last executing test programs: 4.189678382s ago: executing program 4: pipe(&(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x52a, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x3000000, 0x0}}], 0xffffff80, 0x10040) 3.562570498s ago: executing program 2: dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x2, 0x103ff}) 3.41460787s ago: executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x80) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, &(0x7f00000000c0), 0x4) 2.744213092s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x7b4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x6e9, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8c298a6e4c4ab6821877bbf7fde12a391b573bd50a781ac1115f3e72674baf62f9405083b6331da7174f13911d20475613582dc7801443680a61d099258b7df15fc1d913b7860", @generic="81d7ac5d3efecf0e18dd016c4310ce963565cfe3bc291959f801b2d51e83eef24d4c95722274860df21d7484a4d1f10bed428967226cf793a7", @generic="4c9712153c8362d4dfa8e9b2ea9a1478e1df880d7429c71486d103e8959e9d1f13ed12f91eeffc17f35bf05c77f8a70399c03c5dcd2bb30aed516a520442f47a08746667e28e1dde4f593c40e7f69f2d02cac16a8d936e663a5e2a7fa7fed5479c6207efbaf95fc5bde18f11db5b7c1b435e6ac99084d36ac8eaa0dd07d8", @generic="de9efe3ddea2028f7234f17bc0e9123b77eef427e6bdf98d3bc2256fe078b201feb7c8d659cfa598a2ceea6fe72e", @generic="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"]}]}, 0x7b4}}, 0x0) 2.548413822s ago: executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) 2.445752348s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000017c0)=""/238, 0xee}], 0x1, 0x3000000, 0x0) 2.333486955s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x7) 2.272083794s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x332, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8c298a6e4c4ab6821877bbf7fde12a391b573bd50a781ac1115f3e72674baf62f9405083b6331da7174f13911d20475613582dc7801443680a61d099258b7df", @generic="81d7ac5d3efecf0e18dd016c4310ce963565cfe3bc291959f801b2d51e83eef24d4c95722274860df21d7484a4d1f10bed428967226cf793a7", @generic="4c9712153c8362d4dfa8e9b2ea9a1478e1df880d7429c71486d103e8959e9d1f13ed12f91eeffc17f35bf05c77f8a70399c03c5dcd2bb30aed516a520442f47a08746667e28e1dde4f593c40e7f69f2d02cac16a8d936e663a5e2a7fa7fed5479c6207efbaf95fc5bde18f11db5b7c1b435e6ac99084d36ac8eaa0dd07d8", @generic="de9efe3ddea2028f7234f17bc0e9123b77eef427e6bdf98d3bc2256fe078b201feb7c8d659cfa598a2ceea6fe72e", @generic="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"]}]}, 0x3fc}}, 0x0) 2.142735084s ago: executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 2.055671387s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.958632782s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004662b, 0x20001412) 1.719720838s ago: executing program 1: mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) fcntl$setstatus(r0, 0x4, 0x0) r5 = dup(r0) pwritev2(r5, &(0x7f0000000300)=[{&(0x7f0000000680)="bb", 0x1}], 0x1, 0x1000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 1.661638827s ago: executing program 2: memfd_create(0x0, 0x0) memfd_create(&(0x7f0000000440)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82a\x1e\x85;[6\xe6\x98\x11\xd4\xb0\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RF\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\x16ix}\xc0%\x06r\xe2\xc7I\xff\xb1\x0e\x83\xd4\xc0', 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, 0x0, 0x0) 1.521525628s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000680), 0x12) 1.354333844s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x7b4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x6e9, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8c298a6e4c4ab6821877bbf7fde12a391b573bd50a781ac1115f3e72674baf62f9405083b6331da7174f13911d20475613582dc7801443680a61d099258b7df15fc1d913b7860", @generic="81d7ac5d3efecf0e18dd016c4310ce963565cfe3bc291959f801b2d51e83eef24d4c95722274860df21d7484a4d1f10bed428967226cf793a7", @generic="4c9712153c8362d4dfa8e9b2ea9a1478e1df880d7429c71486d103e8959e9d1f13ed12f91eeffc17f35bf05c77f8a70399c03c5dcd2bb30aed516a520442f47a08746667e28e1dde4f593c40e7f69f2d02cac16a8d936e663a5e2a7fa7fed5479c6207efbaf95fc5bde18f11db5b7c1b435e6ac99084d36ac8eaa0dd07d8", @generic="de9efe3ddea2028f7234f17bc0e9123b77eef427e6bdf98d3bc2256fe078b201feb7c8d659cfa598a2ceea6fe72e", @generic="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"]}]}, 0x7b4}}, 0x0) 1.226666463s ago: executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, &(0x7f00000000c0), 0x4) 972.507642ms ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000017c0)=""/238, 0xee}], 0x1, 0x3000000, 0x0) 842.472952ms ago: executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) 746.353337ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x41}, 0x48) 704.494903ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x332, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8c298a6e4c4ab6821877bbf7fde12a391b573bd50a781ac1115f3e72674baf62f9405083b6331da7174f13911d20475613582dc7801443680a61d099258b7df", @generic="81d7ac5d3efecf0e18dd016c4310ce963565cfe3bc291959f801b2d51e83eef24d4c95722274860df21d7484a4d1f10bed428967226cf793a7", @generic="4c9712153c8362d4dfa8e9b2ea9a1478e1df880d7429c71486d103e8959e9d1f13ed12f91eeffc17f35bf05c77f8a70399c03c5dcd2bb30aed516a520442f47a08746667e28e1dde4f593c40e7f69f2d02cac16a8d936e663a5e2a7fa7fed5479c6207efbaf95fc5bde18f11db5b7c1b435e6ac99084d36ac8eaa0dd07d8", @generic="de9efe3ddea2028f7234f17bc0e9123b77eef427e6bdf98d3bc2256fe078b201feb7c8d659cfa598a2ceea6fe72e", @generic="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"]}]}, 0x3fc}}, 0x0) 527.4708ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 481.080447ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000002000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 424.481076ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004662b, 0x20001412) 321.307712ms ago: executing program 3: memfd_create(0x0, 0x0) memfd_create(&(0x7f0000000440)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82a\x1e\x85;[6\xe6\x98\x11\xd4\xb0\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RF\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\x16ix}\xc0%\x06r\xe2\xc7I\xff\xb1\x0e\x83\xd4\xc0', 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, 0x0, 0x0) 272.314639ms ago: executing program 2: dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x2, 0x103ff}) 254.263742ms ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x7b4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x6e9, 0x0, 0x0, 0x1, [@generic="529cfdf94f2e8f73895cb31906da80346032dcb3069a4f518751cbb1965f7a0eacfad285a83513b016c15862e2126c6d367bf507d8c298a6e4c4ab6821877bbf7fde12a391b573bd50a781ac1115f3e72674baf62f9405083b6331da7174f13911d20475613582dc7801443680a61d099258b7df15fc1d913b7860", @generic="81d7ac5d3efecf0e18dd016c4310ce963565cfe3bc291959f801b2d51e83eef24d4c95722274860df21d7484a4d1f10bed428967226cf793a7", @generic="4c9712153c8362d4dfa8e9b2ea9a1478e1df880d7429c71486d103e8959e9d1f13ed12f91eeffc17f35bf05c77f8a70399c03c5dcd2bb30aed516a520442f47a08746667e28e1dde4f593c40e7f69f2d02cac16a8d936e663a5e2a7fa7fed5479c6207efbaf95fc5bde18f11db5b7c1b435e6ac99084d36ac8eaa0dd07d8", @generic="de9efe3ddea2028f7234f17bc0e9123b77eef427e6bdf98d3bc2256fe078b201feb7c8d659cfa598a2ceea6fe72e", @generic="e043e8333df450e01735a08ccbf2a1fc7118cbb4e67628435957f1167575dd64ae83bfb9035cf19d44d7b674ffb9dfd82d22b049f78a86441f85930ebce4c464002f5405d0b25c5b0417c42ab08c1805c043e02c4a3e511742e18e793d1868e183f736df9a01d1bd71f61eef9fcbba6fee283a859b71585dbd566fc82e12f1b3a551e15b83308402c6b2dcd65753f6ffec815c98a3ec6261c72ba4c0213df64068b565d5d00d8e4b6562ac02fd061efc0b7715f0746740c4ab0656665e50efc20cb2eb49070ba1b5729ed754735fbeafc2f0ef21a99384ac32804ccc9138491e74a46d494d5f440c699171f1053a660a56be0b970b28f09256e89f152da2a151794dba3a0e3b17a26121be70b2f36cd1e8fb863d09e6869f2378148c94fffce4c34fbfacb55d4f285d1adef95db029228803295419fddd5d6407ecb0023caec53f40b98f81640d409039394d9629b12d8be717124670c0edce640f5d12ed249ef5a7a1ed0d05cb08b7d250c6d48d919bef98927a8dded1021b502d796451e745b1feecdb92c06488961a7019a75b559f669c91fa0fea774dbb1e6bcf58ff16a89a89330bcfbcc8a93444f0793f6dd50955a438c8aab0b578fe50fcc17adfe5a70980a1dd05fb3943ad40a4f485723d01bb2aa1e861fb669112e9967f570c1ffb0c8f1ca22c96e4eeff37c2404699acb08556338b289db9804d5087111f07052875e35179fd46871b12fee7755cca05a940344719ffcb1da7b33c7d3a8bf651d79a79805aa8d1d1277d2b50ca69c2de9ae3002e62ae44cf8419d8dac80b98271816afe9e64ea6399f83d3e86563033b658d159a89341907dc2bff21687f301e9270741b54079750d8236ef0da4fb3e995b6c15c886335492460a8e9c63bb2f23f1eaf5295d67f7c16dad2c42d33442a14676147e3661805840d2a282cfd6bc055cfbaa161ac6c467b657f481b5c7104d7ec7ab57e4921d30b8bc2bd2d92a74e58008c84d3c97b6d276e1c409c8c354ed4d044053d4e5d58f69a1d09d2067626e3539c852518e6fe2c44efc0eed24d0c0c7d6928bf8e8ff8ab1aa3f7e47e3dd91465eb2b0398b6e81fe3f95385173e03119f8ad4c6e13d0b3321696446c64c8c115c2c7d4e24a1818f458b90f09a4aa514c78a9b2aee2c7e04a8c9f7e102b3e0523f514a7cc2f35139158acae00372a27dd62147f40f3f398f8823e916070554b4b3474fa8c54cbc68feea70d35bec01078df7b1253b8e37745037fb84da4b98ade5766d11e5b35ea73f3fa1467665d47a4348036b93b4dce01ec783c66ae10a695421f1c948745995be4777be56af994b3de6cde8d26d5915df74dd5a09800ffa7f8d68c383152a8adedb8892bb23433ef1920611b19b7e89779c96a5ee737b00d3bc2097fdb3e6ef110a36b02d5b158d7fe49695109034ba4bafbe19ede8f6a695b074f87c57392cf00a1c375253462fb89eb3d5b44d2ee670e0bace64fde50d914168d9c11a81b874c65de9b9034e473bfe14df4a8b329379dc0ae8fcba45b2a4e32cc8c0d31a7d3b6b0a3e7bae6466a872dc721a7b739e8a9d9ceae8099a1761289b443b975a4b8d6f9846e00daf95e8fa614f73e2f470a47b25fbcaadc39c800e525af60cb5b49fa1016546b8e67bad14d81c55b53877801907addf9d7dea2a2d2f5211cc5360b4062ce6caa547977feeaa26e34f508494dfb0f7ef744109bf593ad58022457c84cf4e2c0ef316c5bbdb15ccf9cd398a33c7a1c444ad6361ed4328dc912eb2595b3ccacae91887e2621b9f86b00237f4193937341bedb1e44821464201560b993a93cb1b8af2c0e2214b2fbe194f62c4eead38afdfa1ab46bb3d717d5122759d03b07c4604b3d2b552977eb6371a111bd57d986360dfe7a1e3c1232dc549b777823acadd3608c6c31bcca3bb57b97e3520334f887b55c2c952d4767529039b5697dd23b328ec1a3aa235ee7c8246ca7cb4f1b65f926c1e0bc1664986f0"]}]}, 0x7b4}}, 0x0) 161.918036ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 117.759923ms ago: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xaece, 0x0) preadv(r1, &(0x7f0000000780)=[{&(0x7f00000017c0)=""/238, 0xee}], 0x1, 0x3000000, 0x0) 64.055771ms ago: executing program 4: pipe(&(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x52a, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x3000000, 0x0}}], 0xffffff80, 0x10040) 0s ago: executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. 2024/05/31 05:44:48 fuzzer started 2024/05/31 05:44:48 dialing manager at 10.128.0.163:30022 [ 51.138584][ T3547] cgroup: Unknown subsys name 'net' [ 51.280537][ T3547] cgroup: Unknown subsys name 'rlimit' 2024/05/31 05:44:50 starting 5 executor processes [ 52.343452][ T3552] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.601323][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.612082][ T3573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.624681][ T3581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.632074][ T3581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.632227][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.640277][ T3581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.647580][ T3582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.655481][ T3581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.661982][ T3582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.668914][ T3581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.675234][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.682510][ T3581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.689253][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.697475][ T3581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.703155][ T3582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.711624][ T3581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.724126][ T3582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.724471][ T3581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.739638][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.747062][ T3583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.747521][ T3581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.754300][ T3583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.762061][ T3581] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.775913][ T3581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.776349][ T3584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.790583][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.790963][ T3584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.791240][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.806314][ T3569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.812198][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.237298][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 54.256196][ T3572] chnl_net:caif_netlink_parms(): no params data found [ 54.331925][ T3577] chnl_net:caif_netlink_parms(): no params data found [ 54.344872][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 54.386003][ T3579] chnl_net:caif_netlink_parms(): no params data found [ 54.470467][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.480825][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.489552][ T3572] device bridge_slave_0 entered promiscuous mode [ 54.500672][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.507779][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.515935][ T3568] device bridge_slave_0 entered promiscuous mode [ 54.527024][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.534382][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.542112][ T3568] device bridge_slave_1 entered promiscuous mode [ 54.571374][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.578754][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.587475][ T3572] device bridge_slave_1 entered promiscuous mode [ 54.619751][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.626972][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.635754][ T3567] device bridge_slave_0 entered promiscuous mode [ 54.662213][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.669727][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.677667][ T3577] device bridge_slave_0 entered promiscuous mode [ 54.684958][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.692006][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.700547][ T3567] device bridge_slave_1 entered promiscuous mode [ 54.718941][ T3572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.730767][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.741000][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.748846][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.757604][ T3577] device bridge_slave_1 entered promiscuous mode [ 54.781216][ T3572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.792130][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.820442][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.828001][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.836219][ T3579] device bridge_slave_0 entered promiscuous mode [ 54.876720][ T3577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.888466][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.897978][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.905346][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.913432][ T3579] device bridge_slave_1 entered promiscuous mode [ 54.922906][ T3572] team0: Port device team_slave_0 added [ 54.931058][ T3568] team0: Port device team_slave_0 added [ 54.938528][ T3577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.956416][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.974974][ T3572] team0: Port device team_slave_1 added [ 54.990000][ T3568] team0: Port device team_slave_1 added [ 55.023506][ T3579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.041736][ T3577] team0: Port device team_slave_0 added [ 55.063913][ T3579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.089126][ T3577] team0: Port device team_slave_1 added [ 55.097366][ T3567] team0: Port device team_slave_0 added [ 55.104598][ T3572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.111560][ T3572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.137769][ T3572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.160314][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.167414][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.193638][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.218072][ T3567] team0: Port device team_slave_1 added [ 55.232428][ T3572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.239470][ T3572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.265670][ T3572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.279636][ T3579] team0: Port device team_slave_0 added [ 55.286670][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.293731][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.319750][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.351775][ T3579] team0: Port device team_slave_1 added [ 55.363127][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.370098][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.396288][ T3577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.408436][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.416550][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.452047][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.464837][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.471814][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.497808][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.538007][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.545122][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.571117][ T3577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.605466][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.612430][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.638841][ T3579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.657294][ T3567] device hsr_slave_0 entered promiscuous mode [ 55.664209][ T3567] device hsr_slave_1 entered promiscuous mode [ 55.674708][ T3572] device hsr_slave_0 entered promiscuous mode [ 55.681429][ T3572] device hsr_slave_1 entered promiscuous mode [ 55.688631][ T3572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.696704][ T3572] Cannot create hsr debugfs directory [ 55.710764][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.718078][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.744364][ T3579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.815423][ T3577] device hsr_slave_0 entered promiscuous mode [ 55.822529][ T3577] device hsr_slave_1 entered promiscuous mode [ 55.830185][ T3577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.838132][ T3585] Bluetooth: hci4: command tx timeout [ 55.843080][ T3577] Cannot create hsr debugfs directory [ 55.852763][ T3568] device hsr_slave_0 entered promiscuous mode [ 55.859470][ T3568] device hsr_slave_1 entered promiscuous mode [ 55.866211][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.873936][ T3568] Cannot create hsr debugfs directory [ 55.903248][ T3585] Bluetooth: hci0: command tx timeout [ 55.908968][ T3585] Bluetooth: hci1: command tx timeout [ 55.914905][ T3583] Bluetooth: hci2: command tx timeout [ 55.919314][ T3585] Bluetooth: hci3: command tx timeout [ 55.936882][ T3579] device hsr_slave_0 entered promiscuous mode [ 55.943613][ T3579] device hsr_slave_1 entered promiscuous mode [ 55.950114][ T3579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.957904][ T3579] Cannot create hsr debugfs directory [ 56.238778][ T3572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.249470][ T3572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.258768][ T3572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.273954][ T3572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.325650][ T3568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.339501][ T3568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.352583][ T3568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.366648][ T3568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.414219][ T3567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.435902][ T3567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.445855][ T3567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.476702][ T3567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.503847][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.570119][ T3579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.584079][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.600339][ T3579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.610033][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.620783][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.630298][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.639319][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.648202][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.655648][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.666085][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.689510][ T3579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.699684][ T3579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.712265][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.724100][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.732488][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.739628][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.773578][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.793370][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.804533][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.813751][ T3577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.824840][ T3577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.843951][ T3577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.852399][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.862173][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.870872][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.879537][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.889157][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.902818][ T3577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.934972][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.942843][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.950481][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.959786][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.969472][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.009311][ T3572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.023478][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.031377][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.041474][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.050554][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.059242][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.067595][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.074709][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.082382][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.090984][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.099311][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.106432][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.115390][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.139761][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.194768][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.209341][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.219994][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.230102][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.238858][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.248247][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.257645][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.273274][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.281722][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.290990][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.299612][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.341031][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.357638][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.375389][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.389884][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.398762][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.442475][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.458038][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.467532][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.474695][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.482820][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.491667][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.500743][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.507903][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.515743][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.523538][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.533987][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.557681][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.577792][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.587437][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.596295][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.605792][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.619774][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.637597][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.645992][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.654338][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.662215][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.674172][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.687178][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.696076][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.704887][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.711993][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.741635][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.749936][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.758794][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.767360][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.774490][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.782068][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.791836][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.800641][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.809362][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.817876][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.826898][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.835517][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.844178][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.862127][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.875793][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.903110][ T3585] Bluetooth: hci4: command tx timeout [ 57.909610][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.919188][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.928098][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.936891][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.963070][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.970985][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.983038][ T3585] Bluetooth: hci3: command tx timeout [ 57.989676][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.997946][ T3585] Bluetooth: hci2: command tx timeout [ 58.003527][ T3585] Bluetooth: hci1: command tx timeout [ 58.008930][ T3585] Bluetooth: hci0: command tx timeout [ 58.026387][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.040963][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.066334][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.075035][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.082549][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.094770][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.102418][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.114252][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.122585][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.133035][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.143462][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.150586][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.158664][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.167593][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.176209][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.183333][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.192451][ T3572] device veth0_vlan entered promiscuous mode [ 58.227195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.240329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.249613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.261014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.271571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.286121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.297758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.306972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.315905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.326718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.334641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.346435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.364092][ T3572] device veth1_vlan entered promiscuous mode [ 58.388671][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.397764][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.406711][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.415580][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.424521][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.434117][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.445497][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.463187][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.471677][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.481989][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.510982][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.531863][ T3568] device veth0_vlan entered promiscuous mode [ 58.555016][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.564468][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.581492][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.603721][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.614920][ T3568] device veth1_vlan entered promiscuous mode [ 58.637715][ T3572] device veth0_macvtap entered promiscuous mode [ 58.678740][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.698792][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.715147][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.724411][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.739488][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.754792][ T3572] device veth1_macvtap entered promiscuous mode [ 58.783101][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.791207][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.824795][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.870821][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.894421][ T3568] device veth0_macvtap entered promiscuous mode [ 58.907802][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.915958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.933817][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.943605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.953773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.963484][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.986766][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.011402][ T3568] device veth1_macvtap entered promiscuous mode [ 59.021267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.038767][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.060709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.079869][ T3572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.090852][ T3572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.106611][ T3572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.116180][ T3572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.168987][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.178769][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.188361][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.196133][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.211265][ T3579] device veth0_vlan entered promiscuous mode [ 59.220520][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.231396][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.243751][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.256921][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.267188][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.275746][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.285266][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.300602][ T3579] device veth1_vlan entered promiscuous mode [ 59.320828][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.331677][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.344629][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.353758][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.361793][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.370277][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.378909][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.388104][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.396843][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.406095][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.418915][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.442193][ T3567] device veth0_vlan entered promiscuous mode [ 59.451959][ T3568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.461226][ T3568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.471120][ T3568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.479886][ T3568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.498385][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.515142][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.530037][ T3567] device veth1_vlan entered promiscuous mode [ 59.547119][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.555227][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.563612][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.582551][ T3579] device veth0_macvtap entered promiscuous mode [ 59.594899][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.608601][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.649504][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.658224][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.667049][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.676220][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.693606][ T3579] device veth1_macvtap entered promiscuous mode [ 59.719675][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.729951][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.739651][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.750472][ T3577] device veth0_vlan entered promiscuous mode [ 59.770210][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.778327][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.802359][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.802516][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.813519][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.831246][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.838650][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.850019][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.861799][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.876444][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.887488][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897641][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.909474][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.920550][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.932967][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.941011][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.950383][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.959185][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.968139][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.977203][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.985920][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.993420][ T3585] Bluetooth: hci4: command tx timeout [ 60.008634][ T3567] device veth0_macvtap entered promiscuous mode [ 60.023249][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.031978][ T3579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.041559][ T3579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.051822][ T3579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.063217][ T3585] Bluetooth: hci1: command tx timeout [ 60.064010][ T3583] Bluetooth: hci2: command tx timeout [ 60.072044][ T3577] device veth1_vlan entered promiscuous mode [ 60.080377][ T3584] Bluetooth: hci0: command tx timeout [ 60.080938][ T3585] Bluetooth: hci3: command tx timeout [ 60.102426][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.111084][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.114953][ T3567] device veth1_macvtap entered promiscuous mode [ 60.153513][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.161782][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.170043][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.178257][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.206284][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.224249][ T3636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.232219][ T3636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.240839][ T3577] device veth0_macvtap entered promiscuous mode [ 60.255794][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.266451][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.274705][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.282440][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.290421][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.298936][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.308613][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.321229][ T3577] device veth1_macvtap entered promiscuous mode [ 60.334490][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.348403][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.358628][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.369388][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.380005][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.391309][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.404036][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.414104][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.425021][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.443526][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.454738][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.465145][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.478117][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.489131][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.509556][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.521410][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.531935][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.543231][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.553230][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.564024][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.574387][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.586043][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.597807][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.605853][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.614605][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.623349][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.632238][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.641580][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.650469][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.659175][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.688790][ T3567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.718008][ T3567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.732143][ T3567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742933][ T3567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.772260][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.789737][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.801608][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.812351][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.822505][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.833385][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.843859][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.854374][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.867124][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.875526][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.885463][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.930678][ T3577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962877][ T3577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.998711][ T3577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.008061][ T3577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.214323][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.287901][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.740864][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.761077][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.778752][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.818555][ T3663] loop1: detected capacity change from 0 to 512 [ 61.842469][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.897545][ T3663] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 61.910266][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.935189][ T3663] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 61.968902][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.973166][ T3663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.018040][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.044261][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.055273][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.063236][ T3585] Bluetooth: hci4: command tx timeout [ 62.074015][ T3663] ext4 filesystem being mounted at /root/syzkaller-testdir552720231/syzkaller.BNhGg5/3/file0 supports timestamps until 2038 (0x7fffffff) [ 62.100173][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.108690][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.120638][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.141301][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.149074][ T3585] Bluetooth: hci2: command tx timeout [ 62.153740][ T3581] Bluetooth: hci0: command tx timeout [ 62.154493][ T3585] Bluetooth: hci3: command tx timeout [ 62.159825][ T3581] Bluetooth: hci1: command tx timeout [ 62.183899][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.213722][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.224815][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.649149][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 64.738199][ T3719] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.788452][ T3731] loop4: detected capacity change from 0 to 512 [ 65.822534][ T3733] loop1: detected capacity change from 0 to 128 [ 65.838327][ T3731] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.861005][ T3733] FAT-fs (loop1): Unrecognized mount option "M˜Ĕyq~QnMmw" or missing value [ 65.900444][ T3731] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.969028][ T3731] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz-executor.4: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 66.126532][ T3731] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz-executor.4: Bad quota inode: 4, type: 1 [ 66.160919][ T3731] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.221251][ T3731] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 66.266562][ T3731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.335938][ T3748] loop3: detected capacity change from 0 to 512 [ 66.338261][ T3731] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 66.405261][ T3731] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz-executor.4: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 66.441553][ T3748] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 66.464076][ T3731] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz-executor.4: Bad quota inode: 4, type: 1 [ 66.493211][ T3731] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.506833][ T3748] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 66.583167][ T3748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.602859][ T3748] ext4 filesystem being mounted at /root/syzkaller-testdir600057229/syzkaller.5GUkBW/12/file0 supports timestamps until 2038 (0x7fffffff) [ 66.627005][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 66.736592][ T3750] loop1: detected capacity change from 0 to 8192 [ 66.768024][ T3750] ======================================================= [ 66.768024][ T3750] WARNING: The mand mount option has been deprecated and [ 66.768024][ T3750] and is ignored by this kernel. Remove the mand [ 66.768024][ T3750] option from the mount to silence this warning. [ 66.768024][ T3750] ======================================================= [ 67.033233][ T3620] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.292818][ T3620] usb 5-1: Using ep0 maxpacket: 32 [ 67.413359][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.428790][ T3572] EXT4-fs (loop3): unmounting filesystem. [ 67.433154][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.451483][ T3620] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 67.461694][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.482135][ T3620] usb 5-1: config 0 descriptor?? [ 67.524961][ T3620] hub 5-1:0.0: USB hub found [ 67.674897][ T3783] loop3: detected capacity change from 0 to 512 [ 67.702893][ T154] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.709045][ T3783] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.737816][ T3783] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 67.751806][ T3620] hub 5-1:0.0: 1 port detected [ 67.764300][ T3783] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 67.808038][ T3783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.862072][ T3783] ext2 filesystem being mounted at /root/syzkaller-testdir600057229/syzkaller.5GUkBW/15/file0 supports timestamps until 2038 (0x7fffffff) [ 67.950763][ T3572] EXT4-fs (loop3): unmounting filesystem. [ 67.962795][ T3620] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 67.970556][ T3620] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 68.084468][ T154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.092832][ T3620] usbhid 5-1:0.0: can't add hid device: -71 [ 68.101243][ T3620] usbhid: probe of 5-1:0.0 failed with error -71 [ 68.103880][ T3790] loop3: detected capacity change from 0 to 1024 [ 68.120538][ T154] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 68.132271][ T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.183923][ T3620] usb 5-1: USB disconnect, device number 2 [ 68.187680][ T154] usb 2-1: config 0 descriptor?? [ 68.219374][ T3790] hfsplus: request for non-existent node 2048 in B*Tree [ 68.227719][ T3790] hfsplus: request for non-existent node 2048 in B*Tree [ 68.361078][ T154] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 68.453525][ T3018] usb 2-1: USB disconnect, device number 2 [ 68.598864][ T3796] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.829333][ T3802] loop3: detected capacity change from 0 to 512 [ 68.922312][ T3802] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 69.047854][ T3802] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 69.066994][ T3802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.107344][ T3802] ext4 filesystem being mounted at /root/syzkaller-testdir600057229/syzkaller.5GUkBW/19/file0 supports timestamps until 2038 (0x7fffffff) [ 70.002094][ T3822] loop1: detected capacity change from 0 to 1024 [ 70.056864][ T3822] hfsplus: request for non-existent node 2048 in B*Tree [ 70.078129][ T3822] hfsplus: request for non-existent node 2048 in B*Tree [ 70.118492][ T3572] EXT4-fs (loop3): unmounting filesystem. [ 70.200689][ T3826] loop1: detected capacity change from 0 to 1024 [ 70.364094][ T3831] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.962903][ T154] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.075117][ T3824] loop0: detected capacity change from 0 to 32768 [ 71.137335][ T3824] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3824) [ 71.240669][ T3824] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 71.291050][ T3824] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 71.319432][ T3824] BTRFS info (device loop0): using free space tree [ 71.354712][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361250][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373115][ T154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.397876][ T154] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 71.468984][ T154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.523416][ T3824] BTRFS info (device loop0): enabling ssd optimizations [ 71.551527][ T154] usb 3-1: config 0 descriptor?? [ 71.675241][ T154] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 71.683191][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.873186][ T3018] usb 3-1: USB disconnect, device number 2 [ 72.016529][ T3577] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 72.281426][ T3875] loop1: detected capacity change from 0 to 1024 [ 72.435930][ T3875] hfsplus: request for non-existent node 2048 in B*Tree [ 72.481934][ T3875] hfsplus: request for non-existent node 2048 in B*Tree [ 72.529386][ T3884] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.699804][ T3886] loop0: detected capacity change from 0 to 512 [ 72.766482][ T3886] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 72.816531][ T3891] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 72.817100][ T3893] IPVS: stopping backup sync thread 3891 ... [ 72.874555][ T3886] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 72.935789][ T3886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.949663][ T3886] ext4 filesystem being mounted at /root/syzkaller-testdir2056640365/syzkaller.HsfvoM/5/file0 supports timestamps until 2038 (0x7fffffff) [ 73.952166][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 74.065621][ T3911] ceph: No source [ 74.139544][ T3896] loop2: detected capacity change from 0 to 32768 [ 74.229391][ T3918] loop1: detected capacity change from 0 to 1024 [ 74.292516][ T3896] XFS (loop2): Mounting V5 Filesystem [ 74.313254][ T3918] hfsplus: request for non-existent node 2048 in B*Tree [ 74.320358][ T3918] hfsplus: request for non-existent node 2048 in B*Tree [ 74.344812][ T3896] XFS (loop2): Ending clean mount [ 74.417868][ T3896] loop2: detected capacity change from 32768 to 0 [ 74.472810][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.596989][ T3579] XFS (loop2): Unmounting Filesystem [ 74.758696][ T3907] loop4: detected capacity change from 0 to 32768 [ 74.811088][ T3907] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (3907) [ 74.835282][ T3907] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.839667][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.856498][ T3907] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 74.878000][ T14] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 74.886469][ T3907] BTRFS info (device loop4): using free space tree [ 74.909087][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.948739][ T14] usb 4-1: config 0 descriptor?? [ 74.966879][ T3914] loop0: detected capacity change from 0 to 32768 [ 74.995852][ T3914] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (3914) [ 75.036176][ T14] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 75.087530][ T3869] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3869) [ 75.119161][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.163626][ T3907] BTRFS info (device loop4): enabling ssd optimizations [ 75.253305][ T154] usb 4-1: USB disconnect, device number 2 [ 75.359778][ T3567] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 75.610177][ T3959] loop0: detected capacity change from 0 to 512 [ 75.698560][ T3959] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 75.786995][ T3959] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 75.866772][ T3959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.905968][ T3959] ext4 filesystem being mounted at /root/syzkaller-testdir2056640365/syzkaller.HsfvoM/8/file0 supports timestamps until 2038 (0x7fffffff) [ 76.191769][ T3977] ceph: No source [ 76.305730][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.429401][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.467384][ T22] cfg80211: failed to load regulatory.db [ 77.144252][ T3992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.300418][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 77.504973][ T3992] loop4: detected capacity change from 0 to 2048 [ 78.533335][ T3996] loop0: detected capacity change from 0 to 32768 [ 78.567821][ T3996] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3996) [ 78.700237][ T3996] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 78.746127][ T3996] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 78.761469][ T3996] BTRFS info (device loop0): using free space tree [ 78.938094][ T3996] BTRFS info (device loop0): enabling ssd optimizations [ 79.022928][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.147733][ T3577] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 79.214063][ T4034] ceph: No source [ 79.367584][ T4003] loop2: detected capacity change from 0 to 32768 [ 79.372128][ T4038] loop0: detected capacity change from 0 to 512 [ 79.405736][ T4003] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4003) [ 79.423733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.442895][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.453183][ T22] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 79.458811][ T4038] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 79.462331][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.491175][ T22] usb 2-1: config 0 descriptor?? [ 79.512357][ T4003] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 79.523285][ T4003] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 79.532964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.542912][ T4003] BTRFS info (device loop2): using free space tree [ 79.549910][ T4038] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 79.568652][ T22] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 79.635591][ T3586] udevd[3586]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.792387][ T4038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.812517][ T4003] BTRFS info (device loop2): enabling ssd optimizations [ 79.828349][ T3881] usb 2-1: USB disconnect, device number 3 [ 79.865451][ T4038] ext4 filesystem being mounted at /root/syzkaller-testdir2056640365/syzkaller.HsfvoM/10/file0 supports timestamps until 2038 (0x7fffffff) [ 80.056381][ T3579] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 80.462567][ T4048] loop4: detected capacity change from 0 to 32768 [ 80.558055][ T4048] XFS (loop4): Mounting V5 Filesystem [ 80.778623][ T4048] XFS (loop4): Ending clean mount [ 80.973653][ T4048] syz-executor.4 (4048) used greatest stack depth: 19240 bytes left [ 81.060535][ T3567] XFS (loop4): Unmounting Filesystem [ 81.378843][ T4098] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.691775][ T4095] loop3: detected capacity change from 0 to 2048 [ 82.349443][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 82.659893][ T4101] loop1: detected capacity change from 0 to 32768 [ 82.706218][ T4101] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4101) [ 82.743871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.752470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.762654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 82.771107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 82.779465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 82.849395][ T4101] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 82.929234][ T4101] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 82.961705][ T4113] ceph: No source [ 82.987377][ T4101] BTRFS info (device loop1): using free space tree [ 83.341235][ T4101] BTRFS info (device loop1): enabling ssd optimizations [ 83.358395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.372794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.425099][ T4141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.680857][ T3568] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 83.923281][ T4141] loop2: detected capacity change from 0 to 2048 [ 84.560108][ T4122] loop0: detected capacity change from 0 to 32768 [ 84.797376][ T4154] loop4: detected capacity change from 0 to 512 [ 84.797431][ T4122] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4122) [ 84.820090][ T4154] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 84.843720][ T4154] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 84.870758][ T4122] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 84.886953][ T4154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.897783][ T4154] ext4 filesystem being mounted at /root/syzkaller-testdir3459933006/syzkaller.9IHLoD/24/file0 supports timestamps until 2038 (0x7fffffff) [ 84.964962][ T4122] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 84.982779][ T4122] BTRFS info (device loop0): using free space tree [ 85.216136][ T4122] BTRFS info (device loop0): enabling ssd optimizations [ 85.537792][ T3577] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 86.041480][ T4195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.401900][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 86.503718][ T4205] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.527784][ T4195] loop3: detected capacity change from 0 to 2048 [ 87.215189][ T4205] loop0: detected capacity change from 0 to 2048 [ 87.293474][ T3869] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.775550][ T4200] loop2: detected capacity change from 0 to 32768 [ 88.060473][ T4200] XFS (loop2): Mounting V5 Filesystem [ 88.425427][ T4200] XFS (loop2): Ending clean mount [ 88.553325][ T3579] XFS (loop2): Unmounting Filesystem [ 89.171852][ T4243] loop1: detected capacity change from 0 to 512 [ 89.231903][ T4243] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 89.253530][ T4243] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 89.263998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.313271][ T4243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.325603][ T4243] ext4 filesystem being mounted at /root/syzkaller-testdir552720231/syzkaller.BNhGg5/38/file0 supports timestamps until 2038 (0x7fffffff) [ 89.408065][ T4256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.655903][ T4256] loop0: detected capacity change from 0 to 2048 [ 90.788494][ T4259] loop4: detected capacity change from 0 to 32768 [ 90.791204][ T4272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.013328][ T4259] XFS (loop4): Mounting V5 Filesystem [ 91.074359][ T4283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.151984][ T4259] XFS (loop4): Ending clean mount [ 91.204955][ C1] Unknown status report in ack skb [ 91.437891][ T4259] loop4: detected capacity change from 32768 to 0 [ 91.581103][ T3567] XFS (loop4): Unmounting Filesystem [ 91.602336][ T4269] loop3: detected capacity change from 0 to 2048 [ 92.096150][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 92.655182][ T4290] loop0: detected capacity change from 0 to 32768 [ 92.797483][ T4308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.909440][ T4290] XFS (loop0): Mounting V5 Filesystem [ 93.110606][ T4290] XFS (loop0): Ending clean mount [ 93.316669][ T3577] XFS (loop0): Unmounting Filesystem [ 93.395938][ T4308] loop4: detected capacity change from 0 to 2048 [ 94.539228][ T4343] loop0: detected capacity change from 0 to 512 [ 94.555856][ T4345] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.654207][ T4343] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 94.686609][ T4343] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 94.729377][ T4343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.774999][ T4343] ext4 filesystem being mounted at /root/syzkaller-testdir2056640365/syzkaller.HsfvoM/21/file0 supports timestamps until 2038 (0x7fffffff) [ 95.520096][ T4345] loop2: detected capacity change from 0 to 2048 [ 96.128184][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 96.468998][ T4354] loop3: detected capacity change from 0 to 32768 [ 96.572834][ T4354] XFS (loop3): Mounting V5 Filesystem [ 96.649830][ T4354] XFS (loop3): Ending clean mount [ 96.907122][ T4356] loop4: detected capacity change from 0 to 32768 [ 96.972786][ T4354] loop3: detected capacity change from 32768 to 0 [ 97.016037][ T4356] XFS (loop4): Mounting V5 Filesystem [ 97.176503][ T4356] XFS (loop4): Ending clean mount [ 97.267172][ T3572] XFS (loop3): Unmounting Filesystem [ 97.545698][ T4356] loop4: detected capacity change from 32768 to 0 [ 97.618729][ T3567] XFS (loop4): Unmounting Filesystem [ 97.646420][ T4371] loop0: detected capacity change from 0 to 32768 [ 97.729533][ T4371] XFS (loop0): Mounting V5 Filesystem [ 97.846221][ T4371] XFS (loop0): Ending clean mount [ 97.968413][ T3577] XFS (loop0): Unmounting Filesystem [ 98.298235][ T4417] loop2: detected capacity change from 0 to 512 [ 98.350213][ T4417] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 98.448388][ T4417] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 98.509024][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.526989][ T4431] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.562999][ T4417] ext4 filesystem being mounted at /root/syzkaller-testdir2413824756/syzkaller.wUGVUi/20/file0 supports timestamps until 2038 (0x7fffffff) [ 99.041359][ T4431] loop0: detected capacity change from 0 to 2048 [ 100.240832][ T4436] loop1: detected capacity change from 0 to 32768 [ 100.431416][ T4436] XFS (loop1): Mounting V5 Filesystem [ 100.586071][ T4436] XFS (loop1): Ending clean mount [ 100.754888][ T4436] loop1: detected capacity change from 32768 to 0 [ 100.842730][ T3568] XFS (loop1): Unmounting Filesystem [ 100.924765][ T4459] ceph: No source [ 101.001020][ T4463] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.393136][ T3579] EXT4-fs (loop2): unmounting filesystem. [ 101.397850][ T4449] loop4: detected capacity change from 0 to 32768 [ 101.446712][ T4449] XFS (loop4): Mounting V5 Filesystem [ 101.524023][ T4449] XFS (loop4): Ending clean mount [ 101.682923][ T4449] loop4: detected capacity change from 32768 to 0 [ 101.988391][ T3567] XFS (loop4): Unmounting Filesystem [ 102.449267][ T4497] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.029417][ T4511] loop1: detected capacity change from 0 to 512 [ 103.136432][ T4511] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 103.155673][ T4511] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 103.184733][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.197556][ T4511] ext4 filesystem being mounted at /root/syzkaller-testdir552720231/syzkaller.BNhGg5/50/file0 supports timestamps until 2038 (0x7fffffff) [ 103.716847][ T4495] loop3: detected capacity change from 0 to 32768 [ 103.890169][ T4495] XFS (loop3): Mounting V5 Filesystem [ 104.064891][ T4495] XFS (loop3): Ending clean mount [ 104.186801][ T4503] loop0: detected capacity change from 0 to 32768 [ 104.264597][ T4503] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4503) [ 104.366928][ T4503] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 104.384926][ T3568] EXT4-fs (loop1): unmounting filesystem. [ 104.403663][ T4495] loop3: detected capacity change from 32768 to 0 [ 104.454135][ T4503] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 104.472354][ T4503] BTRFS info (device loop0): disabling tree log [ 104.530648][ T4503] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.582773][ T4503] BTRFS info (device loop0): trying to use backup root at mount time [ 104.592450][ T3572] XFS (loop3): Unmounting Filesystem [ 104.602820][ T4503] BTRFS info (device loop0): setting nodatacow, compression disabled [ 104.652918][ T4503] BTRFS info (device loop0): enabling ssd optimizations [ 104.806313][ T4503] BTRFS info (device loop0): using spread ssd allocation scheme [ 104.823107][ T4503] BTRFS info (device loop0): using free space tree [ 105.705258][ T4503] BTRFS error (device loop0): open_ctree failed [ 106.054665][ T4563] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.254289][ T4567] loop0: detected capacity change from 0 to 512 [ 106.312806][ T4567] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 106.332079][ T4567] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 106.357227][ T4567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.365961][ T4567] ext4 filesystem being mounted at /root/syzkaller-testdir2056640365/syzkaller.HsfvoM/34/file0 supports timestamps until 2038 (0x7fffffff) [ 106.678278][ T4578] syz-executor.2[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.678391][ T4578] syz-executor.2[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.731228][ T4582] syz-executor.2[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.769726][ T4582] syz-executor.2[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.073267][ T4562] loop3: detected capacity change from 0 to 32768 [ 107.314182][ T4562] XFS (loop3): Mounting V5 Filesystem [ 107.402233][ T4602] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.429308][ T4562] XFS (loop3): Ending clean mount [ 107.782811][ T4562] loop3: detected capacity change from 32768 to 0 [ 107.970212][ T3572] XFS (loop3): Unmounting Filesystem [ 108.035926][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 109.445659][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.639148][ T4639] loop4: detected capacity change from 0 to 512 [ 109.971071][ T4639] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 110.015268][ T4639] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 110.058984][ T4639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.091978][ T4639] ext4 filesystem being mounted at /root/syzkaller-testdir3459933006/syzkaller.9IHLoD/57/file0 supports timestamps until 2038 (0x7fffffff) [ 111.308898][ T4668] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.980685][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 113.103660][ T3583] Bluetooth: hci4: command tx timeout [ 113.716640][ T4721] [ 113.719007][ T4721] ============================================ [ 113.725153][ T4721] WARNING: possible recursive locking detected [ 113.731303][ T4721] 6.1.92-syzkaller #0 Not tainted [ 113.736332][ T4721] -------------------------------------------- [ 113.742500][ T4721] syz-executor.3/4721 is trying to acquire lock: [ 113.748831][ T4721] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 113.759235][ T4721] [ 113.759235][ T4721] but task is already holding lock: [ 113.766601][ T4721] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 113.776963][ T4721] [ 113.776963][ T4721] other info that might help us debug this: [ 113.785005][ T4721] Possible unsafe locking scenario: [ 113.785005][ T4721] [ 113.792438][ T4721] CPU0 [ 113.795701][ T4721] ---- [ 113.798964][ T4721] lock(lock#10); [ 113.802681][ T4721] lock(lock#10); [ 113.806395][ T4721] [ 113.806395][ T4721] *** DEADLOCK *** [ 113.806395][ T4721] [ 113.814527][ T4721] May be due to missing lock nesting notation [ 113.814527][ T4721] [ 113.822827][ T4721] 5 locks held by syz-executor.3/4721: [ 113.828269][ T4721] #0: ffff8880228e9f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 113.838186][ T4721] #1: ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 113.848972][ T4721] #2: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 113.858556][ T4721] #3: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 113.868291][ T4721] #4: ffff8880228e9f58 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0 [ 113.879075][ T4721] [ 113.879075][ T4721] stack backtrace: [ 113.884961][ T4721] CPU: 0 PID: 4721 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0 [ 113.893276][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 113.903323][ T4721] Call Trace: [ 113.906591][ T4721] [ 113.909510][ T4721] dump_stack_lvl+0x1e3/0x2cb [ 113.914195][ T4721] ? nf_tcp_handle_invalid+0x642/0x642 [ 113.919650][ T4721] ? panic+0x764/0x764 [ 113.923714][ T4721] validate_chain+0x4711/0x5950 [ 113.928566][ T4721] ? validate_chain+0x112/0x5950 [ 113.933499][ T4721] ? reacquire_held_locks+0x660/0x660 [ 113.938954][ T4721] ? validate_chain+0x112/0x5950 [ 113.943893][ T4721] ? validate_chain+0x112/0x5950 [ 113.948826][ T4721] ? mark_lock+0x9a/0x340 [ 113.953149][ T4721] ? mark_lock+0x9a/0x340 [ 113.957472][ T4721] __lock_acquire+0x125b/0x1f80 [ 113.962320][ T4721] lock_acquire+0x1f8/0x5a0 [ 113.966814][ T4721] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 113.973568][ T4721] ? read_lock_is_recursive+0x10/0x10 [ 113.978933][ T4721] ? mark_lock+0x9a/0x340 [ 113.983256][ T4721] ? down_read_trylock+0x24a/0x3b0 [ 113.988441][ T4721] ? stack_map_get_build_id_offset+0x232/0x9c0 [ 113.994585][ T4721] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 114.001335][ T4721] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 114.007910][ T4721] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 114.014671][ T4721] stack_map_get_build_id_offset+0x99e/0x9c0 [ 114.020642][ T4721] ? __lock_acquire+0x125b/0x1f80 [ 114.025667][ T4721] ? __bpf_get_stackid+0x910/0x910 [ 114.030770][ T4721] __bpf_get_stack+0x495/0x570 [ 114.035526][ T4721] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 114.041674][ T4721] ? __cant_sleep+0x270/0x270 [ 114.046338][ T4721] bpf_get_stack_raw_tp+0x1b2/0x220 [ 114.051523][ T4721] bpf_prog_e6cf5f9c69743609+0x3a/0x3e [ 114.056973][ T4721] ? bpf_trace_run4+0x16a/0x470 [ 114.061808][ T4721] bpf_trace_run4+0x253/0x470 [ 114.066471][ T4721] ? bpf_trace_run3+0x440/0x440 [ 114.071309][ T4721] ? get_mm_memcg_path+0x36c/0x600 [ 114.076497][ T4721] ? get_mm_memcg_path+0x4e6/0x600 [ 114.081595][ T4721] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 114.088342][ T4721] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 114.095090][ T4721] lock_mm_and_find_vma+0x219/0x2e0 [ 114.100278][ T4721] exc_page_fault+0x169/0x660 [ 114.104943][ T4721] ? __might_sleep+0xb0/0xb0 [ 114.109526][ T4721] asm_exc_page_fault+0x22/0x30 [ 114.114371][ T4721] RIP: 0010:strncpy_from_user+0x159/0x360 [ 114.120084][ T4721] Code: 27 fd 48 83 fd 07 0f 86 af 00 00 00 4c 89 64 24 08 4c 89 7c 24 10 48 c7 44 24 18 f8 ff ff ff 45 31 ed 4d 89 f4 48 8b 44 24 08 <4e> 8b 3c 28 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 114.139675][ T4721] RSP: 0018:ffffc9000324fb48 EFLAGS: 00050246 [ 114.145731][ T4721] RAX: 0000000000000000 RBX: 00007fffffffef81 RCX: ffff8880222c3b80 [ 114.153691][ T4721] RDX: ffffc90005602000 RSI: 000000000000007f RDI: 0000000000000007 [ 114.161649][ T4721] RBP: 000000000000007f R08: ffffffff84630b11 R09: ffffffff81eeb403 [ 114.169607][ T4721] R10: 0000000000000003 R11: ffff8880222c3b80 R12: ffffc9000324fc70 [ 114.177662][ T4721] R13: 0000000000000000 R14: ffffc9000324fc70 R15: 000000000000007f [ 114.185622][ T4721] ? __check_object_size+0x73/0xa30 [ 114.190813][ T4721] ? strncpy_from_user+0x131/0x360 [ 114.196087][ T4721] ? strncpy_from_user+0x131/0x360 [ 114.201185][ T4721] bpf_prog_load+0x188/0x1bb0 [ 114.205946][ T4721] ? map_freeze+0x390/0x390 [ 114.210526][ T4721] ? __might_fault+0xa1/0x110 [ 114.215198][ T4721] ? __might_fault+0xbd/0x110 [ 114.219868][ T4721] ? bpf_lsm_bpf+0x5/0x10 [ 114.224190][ T4721] ? security_bpf+0x7d/0xa0 [ 114.228689][ T4721] __sys_bpf+0x382/0x6c0 [ 114.232924][ T4721] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 114.238291][ T4721] ? print_irqtrace_events+0x210/0x210 [ 114.243743][ T4721] ? print_irqtrace_events+0x210/0x210 [ 114.249192][ T4721] ? syscall_enter_from_user_mode+0x2e/0x230 [ 114.255158][ T4721] ? lockdep_hardirqs_on+0x94/0x130 [ 114.260346][ T4721] __x64_sys_bpf+0x78/0x90 [ 114.265122][ T4721] do_syscall_64+0x3b/0xb0 [ 114.269551][ T4721] ? clear_bhb_loop+0x45/0xa0 [ 114.274760][ T4721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.280679][ T4721] RIP: 0033:0x7f848907cee9 [ 114.285093][ T4721] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 114.304693][ T4721] RSP: 002b:00007f8489eb30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 2024/05/31 05:45:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 114.313288][ T4721] RAX: ffffffffffffffda RBX: 00007f84891b3fa0 RCX: 00007f848907cee9 [ 114.321257][ T4721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 114.329841][ T4721] RBP: 00007f84890c947f R08: 0000000000000000 R09: 0000000000000000 [ 114.337805][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.345777][ T4721] R13: 000000000000000b R14: 00007f84891b3fa0 R15: 00007ffeba03be08 [ 114.353848][ T4721] [ 114.864089][ T3659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.955345][ T3659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0