][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.369996][ T4183] Cannot create hsr debugfs directory [ 63.446811][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.454296][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.461600][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.469866][ T4184] Cannot create hsr debugfs directory [ 63.694281][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.706413][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.717067][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.730463][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.774777][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.786181][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.803635][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.825138][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.862842][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.876791][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.887203][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.920316][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.979771][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.990738][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.003062][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.036219][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.066744][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.087509][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.101712][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.111597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.122958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.143043][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.155293][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.184978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.194807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.204304][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.211530][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.221167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.231332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.240489][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.247620][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.257193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.266217][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.324040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.332810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.344873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.355479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.365562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.411261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.421146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.442930][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.455624][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.471437][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.485574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.495480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.506886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.515971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.529270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.537408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.554563][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.564908][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.581085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.590305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.606665][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.616651][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.626468][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.633591][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.644355][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.651725][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.681998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.692053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.701294][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.708453][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.718576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.727130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.757777][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.766053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.779976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.790561][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.797715][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.812786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.821970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.837245][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.844414][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.852863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.862357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.890936][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.907867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.916275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.930865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.940907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.950873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.960731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.970969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.979909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.989699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.998688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.007558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.016648][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.023884][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.031910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.041201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.050848][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.058176][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.066578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.075475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.083407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.092985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.101945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.135959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.145757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.160353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.168881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.177142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.186944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.196058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.204028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.211505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.220432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.232570][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.252416][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.263384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.275212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.277694][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 65.285082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.299207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.308237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.318247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.327072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.336431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.346226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.354650][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 65.356572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.360895][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 65.370370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.379834][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 65.388822][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 65.400977][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.411598][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.422244][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.433216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.442978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.452998][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.460155][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.471491][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.492514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.514686][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.527673][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.544476][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.558485][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.565628][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.607060][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.638754][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.654741][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.665264][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.689973][ T4188] device veth0_vlan entered promiscuous mode [ 65.703071][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.728106][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.745865][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.764268][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.784543][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.795759][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.804658][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.827732][ T4188] device veth1_vlan entered promiscuous mode [ 65.861879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.870910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.880500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.890570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.899717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.909024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.917564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.939268][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.951317][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.966266][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.978427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.987289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.997693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.007395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.015227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.029316][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.063795][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.071821][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.088359][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.114285][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.123241][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.142385][ T4188] device veth0_macvtap entered promiscuous mode [ 66.157924][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.190966][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.200365][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.238330][ T4188] device veth1_macvtap entered promiscuous mode [ 66.261153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.270920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.279618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.292833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.307557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.340792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.350830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.361740][ T4184] device veth0_vlan entered promiscuous mode [ 66.379084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.388241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.408301][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.427942][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.440329][ T4184] device veth1_vlan entered promiscuous mode [ 66.453612][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.465099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.475887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.485239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.495353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.505271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.515168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.524859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.534400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.542342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.555769][ T4190] device veth0_vlan entered promiscuous mode [ 66.576319][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.585703][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.595862][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.605287][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629107][ T4190] device veth1_vlan entered promiscuous mode [ 66.671798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.684859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.693162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.702041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.711591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.721169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.730150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.739276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.748186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.778033][ T4184] device veth0_macvtap entered promiscuous mode [ 66.799285][ T4184] device veth1_macvtap entered promiscuous mode [ 66.836920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.847207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.857160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.865849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.890595][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.902833][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.919291][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.928308][ T4183] device veth0_vlan entered promiscuous mode [ 66.940159][ T4194] device veth0_vlan entered promiscuous mode [ 66.965335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.975433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.984983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.993897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.002774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.011206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.023055][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.034462][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.045871][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.063083][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.072754][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082107][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091388][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104628][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.108538][ T4190] device veth0_macvtap entered promiscuous mode [ 67.121862][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.129638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.139280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.148267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.156957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.166330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.175757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.186441][ T4194] device veth1_vlan entered promiscuous mode [ 67.210735][ T4190] device veth1_macvtap entered promiscuous mode [ 67.222325][ T4183] device veth1_vlan entered promiscuous mode [ 67.229557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.238847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.247724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.291489][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.306630][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.319171][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.328489][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.341396][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.354920][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 67.362877][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.372826][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.383628][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.395532][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.422156][ T4194] device veth0_macvtap entered promiscuous mode [ 67.432442][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.434704][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 67.447855][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.453330][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 67.469617][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 67.472541][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.476309][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 67.497056][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.506736][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.519900][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.531454][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.541974][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.552652][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.564589][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.584324][ T4194] device veth1_macvtap entered promiscuous mode [ 67.591937][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.603185][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.611919][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.621975][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.665230][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.674819][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691753][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707673][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.742701][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.755388][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.756510][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.766930][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.781142][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.785731][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.802238][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.813077][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829111][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.845776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.854659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.864443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.872768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.882432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.897395][ T4183] device veth0_macvtap entered promiscuous mode [ 67.914941][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.958060][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.968595][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.968631][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.979441][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.007473][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.018691][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.035703][ T4300] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 68.042157][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.067269][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.079470][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.089045][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.106351][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.121013][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.132239][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.145993][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160758][ T4183] device veth1_macvtap entered promiscuous mode [ 68.215097][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.223121][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.261561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.330556][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.368653][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.379454][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.391931][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.402757][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.414160][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.426511][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.438197][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.455398][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.469138][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.499786][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.530211][ T4307] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8'. [ 68.540039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.551143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.562676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.592984][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.604530][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.614985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.625714][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.636132][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.646865][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.657045][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.667860][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.679056][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.691480][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.702880][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.710975][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.722610][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.735120][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.742297][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.751990][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.760732][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.775349][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785124][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.794660][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.803466][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843864][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.851870][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.924391][ T4311] loop2: detected capacity change from 0 to 256 [ 68.933978][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.988895][ T4311] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.003275][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.026214][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.076876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.098866][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.108982][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.140502][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.434175][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 69.514105][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 69.521652][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 69.544535][ T26] audit: type=1800 audit(1754785528.253:2): pid=4322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 69.566129][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 69.586048][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 69.607844][ T26] audit: type=1800 audit(1754785528.283:3): pid=4322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 69.916652][ T4328] ======================================================= [ 69.916652][ T4328] WARNING: The mand mount option has been deprecated and [ 69.916652][ T4328] and is ignored by this kernel. Remove the mand [ 69.916652][ T4328] option from the mount to silence this warning. [ 69.916652][ T4328] ======================================================= [ 69.953318][ T4328] fuse: Bad value for 'fd' [ 71.138266][ T4341] tipc: Started in network mode [ 71.144175][ T4341] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 71.160790][ T4341] tipc: Enabled bearer , priority 10 [ 71.359527][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366728][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.193379][ T4252] tipc: Node number set to 4269801488 [ 74.023446][ C0] sched: RT throttling activated [ 74.679912][ T4360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 75.632692][ T4368] loop1: detected capacity change from 0 to 1024 [ 75.732955][ T4368] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 75.775500][ T4371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 75.811755][ T4368] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 76.712189][ T1111] cfg80211: failed to load regulatory.db [ 76.740382][ T4378] loop4: detected capacity change from 0 to 1024 [ 76.814519][ T4378] EXT4-fs (loop4): Ignoring removed nobh option [ 76.853545][ T4378] EXT4-fs (loop4): Ignoring removed bh option [ 76.867809][ T4380] loop1: detected capacity change from 0 to 512 [ 76.894740][ T4380] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.919359][ T4380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.942922][ T4378] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,sysvgroups,nojournal_checksum,lazytime,jqfmt=vfsv0,grpquota,nobh,jqfmt=vfsold,bh,usrquota,,errors=continue. Quota mode: writeback. [ 76.974548][ T4380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.032255][ T4380] EXT4-fs (loop1): 1 truncate cleaned up [ 77.039377][ T4380] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 77.357347][ T4386] syz.1.22[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.357965][ T4386] syz.1.22[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.195233][ T4388] loop4: detected capacity change from 0 to 256 [ 79.393613][ T4401] fuse: Bad value for 'fd' [ 80.268286][ T4388] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.694717][ T26] audit: type=1800 audit(1754785539.383:4): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 81.033006][ T26] audit: type=1800 audit(1754785539.393:5): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 82.405624][ T4420] sch_fq: defrate 0 ignored. [ 82.820645][ T4429] loop0: detected capacity change from 0 to 512 [ 82.996154][ T4429] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 83.053867][ T4429] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.493113][ T4436] loop3: detected capacity change from 0 to 1024 [ 83.699222][ T4436] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 83.892360][ T4442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 84.792510][ T4445] syz.0.35 (4445) used greatest stack depth: 17736 bytes left [ 84.967658][ T4447] device vlan2 entered promiscuous mode [ 85.020016][ T4447] device syz_tun entered promiscuous mode [ 85.212618][ T4453] loop4: detected capacity change from 0 to 256 [ 85.354397][ T4459] tipc: Enabling of bearer rejected, already enabled [ 86.124437][ T4461] loop3: detected capacity change from 0 to 128 [ 86.199111][ T4453] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.597502][ T26] audit: type=1800 audit(1754785546.283:6): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 87.921145][ T4461] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 88.006330][ T4461] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.023488][ T26] audit: type=1800 audit(1754785546.283:7): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 88.694668][ T4479] loop1: detected capacity change from 0 to 512 [ 88.770228][ T4481] loop0: detected capacity change from 0 to 1024 [ 88.837229][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.865483][ T4481] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 88.907275][ T4479] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.064244][ T4473] loop4: detected capacity change from 0 to 512 [ 89.191611][ T4473] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 89.278538][ T4473] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.891318][ T4510] loop3: detected capacity change from 0 to 256 [ 90.936844][ T4510] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.045314][ T4513] tipc: Started in network mode [ 91.050490][ T4513] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 91.065480][ T4513] tipc: Enabled bearer , priority 10 [ 91.947498][ T26] audit: type=1800 audit(1754785550.643:8): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 92.193744][ T23] tipc: Node number set to 4269801488 [ 92.264129][ T26] audit: type=1800 audit(1754785550.653:9): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 94.985188][ T4538] loop3: detected capacity change from 0 to 512 [ 95.032741][ T4530] loop4: detected capacity change from 0 to 40427 [ 95.095730][ T4530] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 95.140516][ T4538] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 95.179416][ T4530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.251637][ T4538] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.301848][ T4530] F2FS-fs (loop4): invalid crc value [ 95.375658][ T4530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.564270][ T4530] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.580587][ T4530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 95.680506][ T4530] syz.4.62[4530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.680608][ T4530] syz.4.62[4530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.849316][ T4565] loop3: detected capacity change from 0 to 512 [ 96.876090][ T4564] loop0: detected capacity change from 0 to 1024 [ 97.075363][ T4564] EXT4-fs (loop0): Ignoring removed orlov option [ 97.199497][ T4569] tipc: Started in network mode [ 97.204758][ T4569] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 97.218631][ T4569] tipc: Enabled bearer , priority 10 [ 97.517379][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 97.847681][ T4565] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 97.942137][ T4565] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.996867][ T4565] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.67: Failed to acquire dquot type 1 [ 98.036761][ T4575] loop1: detected capacity change from 0 to 256 [ 98.096097][ T4565] EXT4-fs (loop3): 1 truncate cleaned up [ 98.143546][ T4565] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 98.161604][ T4575] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.206116][ T4565] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.224361][ T4252] tipc: Node number set to 4269801488 [ 98.562282][ T26] audit: type=1800 audit(1754785557.263:10): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 98.616606][ T26] audit: type=1800 audit(1754785557.303:11): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 101.224655][ T240] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.618357][ T4619] tipc: Enabling of bearer rejected, already enabled [ 102.572480][ T4632] loop2: detected capacity change from 0 to 16 [ 102.647862][ T4632] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 103.038366][ T4643] sock: sock_set_timeout: `syz.3.89' (pid 4643) tries to set negative timeout [ 104.025689][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 104.032758][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 104.075310][ T4649] loop2: detected capacity change from 0 to 256 [ 104.179220][ T4649] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.658873][ T26] audit: type=1800 audit(1754785563.363:12): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 104.782107][ T26] audit: type=1800 audit(1754785563.393:13): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 106.435463][ T4237] Bluetooth: hci5: command 0x1001 tx timeout [ 106.441592][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 107.793984][ T4693] sock: sock_set_timeout: `syz.3.104' (pid 4693) tries to set negative timeout [ 109.026652][ T4237] Bluetooth: hci5: command 0x1009 tx timeout [ 111.286650][ T4719] loop1: detected capacity change from 0 to 512 [ 111.342465][ T4719] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 111.519730][ T4719] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.546431][ T4719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.112: bg 0: block 248: padding at end of block bitmap is not set [ 111.569097][ T4719] Quota error (device loop1): write_blk: dquota write failed [ 111.577002][ T4719] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 111.587228][ T4719] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.112: Failed to acquire dquot type 1 [ 111.619667][ T4719] EXT4-fs (loop1): 1 truncate cleaned up [ 111.630041][ T4719] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 112.799837][ T4726] loop0: detected capacity change from 0 to 256 [ 112.884945][ T4726] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.416766][ T26] audit: type=1800 audit(1754785572.123:14): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.115" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 113.472091][ T4731] loop1: detected capacity change from 0 to 2048 [ 113.484640][ T26] audit: type=1800 audit(1754785572.153:15): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.115" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 113.544594][ T4731] EXT4-fs (loop1): Unrecognized mount option "uid>00000000000000000000" or missing value [ 114.372759][ T4745] sock: sock_set_timeout: `syz.4.118' (pid 4745) tries to set negative timeout [ 115.503620][ T4237] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.773572][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 115.893881][ T4237] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 115.939137][ T4237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.985742][ T4237] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.036933][ T4237] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 116.083576][ T4237] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.214488][ T4237] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.241467][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.282649][ T4237] usb 2-1: SerialNumber: syz [ 116.379392][ T4747] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.759802][ T4237] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 116.824483][ T4237] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 116.890821][ T4759] syz.0.124[4759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.890933][ T4759] syz.0.124[4759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.896018][ T4237] usb 2-1: USB disconnect, device number 2 [ 117.350823][ T4769] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 117.537563][ T4771] loop1: detected capacity change from 0 to 1024 [ 117.681806][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 117.814807][ T4771] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 118.010591][ T4781] loop1: detected capacity change from 0 to 256 [ 118.122445][ T4781] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.490386][ T4788] sock: sock_set_timeout: `syz.3.132' (pid 4788) tries to set negative timeout [ 120.298717][ T4798] loop2: detected capacity change from 0 to 128 [ 120.419712][ T4798] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,acl,,errors=continue. Quota mode: none. [ 120.434777][ T4798] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.532621][ T4798] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.134: No space for directory leaf checksum. Please run e2fsck -D. [ 120.660837][ T4798] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.134: checksumming directory block 0 [ 120.813001][ T4804] tipc: Enabling of bearer rejected, already enabled [ 122.002913][ T4816] loop2: detected capacity change from 0 to 512 [ 122.320059][ T4816] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.513851][ T4259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.893083][ T4816] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 122.925217][ T4816] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.141: invalid indirect mapped block 2683928664 (level 1) [ 122.945340][ T26] audit: type=1326 audit(1754785581.653:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 122.992916][ T4816] EXT4-fs (loop2): Remounting filesystem read-only [ 123.026634][ T4816] EXT4-fs (loop2): 1 truncate cleaned up [ 123.031669][ T26] audit: type=1326 audit(1754785581.683:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.046679][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 123.073530][ T26] audit: type=1326 audit(1754785581.683:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.143625][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 123.202805][ T26] audit: type=1326 audit(1754785581.683:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.265914][ T26] audit: type=1326 audit(1754785581.683:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.314235][ T26] audit: type=1326 audit(1754785581.683:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.363749][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.416968][ T26] audit: type=1326 audit(1754785581.693:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.492254][ T26] audit: type=1326 audit(1754785581.693:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.498530][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 123.589579][ T26] audit: type=1326 audit(1754785581.693:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.617462][ T4832] loop2: detected capacity change from 0 to 256 [ 123.693809][ T26] audit: type=1326 audit(1754785581.693:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f2e22d7bbe9 code=0x7ffc0000 [ 123.703937][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 123.752514][ T4832] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.852508][ T4834] sock: sock_set_timeout: `syz.4.145' (pid 4834) tries to set negative timeout [ 123.914625][ T4259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.042888][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.264015][ T4259] usb 1-1: Product: syz [ 124.516106][ T4259] usb 1-1: Manufacturer: syz [ 124.521682][ T4259] usb 1-1: SerialNumber: syz [ 124.835455][ T4820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.843079][ T4820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.174614][ T4259] usb 1-1: bad CDC descriptors [ 125.227373][ T4259] usb 1-1: USB disconnect, device number 2 [ 126.218779][ T4843] loop1: detected capacity change from 0 to 512 [ 126.309528][ T4844] loop4: detected capacity change from 0 to 2048 [ 127.216901][ T4843] EXT4-fs (loop1): inline encryption not supported [ 127.225174][ T4843] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.262263][ T4844] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 127.298896][ T4843] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 127.314983][ T4843] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.150: Failed to acquire dquot type 1 [ 127.327108][ T4843] EXT4-fs (loop1): 1 truncate cleaned up [ 127.332796][ T4843] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 128.001131][ T4858] loop2: detected capacity change from 0 to 256 [ 128.110986][ T4858] FAT-fs (loop2): Directory bread(block 64) failed [ 128.127982][ T4858] FAT-fs (loop2): Directory bread(block 65) failed [ 128.137458][ T4858] FAT-fs (loop2): Directory bread(block 66) failed [ 128.153242][ T4858] FAT-fs (loop2): Directory bread(block 67) failed [ 128.161541][ T4858] FAT-fs (loop2): Directory bread(block 68) failed [ 128.184706][ T4858] FAT-fs (loop2): Directory bread(block 69) failed [ 128.199695][ T4858] FAT-fs (loop2): Directory bread(block 70) failed [ 128.207911][ T4858] FAT-fs (loop2): Directory bread(block 71) failed [ 128.219912][ T4858] FAT-fs (loop2): Directory bread(block 72) failed [ 128.228096][ T4858] FAT-fs (loop2): Directory bread(block 73) failed [ 128.559705][ T4870] [ 128.562464][ T4870] ============================= [ 128.601152][ T4870] WARNING: suspicious RCU usage [ 128.658352][ T4870] 5.15.189-syzkaller #0 Not tainted [ 128.673699][ T4870] ----------------------------- [ 128.702129][ T4870] include/linux/kvm_host.h:889 suspicious rcu_dereference_check() usage! [ 128.748150][ T4870] [ 128.748150][ T4870] other info that might help us debug this: [ 128.748150][ T4870] [ 128.901140][ T4870] [ 128.901140][ T4870] rcu_scheduler_active = 2, debug_locks = 1 [ 129.044353][ T4870] 1 lock held by syz.0.153/4870: [ 129.050722][ T4870] #0: ffff88807baf00c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1c8/0xb80 [ 129.062178][ T4870] [ 129.062178][ T4870] stack backtrace: [ 129.114794][ T4870] CPU: 1 PID: 4870 Comm: syz.0.153 Not tainted 5.15.189-syzkaller #0 [ 129.122941][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.133044][ T4870] Call Trace: [ 129.136360][ T4870] [ 129.139320][ T4870] dump_stack_lvl+0x168/0x230 [ 129.144027][ T4870] ? load_image+0x3b0/0x3b0 [ 129.148642][ T4870] ? show_regs_print_info+0x20/0x20 [ 129.153872][ T4870] ? lockdep_rcu_suspicious+0x110/0x180 [ 129.159634][ T4870] kvm_vcpu_memslots+0x1b6/0x200 [ 129.164777][ T4870] kvm_vcpu_gfn_to_memslot+0x2b/0x3c0 [ 129.170179][ T4870] ? sync_vmcs02_to_vmcs12+0xd33/0x19a0 [ 129.175754][ T4870] kvm_vcpu_unmap+0x5b/0x80 [ 129.180287][ T4870] nested_vmx_vmexit+0x13f5/0x28d0 [ 129.185438][ T4870] ? nested_mark_vmcs12_pages_dirty+0x290/0x290 [ 129.191752][ T4870] ? __might_fault+0xb7/0x110 [ 129.196461][ T4870] ? __lock_acquire+0x7c60/0x7c60 [ 129.201518][ T4870] vmx_leave_nested+0x7e/0xc0 [ 129.206313][ T4870] kvm_vcpu_ioctl_x86_set_vcpu_events+0x95b/0x1190 [ 129.212861][ T4870] kvm_arch_vcpu_ioctl+0x1092/0x19d0 [ 129.218193][ T4870] ? kvm_arch_vcpu_put+0x840/0x840 [ 129.223329][ T4870] ? is_bpf_text_address+0x254/0x270 [ 129.228650][ T4870] ? __kernel_text_address+0x9a/0x100 [ 129.234051][ T4870] ? mark_lock+0x94/0x320 [ 129.238409][ T4870] ? __lock_acquire+0x13ad/0x7c60 [ 129.243549][ T4870] ? kfree+0xef/0x2a0 [ 129.247734][ T4870] ? __se_sys_ioctl+0x48/0x170 [ 129.252524][ T4870] ? kfree+0xef/0x2a0 [ 129.256527][ T4870] ? kasan_set_track+0x62/0x70 [ 129.261341][ T4870] ? kasan_set_track+0x4b/0x70 [ 129.266127][ T4870] ? kasan_set_free_info+0x1f/0x40 [ 129.271265][ T4870] ? verify_lock_unused+0x140/0x140 [ 129.276691][ T4870] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 129.282477][ T4870] ? __mutex_trylock_common+0x14f/0x250 [ 129.288054][ T4870] ? rcu_lock_release+0x20/0x20 [ 129.293018][ T4870] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 129.298684][ T4870] ? rcu_lock_release+0x5/0x20 [ 129.303476][ T4870] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 129.308361][ T4870] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 129.313249][ T4870] ? kvm_vcpu_ioctl+0x1c8/0xb80 [ 129.318126][ T4870] ? __mutex_lock_common+0x431/0x2390 [ 129.323534][ T4870] ? kfree+0xef/0x2a0 [ 129.327651][ T4870] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 129.333306][ T4870] ? verify_lock_unused+0x140/0x140 [ 129.338535][ T4870] ? mutex_lock_io_nested+0x60/0x60 [ 129.343953][ T4870] kvm_vcpu_ioctl+0x6b1/0xb80 [ 129.348668][ T4870] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 129.354368][ T4870] ? bpf_lsm_file_ioctl+0x5/0x10 [ 129.359338][ T4870] ? security_file_ioctl+0x7c/0xa0 [ 129.364489][ T4870] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 129.370167][ T4870] __se_sys_ioctl+0xfa/0x170 [ 129.374803][ T4870] do_syscall_64+0x4c/0xa0 [ 129.379279][ T4870] ? clear_bhb_loop+0x30/0x80 [ 129.383988][ T4870] ? clear_bhb_loop+0x30/0x80 [ 129.388699][ T4870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.394716][ T4870] RIP: 0033:0x7f782cce7be9 [ 129.399169][ T4870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.418903][ T4870] RSP: 002b:00007f782af2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.427356][ T4870] RAX: ffffffffffffffda RBX: 00007f782cf0f090 RCX: 00007f782cce7be9 [ 129.435632][ T4870] RDX: 0000200000000180 RSI: 000000004040aea0 RDI: 0000000000000007 [ 129.443644][ T4870] RBP: 00007f782cd6ae19 R08: 0000000000000000 R09: 0000000000000000 [ 129.451832][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.459844][ T4870] R13: 00007f782cf0f128 R14: 00007f782cf0f090 R15: 00007ffdeff903a8 [ 129.468215][ T4870] [ 132.796714][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803170][ T1422] ieee802154 phy1 wpan1: encryption failed: -22