last executing test programs: 11.89221357s ago: executing program 4 (id=213): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.675570229s ago: executing program 2 (id=218): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000001740)={0x35, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x803, 0x0, 0x0, 0x20, 0x2}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x2d}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x7, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.389921543s ago: executing program 4 (id=220): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x4000004) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) open$dir(0x0, 0x400001, 0x7c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000001300), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000080", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730"], 0x34}}, 0x0) 8.123718355s ago: executing program 1 (id=221): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}]}, 0xfe, 0x570, &(0x7f00000019c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) readv(r3, &(0x7f0000000b00)=[{&(0x7f0000000380)=""/17, 0x11}], 0x1) gettid() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x0) 7.18726914s ago: executing program 0 (id=222): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)={@local, @random="b557a0758659", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1}}}}, 0x0) ptrace$setregs(0xf, r0, 0x6, &(0x7f00000003c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@sys_tz}, {@sys_tz}, {@gid}]}, 0x1, 0x153d, &(0x7f00000005c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) gettid() socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 6.974809497s ago: executing program 4 (id=223): creat(0x0, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 6.808253351s ago: executing program 3 (id=224): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 6.666811332s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x40000, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 6.556092181s ago: executing program 3 (id=226): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x858, 0x2d, 0x4, 0x0, 0x6, 0xc, 0xb, 0xd, 0x8, 0x100, 0x6, 0x0, 0x7, 0x1, 0x10, [0xaf, 0x8]}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd(0x1) read$eventfd(r3, &(0x7f0000000040), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x8001], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.236322809s ago: executing program 1 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.463071391s ago: executing program 4 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.023706756s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) mkdir(0x0, 0x101) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000500)=""/196, &(0x7f0000000040)=0xc4) 2.583360492s ago: executing program 0 (id=230): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c045) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={0x0}}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) personality(0xc) personality(0x5000004) 2.581267462s ago: executing program 2 (id=231): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.420969835s ago: executing program 1 (id=232): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2.294442935s ago: executing program 2 (id=233): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x1, 0x550b, &(0x7f00000079c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000d0000"], &(0x7f0000001540)=""/4088, 0x31, 0xff8, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 2.124206979s ago: executing program 1 (id=234): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{0x0}], 0x1) 1.976852741s ago: executing program 1 (id=235): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000001740)={0x35, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x803, 0x0, 0x0, 0x20, 0x2}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x2d}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x7, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.787440046s ago: executing program 3 (id=236): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.513375629s ago: executing program 3 (id=237): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a80)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x181fbfb9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x4, 0xf01, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x80}}, 0x20094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) 1.512604708s ago: executing program 0 (id=238): creat(0x0, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.301005655s ago: executing program 0 (id=239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x858, 0x2d, 0x4, 0x0, 0x6, 0xc, 0xb, 0xd, 0x8, 0x100, 0x6, 0x0, 0x7, 0x1, 0x10, [0xaf, 0x8]}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd(0x1) read$eventfd(r3, &(0x7f0000000040), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x8001], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.273793388s ago: executing program 4 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.078013713s ago: executing program 0 (id=241): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 791.477286ms ago: executing program 4 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x40000, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 661.121017ms ago: executing program 2 (id=243): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 568.516565ms ago: executing program 1 (id=244): bpf$MAP_CREATE(0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff9, 0xcc9f, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 100.126063ms ago: executing program 0 (id=245): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{0x0}], 0x1) 79.325274ms ago: executing program 3 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 2 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x24060400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) fgetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 57.425315][ T4172] cgroup: Unknown subsys name 'net' [ 57.558194][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.903007][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.283904][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.370813][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.397967][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.432674][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.502902][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.510027][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.518568][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.549634][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.556936][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.565201][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.583122][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.590182][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.598129][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.608955][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.616238][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.624230][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.670712][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.682969][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.705580][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.712850][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.720741][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.741651][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.750826][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.758175][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.766197][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.774263][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.781325][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.789790][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.798604][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.832699][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.839770][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.847730][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.857173][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.875748][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.909829][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.921402][ T4187] team0: Port device team_slave_0 added [ 60.944742][ T4193] team0: Port device team_slave_0 added [ 60.960132][ T4187] team0: Port device team_slave_1 added [ 60.968158][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.978685][ T4193] team0: Port device team_slave_1 added [ 61.002399][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.033555][ T4188] team0: Port device team_slave_0 added [ 61.045882][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.053737][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.079916][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.107069][ T4188] team0: Port device team_slave_1 added [ 61.120567][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.127659][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.153682][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.165343][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.172528][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.198435][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.209733][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.217449][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.225289][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.241968][ T4183] team0: Port device team_slave_0 added [ 61.259747][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.266790][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.292820][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.308049][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.315299][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.323204][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.330550][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.337974][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.364135][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.377310][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.384340][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.410430][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.432557][ T4183] team0: Port device team_slave_1 added [ 61.478082][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.484933][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.520330][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.545327][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.552693][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.578754][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.592447][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.599267][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.605884][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.614048][ T4193] Cannot create hsr debugfs directory [ 61.621617][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.633714][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.640472][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.647201][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.654879][ T4188] Cannot create hsr debugfs directory [ 61.660697][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.667734][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.693855][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.770035][ T4184] team0: Port device team_slave_0 added [ 61.780346][ T4184] team0: Port device team_slave_1 added [ 61.832519][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.839210][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.845917][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.853671][ T4183] Cannot create hsr debugfs directory [ 61.872166][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.879146][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.905428][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.920006][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.926987][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.953078][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.019338][ T2304] Bluetooth: hci2: command 0x0409 tx timeout [ 62.022100][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 62.026449][ T2304] Bluetooth: hci1: command 0x0409 tx timeout [ 62.037531][ T2304] Bluetooth: hci0: command 0x0409 tx timeout [ 62.092223][ T2304] Bluetooth: hci4: command 0x0409 tx timeout [ 62.146560][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.153619][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.160161][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.168123][ T4184] Cannot create hsr debugfs directory [ 62.270816][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.291456][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.307939][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.317481][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.356794][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.366876][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.376186][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.385854][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.473916][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.498618][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.516284][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.537356][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.570162][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.583249][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.598028][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.610109][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.619756][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.629046][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.639619][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.653600][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.674800][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.686706][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.696129][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.705621][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.712942][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.723436][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.753253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.762840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.771242][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778341][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.788724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.800384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.814744][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.822777][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.844510][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.854361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.865004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.883707][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.892755][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.901707][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.915674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.925679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.934851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.944207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.951259][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.959469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.968462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.977886][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.984972][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.993027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.001586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.010248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.019002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.028628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.042588][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.055327][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.066971][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.092030][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.101274][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.110103][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.119996][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.130023][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.140782][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.182126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.190887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.208983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.219470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.259097][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.271315][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.283431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.293152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.307988][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.327378][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.349834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.363197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.387096][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.404577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.414256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.424599][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.431676][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.445925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.477812][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.487225][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.496159][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.503270][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.512473][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.521077][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.529306][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.548896][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.568689][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.595455][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.610401][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.618559][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.626720][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.636155][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.645704][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.655196][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.667936][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.679973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.689883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.729219][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.740086][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.749194][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.756341][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.764985][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.774709][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.783939][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.792902][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.801297][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.808397][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.821000][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.829189][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.837916][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.858942][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.866501][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.878226][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.889553][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.901158][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.914950][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.931099][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.940657][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.949340][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.972167][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.981063][ T4187] device veth0_vlan entered promiscuous mode [ 63.993415][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.001412][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.013329][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.029835][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.050880][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.060737][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.069958][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.078614][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.086539][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.092192][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 64.094440][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 64.105944][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 64.113407][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 64.125453][ T4187] device veth1_vlan entered promiscuous mode [ 64.142216][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.164912][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.182269][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 64.190017][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.198800][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.207738][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.217167][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.226996][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.236313][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.243540][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.277247][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.293352][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.304967][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.314041][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.323590][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.332673][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.339766][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.348560][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.360076][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.369120][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.379052][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.403214][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.417575][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.430399][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.443225][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.452889][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.461254][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.472289][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.480625][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.489271][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.498211][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.507848][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.516391][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.524926][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.536415][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.545104][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.563611][ T4187] device veth0_macvtap entered promiscuous mode [ 64.602773][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.610815][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.620841][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.637012][ T4187] device veth1_macvtap entered promiscuous mode [ 64.662586][ T4193] device veth0_vlan entered promiscuous mode [ 64.671295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.681409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.690927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.700771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.723804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.738457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.776867][ T4193] device veth1_vlan entered promiscuous mode [ 64.796920][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.810442][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.826507][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.838434][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.850590][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.869685][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.878018][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.886236][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.894396][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.904896][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.913787][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.922670][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.933671][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.943214][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.952178][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.960881][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.972969][ T4183] device veth0_vlan entered promiscuous mode [ 64.984929][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.993115][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.025570][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.034496][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.042804][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.051233][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.064240][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.073936][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.082900][ T4183] device veth1_vlan entered promiscuous mode [ 65.091192][ T4193] device veth0_macvtap entered promiscuous mode [ 65.110559][ T4193] device veth1_macvtap entered promiscuous mode [ 65.149978][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.164024][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.173184][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.181682][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.189786][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.198648][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.225672][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.234874][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.282652][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.295442][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.303921][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.305249][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.323226][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.330585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.339564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.348765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.357180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.366137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.395335][ T4184] device veth0_vlan entered promiscuous mode [ 65.402674][ T4183] device veth0_macvtap entered promiscuous mode [ 65.410324][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.418920][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.427953][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.436315][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.444681][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.454543][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.463636][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.471421][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.479471][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.496374][ T4188] device veth0_vlan entered promiscuous mode [ 65.505219][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.516367][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.527929][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.544135][ T4183] device veth1_macvtap entered promiscuous mode [ 65.556756][ T4184] device veth1_vlan entered promiscuous mode [ 65.565695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.575964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.585524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.595678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.608386][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.618084][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.627682][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636605][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.652722][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.660699][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.662575][ T4188] device veth1_vlan entered promiscuous mode [ 65.695311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.734654][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.753018][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.768650][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.787432][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.799074][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.827836][ T4188] device veth0_macvtap entered promiscuous mode [ 65.846113][ T4188] device veth1_macvtap entered promiscuous mode [ 65.855917][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.867444][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.902932][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.913514][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.923915][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.932910][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.941552][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.951677][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.963113][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.974953][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.988193][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.006680][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.176103][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 66.195440][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 66.275154][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 66.344762][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 66.411891][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 66.444964][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.497447][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.869115][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.883505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.763893][ T4184] device veth0_macvtap entered promiscuous mode [ 67.770997][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.791263][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.808667][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.823936][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.840558][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.845624][ T4295] loop2: detected capacity change from 0 to 2048 [ 67.853003][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.870175][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.880241][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.892601][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901332][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.906741][ T4175] loop2: p1 < > p3 [ 67.917411][ T4175] loop2: p3 size 134217728 extends beyond EOD, truncated [ 67.917508][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.940623][ T4184] device veth1_macvtap entered promiscuous mode [ 67.950239][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.960817][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.969389][ T4295] loop2: p1 < > p3 [ 67.973143][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.986152][ T4295] loop2: p3 size 134217728 extends beyond EOD, truncated [ 67.990968][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.004291][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.017164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.042727][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.085835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.100708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.144432][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.165757][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.177404][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.188204][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.202548][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.213093][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.225389][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.236126][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.249214][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.259551][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.270564][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 68.273472][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.286752][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.297588][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.307663][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.318459][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.329863][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.337716][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 68.359316][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.364035][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 68.378251][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.395844][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.403992][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.407578][ T4299] loop2: detected capacity change from 0 to 1024 [ 68.415047][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 68.437622][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 68.456897][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.469689][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.497934][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.525975][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.543645][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.572505][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 68.582040][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.629256][ T4306] syz.4.8[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.629468][ T4306] syz.4.8[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.631925][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.688125][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.703895][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.718863][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.733643][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.783454][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.851271][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.864397][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.876559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.890905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.633092][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.648896][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.668241][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.677649][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.691759][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.723767][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.792596][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.862581][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.880652][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.897497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.914256][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.928547][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.955775][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.979095][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.981458][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.006132][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.016472][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.029908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.044740][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.051292][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.068117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.084537][ T4328] loop3: detected capacity change from 0 to 256 [ 70.098305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.151536][ T4328] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.226016][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232906][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348172][ T4344] loop2: detected capacity change from 0 to 512 [ 71.611208][ T4344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.024647][ T4343] tipc: Started in network mode [ 72.029816][ T4343] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 72.040615][ T4343] tipc: Enabled bearer , priority 10 [ 72.071978][ T4344] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.337938][ T4357] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.382712][ T4357] tipc: Enabled bearer , priority 10 [ 72.595684][ T4336] loop0: detected capacity change from 0 to 40427 [ 72.653953][ T4362] loop1: detected capacity change from 0 to 512 [ 72.812747][ T4362] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 72.822709][ T4336] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 72.829235][ T4336] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 72.844381][ T4362] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 72.869289][ T4336] F2FS-fs (loop0): invalid crc value [ 72.874194][ T4362] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.921105][ T4336] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 72.937717][ T4362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 72.966308][ T4350] netlink: 'syz.4.17': attribute type 16 has an invalid length. [ 72.978675][ T4350] netlink: 'syz.4.17': attribute type 17 has an invalid length. [ 72.995644][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.003463][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.012659][ T4362] System zones: 1-12 [ 73.026893][ T4362] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.21: corrupted in-inode xattr [ 73.045201][ T4362] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.21: couldn't read orphan inode 15 (err -117) [ 73.074524][ T4350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.086436][ T4362] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 73.121305][ T4336] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 73.131482][ T4336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.205469][ T4336] tipc: Started in network mode [ 73.214789][ T4336] tipc: Node identity ac14140f, cluster identity 4711 [ 73.232637][ T4336] tipc: New replicast peer: 255.255.255.255 [ 73.248260][ T4336] tipc: Enabled bearer , priority 10 [ 73.264841][ T4362] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 73.412920][ T4252] tipc: Node number set to 4269801488 [ 73.799479][ T4388] loop1: detected capacity change from 0 to 512 [ 73.999378][ T4388] ======================================================= [ 73.999378][ T4388] WARNING: The mand mount option has been deprecated and [ 73.999378][ T4388] and is ignored by this kernel. Remove the mand [ 73.999378][ T4388] option from the mount to silence this warning. [ 73.999378][ T4388] ======================================================= [ 74.107881][ T4390] tipc: Started in network mode [ 74.112846][ T4390] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 74.122504][ T4390] tipc: Enabled bearer , priority 10 [ 74.377591][ T2304] tipc: Node number set to 2886997007 [ 74.539927][ T4388] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.549881][ T4388] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 74.658256][ T4383] loop3: detected capacity change from 0 to 40427 [ 74.672069][ T4397] loop4: detected capacity change from 0 to 512 [ 74.700544][ T4388] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 74.725893][ T4397] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 74.725893][ T4397] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 74.725893][ T4397] [ 74.744541][ T4388] EXT4-fs (loop1): 1 truncate cleaned up [ 74.750846][ T4383] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 74.751700][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 74.768718][ T4383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 74.794895][ T4397] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 74.807648][ T4403] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 74.808350][ T4397] EXT4-fs (loop4): mount failed [ 74.817331][ T4403] tipc: Enabled bearer , priority 10 [ 74.920802][ T4383] F2FS-fs (loop3): invalid crc value [ 75.027038][ T4383] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 75.902896][ T2239] tipc: Node number set to 4269801488 [ 76.407090][ T4415] loop0: detected capacity change from 0 to 512 [ 76.451585][ T4383] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 76.458961][ T4383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.486171][ T4415] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 76.593621][ T4415] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 76.600965][ T4415] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 76.620140][ T4418] process 'syz.2.35' launched './file0' with NULL argv: empty string added [ 76.792466][ T4415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 76.800812][ T4415] System zones: 1-12 [ 76.816118][ T4415] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.33: corrupted in-inode xattr [ 76.844718][ T4415] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.33: couldn't read orphan inode 15 (err -117) [ 76.857881][ T4415] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 76.902534][ T4415] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 76.978954][ T4425] loop2: detected capacity change from 0 to 1024 [ 77.229878][ T4425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.272373][ T4425] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.463309][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 77.493641][ T4437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.518958][ T4425] syz.2.37 (4425) used greatest stack depth: 20352 bytes left [ 78.021798][ T4449] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 78.030412][ T4449] tipc: Enabled bearer , priority 10 [ 78.043695][ T4442] netlink: 'syz.4.41': attribute type 16 has an invalid length. [ 78.051962][ T4442] netlink: 'syz.4.41': attribute type 17 has an invalid length. [ 78.129416][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.168034][ T4442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.237626][ T4458] loop1: detected capacity change from 0 to 128 [ 79.315996][ T4463] loop0: detected capacity change from 0 to 512 [ 79.503295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.521804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 79.531801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.541798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.551791][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.561790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.571788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.581798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.591798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.601789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.342630][ T4465] tipc: Enabling of bearer rejected, already enabled [ 80.581982][ T4463] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 80.877123][ T26] audit: type=1326 audit(1754786797.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9e38cbe9 code=0x7ffc0000 [ 80.912831][ T4463] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 80.920175][ T4463] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.984137][ T4463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 81.005866][ T4463] System zones: 1-12 [ 81.007840][ T26] audit: type=1326 audit(1754786797.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0d9e38cbe9 code=0x7ffc0000 [ 81.032907][ T26] audit: type=1326 audit(1754786797.630:4): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9e38cbe9 code=0x7ffc0000 [ 81.101306][ T4463] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.48: corrupted in-inode xattr [ 81.179814][ T4463] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.48: couldn't read orphan inode 15 (err -117) [ 81.249520][ T4463] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 81.469308][ T13] cfg80211: failed to load regulatory.db [ 81.502120][ T4463] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 81.977600][ T4492] tipc: Enabling of bearer rejected, already enabled [ 83.561591][ T4509] loop3: detected capacity change from 0 to 2048 [ 83.844525][ T4500] tipc: Enabling of bearer rejected, already enabled [ 83.861634][ T4519] loop4: detected capacity change from 0 to 512 [ 83.914841][ T4522] tipc: Enabling of bearer rejected, already enabled [ 83.945985][ T4519] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 83.988676][ T4519] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 84.019111][ T4519] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 84.156902][ T4519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 84.175861][ T4519] System zones: 1-12 [ 84.239048][ T4519] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.68: corrupted in-inode xattr [ 84.254314][ T4519] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.68: couldn't read orphan inode 15 (err -117) [ 84.287623][ T4519] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 84.855741][ T4541] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 86.441977][ T4558] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 86.459750][ T4558] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.562260][ T4563] tipc: Enabling of bearer rejected, already enabled [ 86.576266][ T4555] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.642443][ T4555] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.832289][ T4569] netlink: 'syz.1.72': attribute type 16 has an invalid length. [ 86.839986][ T4569] netlink: 'syz.1.72': attribute type 17 has an invalid length. [ 86.854689][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.862166][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.877703][ T4569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.359876][ T4572] tipc: Bearer : already 2 bearers with priority 10 [ 87.367363][ T4572] tipc: Bearer : trying with adjusted priority [ 87.382057][ T4572] tipc: Enabled bearer , priority 9 [ 89.609805][ T4605] tipc: Enabling of bearer rejected, already enabled [ 89.965763][ T4612] tipc: Enabling of bearer rejected, already enabled [ 89.979521][ T4594] capability: warning: `syz.1.88' uses deprecated v2 capabilities in a way that may be insecure [ 91.341720][ T4622] bridge: RTM_NEWNEIGH with invalid ether address [ 91.678820][ T4635] loop3: detected capacity change from 0 to 512 [ 91.744896][ T4639] netlink: 'syz.0.101': attribute type 16 has an invalid length. [ 91.752744][ T4639] netlink: 'syz.0.101': attribute type 17 has an invalid length. [ 91.787499][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.795530][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.955186][ T4639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.091662][ T4635] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 92.611729][ T4635] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 92.650134][ T4635] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 92.837632][ T4649] tipc: Enabling of bearer rejected, already enabled [ 92.859668][ T4635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 92.895073][ T4635] System zones: 1-12 [ 93.030305][ T4635] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.103: corrupted in-inode xattr [ 93.058572][ T4635] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.103: couldn't read orphan inode 15 (err -117) [ 93.169286][ T4635] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 93.566570][ T4665] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 93.578624][ T4666] loop0: detected capacity change from 0 to 512 [ 93.740956][ T4666] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.110: casefold flag without casefold feature [ 93.772591][ T4666] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.110: couldn't read orphan inode 15 (err -117) [ 93.792428][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 94.134768][ T4659] tipc: Started in network mode [ 94.139688][ T4659] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 94.149788][ T4659] tipc: Enabled bearer , priority 10 [ 94.271652][ T4678] binder_alloc: 4677: binder_alloc_buf size 12280 failed, no address space [ 94.299536][ T4678] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 95.261965][ T2239] tipc: Node number set to 4269801488 [ 95.632505][ T4694] usb usb8: usbfs: process 4694 (syz.1.117) did not claim interface 0 before use [ 95.897210][ T4698] netlink: 'syz.2.115': attribute type 16 has an invalid length. [ 95.905038][ T4698] netlink: 'syz.2.115': attribute type 17 has an invalid length. [ 95.912903][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.921997][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.937793][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.945177][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.518708][ T4698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.865994][ T4708] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 96.943487][ T4708] tipc: Enabled bearer , priority 10 [ 97.343545][ T4713] tipc: Enabling of bearer rejected, already enabled [ 97.801921][ T4268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.372000][ T4268] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.380317][ T4268] usb 5-1: config 0 has no interface number 0 [ 98.416424][ T4268] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 98.468715][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.552404][ T4739] netlink: 'syz.2.132': attribute type 16 has an invalid length. [ 98.560221][ T4739] netlink: 'syz.2.132': attribute type 17 has an invalid length. [ 98.568460][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.596140][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.856358][ T4739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.375007][ T4268] usb 5-1: config 0 descriptor?? [ 99.399097][ T4744] loop3: detected capacity change from 0 to 512 [ 99.423719][ T4268] usb 5-1: bad CDC descriptors [ 99.446951][ T4746] tipc: Enabling of bearer rejected, already enabled [ 99.518805][ T4744] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 99.578885][ T4744] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 99.589763][ T4748] loop1: detected capacity change from 0 to 4096 [ 99.599484][ T4744] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.735760][ T4252] usb 5-1: USB disconnect, device number 2 [ 99.759162][ T4744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 99.835984][ T4744] System zones: 1-12 [ 99.845453][ T4744] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.134: corrupted in-inode xattr [ 99.873442][ T4744] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.134: couldn't read orphan inode 15 (err -117) [ 99.950247][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 99.966014][ T4748] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.986991][ T4752] tipc: Enabling of bearer rejected, already enabled [ 100.153558][ T4748] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 100.363899][ T4770] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 100.519892][ T4748] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 100.575927][ T4767] overlayfs: failed to resolve './bus': -2 [ 101.613138][ T4782] loop2: detected capacity change from 0 to 40427 [ 101.655869][ T4782] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.761084][ T4782] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.944973][ T4805] netlink: 'syz.3.146': attribute type 16 has an invalid length. [ 102.049286][ T4805] netlink: 'syz.3.146': attribute type 17 has an invalid length. [ 102.240953][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.327067][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.416783][ T4805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.436553][ T4817] input: syz1 as /devices/virtual/input/input10 [ 102.678292][ T4821] tipc: Enabling of bearer rejected, already enabled [ 102.972855][ T4268] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.453860][ T4832] loop1: detected capacity change from 0 to 512 [ 103.467682][ T4835] tipc: Enabling of bearer rejected, already enabled [ 103.482110][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.503812][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.513763][ T4832] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 103.531147][ T4268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.560714][ T4268] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.591996][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.605209][ T4832] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 103.624094][ T4268] usb 1-1: config 0 descriptor?? [ 103.636232][ T4832] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 103.678022][ T4832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 103.687500][ T4832] System zones: 1-12 [ 103.708384][ T4832] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.157: corrupted in-inode xattr [ 103.730322][ T4832] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 103.799310][ T4832] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 104.136915][ T4268] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.152862][ T4268] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 104.217269][ T4848] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 104.281393][ T4842] loop4: detected capacity change from 0 to 40427 [ 104.443804][ T4268] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.477640][ T4268] usb 1-1: USB disconnect, device number 2 [ 104.530972][ T4851] input: syz1 as /devices/virtual/input/input11 [ 104.859134][ T4842] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 104.886822][ T4842] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.897944][ T4842] F2FS-fs (loop4): invalid crc value [ 104.989961][ T4842] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 105.012946][ T4864] netlink: 'syz.2.167': attribute type 16 has an invalid length. [ 105.020760][ T4864] netlink: 'syz.2.167': attribute type 17 has an invalid length. [ 105.072041][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.172385][ T4842] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.189829][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.313759][ T4864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.569799][ T4842] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.587391][ T4842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.698930][ T4867] tipc: Enabling of bearer rejected, already enabled [ 105.742333][ T4872] fido_id[4872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.789523][ T26] audit: type=1804 audit(1754786822.510:5): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.162" name="/newroot/27/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 105.796160][ T4878] tipc: Enabling of bearer rejected, already enabled [ 106.004799][ T26] audit: type=1326 audit(1754786822.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2100f70be9 code=0x7ffc0000 [ 106.080264][ T26] audit: type=1326 audit(1754786822.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2100f70be9 code=0x7ffc0000 [ 106.103461][ T26] audit: type=1326 audit(1754786822.730:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2100f70be9 code=0x7ffc0000 [ 106.217046][ T26] audit: type=1326 audit(1754786822.760:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2100f70be9 code=0x7ffc0000 [ 106.230723][ T4892] input: syz1 as /devices/virtual/input/input12 [ 106.653402][ T4898] loop0: detected capacity change from 0 to 512 [ 106.685463][ T4898] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 106.708785][ T4898] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 106.720903][ T4900] loop4: detected capacity change from 0 to 2048 [ 106.746272][ T4898] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.776784][ T4898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 106.809103][ T4898] System zones: 1-12 [ 106.831665][ T4898] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.179: corrupted in-inode xattr [ 106.853963][ T4888] loop1: detected capacity change from 0 to 40427 [ 106.873328][ T4900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.889342][ T4898] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.179: couldn't read orphan inode 15 (err -117) [ 106.923646][ T4898] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 107.732627][ T4912] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 108.431813][ T4919] tipc: Enabling of bearer rejected, already enabled [ 108.559180][ T4921] loop2: detected capacity change from 0 to 1024 [ 108.586844][ T4923] tipc: Started in network mode [ 108.591875][ T4923] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 108.601891][ T4923] tipc: Enabled bearer , priority 10 [ 108.616689][ T4921] EXT4-fs (loop2): Ignoring removed orlov option [ 108.646918][ T4926] input: syz1 as /devices/virtual/input/input13 [ 108.783993][ T4921] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 108.842351][ T4251] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.913599][ T4932] overlayfs: failed to resolve './bus': -2 [ 109.140621][ T4937] netlink: 'syz.3.191': attribute type 16 has an invalid length. [ 109.148480][ T4937] netlink: 'syz.3.191': attribute type 17 has an invalid length. [ 109.151859][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 109.160714][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.261677][ T4937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.277530][ T4940] loop2: detected capacity change from 0 to 256 [ 109.313355][ T4251] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 109.339595][ T4940] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.348124][ T4251] usb 5-1: config 0 has no interface number 0 [ 109.381000][ T4251] usb 5-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 109.420087][ T4251] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.440361][ T4251] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.475105][ T4251] usb 5-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 109.494182][ T4251] usb 5-1: config 0 interface 41 has no altsetting 0 [ 109.612333][ T4268] tipc: Node number set to 4269801488 [ 109.667821][ T4251] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 109.687876][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.742115][ T4251] usb 5-1: Product: syz [ 109.766936][ T4251] usb 5-1: Manufacturer: syz [ 109.780431][ T4251] usb 5-1: SerialNumber: syz [ 109.826928][ T4251] usb 5-1: config 0 descriptor?? [ 109.863837][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.889363][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.127872][ T4960] tipc: Enabling of bearer rejected, already enabled [ 110.140539][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.158637][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.261503][ T4962] loop0: detected capacity change from 0 to 512 [ 110.358182][ T4962] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 110.365230][ T4970] input: syz1 as /devices/virtual/input/input14 [ 110.410224][ T4962] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 110.481820][ T4962] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 110.513297][ T4962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 110.591145][ T4978] loop2: detected capacity change from 0 to 128 [ 110.603992][ T4962] System zones: 1-12 [ 110.612740][ T4962] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.199: corrupted in-inode xattr [ 110.633973][ T4962] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 110.650724][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 110.935961][ T4981] tipc: Enabling of bearer rejected, already enabled [ 110.969231][ T4983] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 111.188638][ T4251] CoreChips: probe of 5-1:0.41 failed with error -71 [ 111.217667][ T4251] usb 5-1: USB disconnect, device number 3 [ 111.466207][ T1222] attempt to access beyond end of device [ 111.466207][ T1222] loop2: rw=1, want=1041, limit=128 [ 111.778709][ T4987] netlink: 'syz.0.207': attribute type 16 has an invalid length. [ 111.786678][ T4987] netlink: 'syz.0.207': attribute type 17 has an invalid length. [ 111.798251][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.830901][ T4987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.935219][ T4996] tipc: Enabling of bearer rejected, already enabled [ 112.448514][ T5008] input: syz1 as /devices/virtual/input/input15 [ 113.069281][ T5016] tipc: Enabling of bearer rejected, already enabled [ 113.356766][ T5018] loop2: detected capacity change from 0 to 512 [ 113.897163][ T5022] loop0: detected capacity change from 0 to 256 [ 114.861746][ C1] sched: RT throttling activated [ 115.387762][ T5022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 115.589546][ T5022] 9pnet: Insufficient options for proto=fd [ 115.883149][ T5026] loop4: detected capacity change from 0 to 512 [ 115.901634][ T5018] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 115.962301][ T5028] loop1: detected capacity change from 0 to 1024 [ 115.995279][ T5026] EXT4-fs (loop4): Ignoring removed orlov option [ 116.045804][ T5028] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext3 [ 116.087599][ T5026] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 116.126501][ T5026] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.118746][ T5018] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 117.125953][ T5018] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 117.143165][ T5018] EXT4-fs: failed to create workqueue [ 117.148559][ T5018] EXT4-fs (loop2): mount failed [ 117.188571][ T5036] binder_alloc: 5035: binder_alloc_buf size 12280 failed, no address space [ 117.229124][ T26] audit: type=1326 audit(1754786833.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 117.251899][ T5036] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 117.396219][ T5039] tipc: Enabling of bearer rejected, already enabled [ 117.435045][ T26] audit: type=1326 audit(1754786833.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 118.563170][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.600875][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.611655][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.460836][ T5046] loop0: detected capacity change from 0 to 256 [ 120.222113][ T26] audit: type=1326 audit(1754786833.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 120.556004][ T5043] netlink: 'syz.2.225': attribute type 16 has an invalid length. [ 120.563895][ T5043] netlink: 'syz.2.225': attribute type 17 has an invalid length. [ 120.573687][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.586309][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.615126][ T5043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.668876][ T26] audit: type=1326 audit(1754786833.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 120.896749][ T26] audit: type=1326 audit(1754786833.950:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 120.919115][ T26] audit: type=1326 audit(1754786833.950:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 120.949153][ T26] audit: type=1326 audit(1754786833.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 121.017277][ T26] audit: type=1326 audit(1754786833.950:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 121.220541][ T26] audit: type=1326 audit(1754786833.950:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 121.397463][ T26] audit: type=1326 audit(1754786833.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f702be9 code=0x7ffc0000 [ 121.942614][ T5071] input: syz1 as /devices/virtual/input/input16 [ 121.951067][ T5069] tipc: Enabling of bearer rejected, already enabled [ 122.124829][ T5075] loop1: detected capacity change from 0 to 512 [ 122.173506][ T5075] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.210835][ T5075] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.245154][ T5075] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.281133][ T5075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 122.292506][ T5075] System zones: 1-12 [ 122.314567][ T5075] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.235: corrupted in-inode xattr [ 122.340586][ T5075] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.235: couldn't read orphan inode 15 (err -117) [ 122.377685][ T5075] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 122.583007][ T5083] tipc: Enabling of bearer rejected, already enabled [ 122.800505][ T5068] loop2: detected capacity change from 0 to 40427 [ 122.868890][ T5068] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 123.022770][ T5092] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 123.751352][ T5095] netlink: 'syz.4.242': attribute type 16 has an invalid length. [ 123.759244][ T5095] netlink: 'syz.4.242': attribute type 17 has an invalid length. [ 123.770817][ T5095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.815686][ T5095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.027855][ T5108] input: syz1 as /devices/virtual/input/input17 [ 124.067709][ T4193] [ 124.070125][ T4193] ====================================================== [ 124.077150][ T4193] WARNING: possible circular locking dependency detected [ 124.084293][ T4193] 5.15.189-syzkaller #0 Not tainted [ 124.089492][ T4193] ------------------------------------------------------ [ 124.096519][ T4193] syz-executor/4193 is trying to acquire lock: [ 124.102694][ T4193] ffff888023205db8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 124.111582][ T4193] [ 124.111582][ T4193] but task is already holding lock: [ 124.118939][ T4193] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 124.129078][ T4193] [ 124.129078][ T4193] which lock already depends on the new lock. [ 124.129078][ T4193] [ 124.139477][ T4193] [ 124.139477][ T4193] the existing dependency chain (in reverse order) is: [ 124.148499][ T4193] [ 124.148499][ T4193] -> #2 (hrtimer_bases.lock){-.-.}-{2:2}: [ 124.156398][ T4193] _raw_spin_lock_irqsave+0xa4/0xf0 [ 124.162125][ T4193] hrtimer_start_range_ns+0xff/0xc20 [ 124.167945][ T4193] kvfree_call_rcu+0x60d/0x7c0 [ 124.173226][ T4193] rtnl_register_internal+0x44e/0x540 [ 124.179114][ T4193] rtnl_register+0x2e/0x70 [ 124.184047][ T4193] ip_rt_init+0x2e0/0x3a0 [ 124.188896][ T4193] ip_init+0xa/0x20 [ 124.193229][ T4193] inet_init+0x28b/0x3a0 [ 124.198108][ T4193] do_one_initcall+0x1ee/0x680 [ 124.203395][ T4193] do_initcall_level+0x137/0x1f0 [ 124.208850][ T4193] do_initcalls+0x4b/0x90 [ 124.213706][ T4193] kernel_init_freeable+0x3ce/0x560 [ 124.219419][ T4193] kernel_init+0x19/0x1b0 [ 124.224262][ T4193] ret_from_fork+0x1f/0x30 [ 124.229195][ T4193] [ 124.229195][ T4193] -> #1 (krc.lock){..-.}-{2:2}: [ 124.236228][ T4193] _raw_spin_lock+0x2a/0x40 [ 124.241249][ T4193] kvfree_call_rcu+0x186/0x7c0 [ 124.246540][ T4193] trie_delete_elem+0x58c/0x710 [ 124.251910][ T4193] 0xffffffffa000ce6a [ 124.256417][ T4193] bpf_trace_run2+0x15b/0x2d0 [ 124.261610][ T4193] __bpf_trace_kfree+0x6e/0x90 [ 124.266891][ T4193] kfree+0x25f/0x2a0 [ 124.271324][ T4193] tomoyo_realpath_from_path+0x10b/0x610 [ 124.277502][ T4193] tomoyo_path_perm+0x1cd/0x510 [ 124.282898][ T4193] security_inode_getattr+0xcf/0x120 [ 124.288710][ T4193] vfs_getattr+0x26/0x3a0 [ 124.293560][ T4193] vfs_statx+0x149/0x4d0 [ 124.298325][ T4193] __x64_sys_newfstatat+0x12c/0x1b0 [ 124.304054][ T4193] do_syscall_64+0x4c/0xa0 [ 124.308995][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.315418][ T4193] [ 124.315418][ T4193] -> #0 (&trie->lock){..-.}-{2:2}: [ 124.322705][ T4193] __lock_acquire+0x2c33/0x7c60 [ 124.328075][ T4193] lock_acquire+0x197/0x3f0 [ 124.333103][ T4193] _raw_spin_lock_irqsave+0xa4/0xf0 [ 124.338832][ T4193] trie_delete_elem+0x90/0x710 [ 124.344121][ T4193] bpf_prog_1db1603a7cfa36fb+0x3d/0x6e4 [ 124.350198][ T4193] bpf_trace_run2+0x15b/0x2d0 [ 124.355403][ T4193] enqueue_hrtimer+0x314/0x370 [ 124.360707][ T4193] hrtimer_start_range_ns+0xa7e/0xc20 [ 124.366609][ T4193] do_nanosleep+0x1a1/0x760 [ 124.371647][ T4193] hrtimer_nanosleep+0x2f7/0x520 [ 124.377116][ T4193] __se_sys_clock_nanosleep+0x2e6/0x370 [ 124.383194][ T4193] do_syscall_64+0x4c/0xa0 [ 124.388278][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.394709][ T4193] [ 124.394709][ T4193] other info that might help us debug this: [ 124.394709][ T4193] [ 124.404971][ T4193] Chain exists of: [ 124.404971][ T4193] &trie->lock --> krc.lock --> hrtimer_bases.lock [ 124.404971][ T4193] [ 124.417332][ T4193] Possible unsafe locking scenario: [ 124.417332][ T4193] [ 124.424781][ T4193] CPU0 CPU1 [ 124.430159][ T4193] ---- ---- [ 124.435514][ T4193] lock(hrtimer_bases.lock); [ 124.440185][ T4193] lock(krc.lock); [ 124.446503][ T4193] lock(hrtimer_bases.lock); [ 124.453692][ T4193] lock(&trie->lock); [ 124.457752][ T4193] [ 124.457752][ T4193] *** DEADLOCK *** [ 124.457752][ T4193] [ 124.465887][ T4193] 2 locks held by syz-executor/4193: [ 124.471163][ T4193] #0: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 124.481595][ T4193] #1: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 124.490925][ T4193] [ 124.490925][ T4193] stack backtrace: [ 124.496817][ T4193] CPU: 0 PID: 4193 Comm: syz-executor Not tainted 5.15.189-syzkaller #0 [ 124.505135][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.515193][ T4193] Call Trace: [ 124.518471][ T4193] [ 124.521416][ T4193] dump_stack_lvl+0x168/0x230 [ 124.526092][ T4193] ? load_image+0x3b0/0x3b0 [ 124.530594][ T4193] ? show_regs_print_info+0x20/0x20 [ 124.535786][ T4193] ? print_circular_bug+0x12b/0x1a0 [ 124.540979][ T4193] check_noncircular+0x274/0x310 [ 124.545908][ T4193] ? add_chain_block+0x940/0x940 [ 124.550851][ T4193] ? lockdep_lock+0xdc/0x1e0 [ 124.555436][ T4193] ? mark_lock+0x94/0x320 [ 124.559754][ T4193] ? mark_lock+0x94/0x320 [ 124.564074][ T4193] ? _find_first_zero_bit+0xce/0xf0 [ 124.569269][ T4193] __lock_acquire+0x2c33/0x7c60 [ 124.574125][ T4193] ? __lock_acquire+0x12d9/0x7c60 [ 124.579139][ T4193] ? verify_lock_unused+0x140/0x140 [ 124.584341][ T4193] lock_acquire+0x197/0x3f0 [ 124.588839][ T4193] ? trie_delete_elem+0x90/0x710 [ 124.593779][ T4193] ? verify_lock_unused+0x140/0x140 [ 124.598975][ T4193] ? read_lock_is_recursive+0x10/0x10 [ 124.604347][ T4193] _raw_spin_lock_irqsave+0xa4/0xf0 [ 124.609539][ T4193] ? trie_delete_elem+0x90/0x710 [ 124.614468][ T4193] ? _raw_spin_lock+0x40/0x40 [ 124.619138][ T4193] trie_delete_elem+0x90/0x710 [ 124.623899][ T4193] bpf_prog_1db1603a7cfa36fb+0x3d/0x6e4 [ 124.629435][ T4193] bpf_trace_run2+0x15b/0x2d0 [ 124.634116][ T4193] ? ktime_get_real_ts64+0x420/0x420 [ 124.639401][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 124.644682][ T4193] ? bpf_trace_run1+0x2d0/0x2d0 [ 124.649535][ T4193] ? debug_object_activate+0x2d2/0x480 [ 124.654988][ T4193] ? _raw_spin_lock+0x40/0x40 [ 124.659666][ T4193] enqueue_hrtimer+0x314/0x370 [ 124.664433][ T4193] hrtimer_start_range_ns+0xa7e/0xc20 [ 124.669799][ T4193] do_nanosleep+0x1a1/0x760 [ 124.674303][ T4193] ? usleep_range_state+0x180/0x180 [ 124.679499][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 124.684522][ T4193] ? kernel_waitid+0x370/0x370 [ 124.689278][ T4193] hrtimer_nanosleep+0x2f7/0x520 [ 124.694212][ T4193] ? nanosleep_copyout+0x110/0x110 [ 124.699326][ T4193] ? __remove_hrtimer+0x3a0/0x3a0 [ 124.704364][ T4193] ? timespec64_add_safe+0x1d0/0x1d0 [ 124.709644][ T4193] __se_sys_clock_nanosleep+0x2e6/0x370 [ 124.715184][ T4193] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 124.720836][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 124.726026][ T4193] do_syscall_64+0x4c/0xa0 [ 124.730451][ T4193] ? clear_bhb_loop+0x30/0x80 [ 124.735119][ T4193] ? clear_bhb_loop+0x30/0x80 [ 124.739784][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.745696][ T4193] RIP: 0033:0x7f321d6864a5 [ 124.750104][ T4193] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 124.769708][ T4193] RSP: 002b:00007fff3e6455f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 124.778126][ T4193] RAX: ffffffffffffffda RBX: 0000000000000067 RCX: 00007f321d6864a5 [ 124.786101][ T4193] RDX: 00007fff3e645630 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.794084][ T4193] RBP: 00007fff3e64569c R08: 0000000000000000 R09: 0000000000000000 [ 124.802043][ T4193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 124.810001][ T4193] R13: 00000000000927c0 R14: 000000000001e397 R15: 00007fff3e6456f0 [ 124.818020][ T4193] [ 132.663374][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.669736][ T1427] ieee802154 phy1 wpan1: encryption failed: -22