last executing test programs: 4.841079566s ago: executing program 0 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='kfree\x00', r4, 0x0, 0x40008003}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r6, 0x0, 0x3}}, 0x20) 4.615873267s ago: executing program 0 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 4.307522257s ago: executing program 0 (id=181): setresuid(0xee00, 0xee00, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x5) 4.193636468s ago: executing program 0 (id=182): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 3.711481824s ago: executing program 0 (id=188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x2013, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 3.434776351s ago: executing program 0 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8d98a1f4925e50fb}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netfs_read\x00', r2}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\t'], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) 3.321963332s ago: executing program 4 (id=194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) socket$inet6(0xa, 0x1, 0x100) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x8c, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.976333785s ago: executing program 4 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x9) 2.824903679s ago: executing program 4 (id=201): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x11c, 0x1}, 0x20) 1.946344434s ago: executing program 1 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000e1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x1000, 0x0, &(0x7f0000000740), 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f8, 0x400, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 1.500099876s ago: executing program 1 (id=217): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) 1.499937156s ago: executing program 4 (id=218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) 1.415586255s ago: executing program 1 (id=220): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = syz_io_uring_setup(0x217a, &(0x7f0000000280)={0x0, 0x334a, 0x100, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.3639908s ago: executing program 4 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffff0001, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xffffff81, 0xce, 0x2, 0x81, 0x8000, 0x18, 0x200, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 1.323583573s ago: executing program 1 (id=222): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 1.275819618s ago: executing program 3 (id=223): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xe3}], 0x1, 0xf0, 0xd215) 1.144020491s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) 1.141808881s ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) 1.096778115s ago: executing program 4 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 906.492554ms ago: executing program 3 (id=228): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xff01, 0x1, 0x64ba, 0x59}, &(0x7f0000000240)=0x10) 713.425012ms ago: executing program 3 (id=230): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') 682.948075ms ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 536.023829ms ago: executing program 3 (id=232): futex(&(0x7f0000000180), 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000340)={[{@i_version}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 535.198479ms ago: executing program 2 (id=233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1e2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99", 0x2a}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc", 0x7f}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837", 0x69}], 0x3}}], 0x3, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 380.515184ms ago: executing program 2 (id=234): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 237.608398ms ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xdb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 159.978725ms ago: executing program 1 (id=236): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) semop(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="d40e23b35f23e25b78d4562bdfe966837865939c768f8805a0a50bc1a75008cdfc32d85b849008cbbdc4db5c507531721daaf3d898182addeff450f9576a773188c1f504c69520ad4e2e7d38762fd74d3db6f5285406c03b4f56fee1512e765429afbcead5088e564c3b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000001200000418110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) symlinkat(&(0x7f0000002040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 120.381189ms ago: executing program 2 (id=237): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) 71.132403ms ago: executing program 3 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 0s ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 59.951317][ T4171] cgroup: Unknown subsys name 'net' [ 60.042974][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.451633][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.977733][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 63.002230][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.067228][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.102902][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.155561][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.163615][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.172190][ T4182] device bridge_slave_0 entered promiscuous mode [ 63.187831][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 63.214416][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.221616][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.229478][ T4182] device bridge_slave_1 entered promiscuous mode [ 63.252775][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.259847][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.271058][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.302459][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.309542][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.317767][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.369482][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.390042][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.397265][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.408041][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.425296][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.437894][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.445098][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.453271][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.461147][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.468213][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.476464][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.485578][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.512163][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.519229][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.527639][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.543035][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.554454][ T4182] team0: Port device team_slave_0 added [ 63.587609][ T4182] team0: Port device team_slave_1 added [ 63.608446][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.634041][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.643617][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.651683][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.659406][ T4181] device bridge_slave_0 entered promiscuous mode [ 63.669166][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.689310][ T4184] team0: Port device team_slave_0 added [ 63.703659][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.710687][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.737103][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.750832][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.760229][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.767285][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.793516][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.805047][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.812275][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.820264][ T4181] device bridge_slave_1 entered promiscuous mode [ 63.836772][ T4184] team0: Port device team_slave_1 added [ 63.868471][ T4192] team0: Port device team_slave_0 added [ 63.906119][ T4192] team0: Port device team_slave_1 added [ 63.914890][ T4183] team0: Port device team_slave_0 added [ 63.937436][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.944760][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.953634][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.969132][ T4183] team0: Port device team_slave_1 added [ 63.976178][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.983456][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.009913][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.022961][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.045452][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.052740][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.079174][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.105044][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.112176][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.138465][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.159636][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.166665][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.192966][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.208376][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.215607][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.241835][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.260104][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.267415][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.293674][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.319064][ T4181] team0: Port device team_slave_0 added [ 64.350020][ T4181] team0: Port device team_slave_1 added [ 64.390187][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.397012][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.404600][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.412573][ T4184] Cannot create hsr debugfs directory [ 64.431224][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.438197][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.444942][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.452822][ T4183] Cannot create hsr debugfs directory [ 64.462015][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.470131][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.477098][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.485227][ T4192] Cannot create hsr debugfs directory [ 64.517641][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.525355][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.551826][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.584117][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.593383][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.612858][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.626328][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.690532][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 64.697798][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 64.701635][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 64.713835][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 64.778354][ T4181] device hsr_slave_0 entered promiscuous mode [ 64.791100][ T4181] device hsr_slave_1 entered promiscuous mode [ 64.798112][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.809325][ T4181] Cannot create hsr debugfs directory [ 64.956843][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.984068][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.013775][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.023965][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.042350][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.050736][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.075754][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.087477][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.106886][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.123618][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.161222][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.179970][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.205520][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.215354][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.247997][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.276085][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.311733][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.338571][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.366033][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.384190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.395590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.404748][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.418427][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.434018][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.458963][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.505674][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.514420][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.527524][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.534808][ T1527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.544952][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.555196][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.563819][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.571084][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.579128][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.588691][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.604432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.624679][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.633041][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.659518][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.672529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.682884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.693016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.701919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.711028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.729865][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.750950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.759331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.769378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.778084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.786489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.795783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.804919][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.812033][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.819943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.831019][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.841862][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.856691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.865245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.884520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.893967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.902931][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.910012][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.925488][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.936165][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.965916][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.986081][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.005855][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.015110][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.022215][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.045696][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.054527][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.065768][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.074779][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.083839][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.093115][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.107703][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.116645][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.134718][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.149414][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.156614][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.166561][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.183740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.193110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.203625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.217684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.227275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.236040][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.243251][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.251750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.259723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.290003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.299629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.309049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.318164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.328234][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.335457][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.344062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.352978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.361459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.369688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.379855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.388649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.398786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.407844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.416966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.425624][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.432738][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.442609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.451722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.460158][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.467267][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.475744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.485371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.495349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.506084][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.525757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.534395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.544039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.556124][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.567016][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.610349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.618954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.634180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.647201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.659138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.675593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.686350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.692913][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 66.701706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.710056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.719263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.729800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.738821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.747641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.756190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.764928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.773468][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 66.779839][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 66.786271][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 66.787589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.792725][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 66.807841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.816385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.825122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.835180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.847756][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.864311][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.876977][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.891741][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.907769][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.932186][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.948283][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.958493][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.973900][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.025064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.070827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.082963][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.117589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.132052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.177617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.187370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.201873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.209733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.227236][ T4182] device veth0_vlan entered promiscuous mode [ 67.256298][ T4182] device veth1_vlan entered promiscuous mode [ 67.357123][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.366162][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.385757][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.396115][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.409188][ T4182] device veth0_macvtap entered promiscuous mode [ 67.448605][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.456916][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.468038][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.476884][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.485424][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.495256][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.502873][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.513015][ T4182] device veth1_macvtap entered promiscuous mode [ 67.534118][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.549611][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.562437][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.572273][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.579727][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.593921][ T4183] device veth0_vlan entered promiscuous mode [ 67.615320][ T4183] device veth1_vlan entered promiscuous mode [ 67.625180][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.634249][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.643356][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.653129][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.661516][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.670130][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.679045][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.687695][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.716930][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.728717][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.736528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.745162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.754523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.766330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.775120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.784020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.793408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.828265][ T4181] device veth0_vlan entered promiscuous mode [ 67.846574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.856637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.865650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.875799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.884828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.896038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.905766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.914779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.923254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.931232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.940453][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.949335][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958713][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.967651][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984740][ T4192] device veth0_vlan entered promiscuous mode [ 67.997598][ T4192] device veth1_vlan entered promiscuous mode [ 68.020932][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.028814][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.046495][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.056210][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.071531][ T4181] device veth1_vlan entered promiscuous mode [ 68.082827][ T4183] device veth0_macvtap entered promiscuous mode [ 68.137943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.149395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.181236][ T4183] device veth1_macvtap entered promiscuous mode [ 68.190256][ T4192] device veth0_macvtap entered promiscuous mode [ 68.206150][ T4184] device veth0_vlan entered promiscuous mode [ 68.228104][ T4181] device veth0_macvtap entered promiscuous mode [ 68.239237][ T4192] device veth1_macvtap entered promiscuous mode [ 68.246656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.257057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.265980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.277050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.286178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.301383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.310098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.318452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.326565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.353554][ T4184] device veth1_vlan entered promiscuous mode [ 68.360998][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.369011][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.378582][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.396353][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.407993][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.423836][ T4181] device veth1_macvtap entered promiscuous mode [ 68.448561][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.457278][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.466122][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.474592][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.484483][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.494506][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.508743][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.521111][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.533363][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.547252][ T4184] device veth0_macvtap entered promiscuous mode [ 68.560017][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.571893][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.582316][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.592828][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.604927][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.615153][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.626290][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.635297][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.644447][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.653410][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.662680][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.671749][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.683517][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.693588][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702573][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.711844][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.726300][ T4184] device veth1_macvtap entered promiscuous mode [ 68.739152][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.750126][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.760889][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.771907][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 68.778007][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.789740][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.804454][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.816293][ T1527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.824387][ T1527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.827261][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.843242][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.852301][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 68.855825][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 68.862602][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 68.875028][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.878556][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 68.887373][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.904805][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.918868][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.931266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.942933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.953950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.964057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.973619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.982506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.992527][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001813][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.013817][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.023081][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.054168][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.065294][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.076966][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.088657][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.099351][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.110403][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.129230][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.165707][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.179785][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.195300][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.207502][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.217778][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.229756][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.239654][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.250210][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.260956][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.271582][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.284218][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.320128][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.329059][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.359641][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.369144][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.379815][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.404317][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.456602][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.468938][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.479048][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.489999][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.502312][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.513222][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.524210][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.535217][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.546681][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.581295][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.588931][ T1527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.601831][ T1527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.606052][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.619512][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.631662][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.641858][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.651154][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.660256][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.729123][ T318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.743586][ T318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.759335][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.782112][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.791274][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.828440][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.851070][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.862662][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.900138][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.906958][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.916339][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.944618][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.954430][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.977189][ T318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.997861][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.015189][ T1527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.028077][ T318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.075007][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.101722][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.129602][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.157014][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.166512][ T26] audit: type=1326 audit(1768022939.492:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.253618][ T26] audit: type=1326 audit(1768022939.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.348844][ T4305] loop1: detected capacity change from 0 to 1024 [ 70.387125][ T4309] loop0: detected capacity change from 0 to 512 [ 70.391167][ T26] audit: type=1326 audit(1768022939.542:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.416649][ T4310] loop3: detected capacity change from 0 to 1024 [ 70.477833][ T4310] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.492681][ T4309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.514003][ T26] audit: type=1326 audit(1768022939.542:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.539239][ T26] audit: type=1326 audit(1768022939.542:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.562549][ T26] audit: type=1326 audit(1768022939.542:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.584900][ T26] audit: type=1326 audit(1768022939.542:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.586090][ T4305] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2: bad orphan inode 134217728 [ 70.608322][ T26] audit: type=1326 audit(1768022939.542:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.630611][ T4310] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.651207][ T26] audit: type=1326 audit(1768022939.542:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.675897][ T4305] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.688466][ T26] audit: type=1326 audit(1768022939.552:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 70.728898][ T4305] mmap: syz.1.2 (4305) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 70.777556][ T4310] JBD2: no valid journal superblock found [ 70.798503][ T4310] EXT4-fs (loop3): error loading journal [ 70.837260][ T4309] EXT4-fs (loop0): 1 orphan inode deleted [ 70.852482][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 70.910953][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.931841][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 70.938036][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 70.951275][ T4309] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.990013][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 71.015866][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 71.247997][ T4335] program syz.3.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.259357][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266025][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380430][ T4335] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.479689][ T4341] bridge0: port 3(batadv1) entered blocking state [ 71.531276][ T4341] bridge0: port 3(batadv1) entered disabled state [ 71.558132][ T4347] loop0: detected capacity change from 0 to 1024 [ 71.576294][ T4341] device batadv1 entered promiscuous mode [ 71.607471][ T4347] EXT4-fs (loop0): Ignoring removed oldalloc option [ 71.637238][ T4347] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 71.732278][ T4241] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 71.788741][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.991451][ T4289] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 72.001241][ T4289] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 72.021389][ T4363] capability: warning: `syz.1.27' uses deprecated v2 capabilities in a way that may be insecure [ 72.115303][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.131853][ T4241] usb 3-1: config 1 interface 0 has no altsetting 0 [ 72.320649][ T4241] usb 3-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.40 [ 72.351216][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.372488][ T4241] usb 3-1: Product: syz [ 72.376884][ T4241] usb 3-1: Manufacturer: syz [ 72.388893][ T4241] usb 3-1: SerialNumber: syz [ 72.500643][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.570455][ T4227] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 72.578167][ T4227] usb 4-1: can't read configurations, error -71 [ 72.620457][ T1335] cfg80211: failed to load regulatory.db [ 72.711798][ T4385] loop1: detected capacity change from 0 to 2048 [ 72.768428][ T4175] Alternate GPT is invalid, using primary GPT. [ 72.783447][ T4175] loop1: p2 p3 p7 [ 72.884405][ T4385] Alternate GPT is invalid, using primary GPT. [ 72.897150][ T4385] loop1: p2 p3 p7 [ 72.916904][ T4241] usbhid 3-1:1.0: can't add hid device: -71 [ 72.937326][ T4241] usbhid: probe of 3-1:1.0 failed with error -71 [ 73.000248][ T4241] usb 3-1: USB disconnect, device number 2 [ 73.128756][ T4393] loop4: detected capacity change from 0 to 512 [ 73.231851][ T4393] ======================================================= [ 73.231851][ T4393] WARNING: The mand mount option has been deprecated and [ 73.231851][ T4393] and is ignored by this kernel. Remove the mand [ 73.231851][ T4393] option from the mount to silence this warning. [ 73.231851][ T4393] ======================================================= [ 73.346703][ T4405] loop3: detected capacity change from 0 to 1024 [ 73.390495][ T4393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.466988][ T4393] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.40: inode has both inline data and extents flags [ 73.497350][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.540250][ T4393] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.40: couldn't read orphan inode 15 (err -117) [ 73.590747][ T4393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.717719][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 73.743688][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 73.758593][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 73.957925][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 73.968601][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.011651][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.271735][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.433367][ T4438] loop3: detected capacity change from 0 to 128 [ 74.615798][ T4448] 9pnet: Insufficient options for proto=fd [ 74.832921][ T4241] kernel write not supported for file /vcsu1 (pid: 4241 comm: kworker/1:5) [ 74.848082][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 74.995204][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 75.160196][ T4476] loop0: detected capacity change from 0 to 512 [ 75.294415][ T4476] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.335605][ T4476] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.380747][ T4476] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.70: corrupted inode contents [ 75.403518][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.433465][ T4476] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #16: comm syz.0.70: mark_inode_dirty error [ 75.449071][ T4486] loop2: detected capacity change from 0 to 512 [ 75.485946][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.509904][ T4489] loop3: detected capacity change from 0 to 512 [ 75.511843][ T4476] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.70: corrupted inode contents [ 75.561040][ T4486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.602856][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.609639][ T4489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.642554][ T4476] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.70: mark_inode_dirty error [ 75.676808][ T4495] loop4: detected capacity change from 0 to 128 [ 75.709345][ T4489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 75.748755][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.798043][ T4489] System zones: 1-12 [ 75.802404][ T4476] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.70: corrupted inode contents [ 75.817397][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.825496][ T4476] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 75.839263][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.846342][ T4476] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.70: corrupted inode contents [ 75.869336][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.878532][ T4476] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.70: mark_inode_dirty error [ 75.908063][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 75.914879][ T4489] EXT4-fs (loop3): 1 truncate cleaned up [ 75.938844][ T4499] loop1: detected capacity change from 0 to 1024 [ 75.948456][ T4476] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 75.957463][ T4489] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,jqfmt=vfsold,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 75.979764][ T4476] EXT4-fs (loop0): Remounting filesystem read-only [ 76.004373][ T4476] EXT4-fs (loop0): 1 truncate cleaned up [ 76.019224][ T26] kauditd_printk_skb: 403 callbacks suppressed [ 76.019239][ T26] audit: type=1800 audit(1768022945.362:415): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.74" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 76.047888][ T4500] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 76.052636][ T4476] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 76.122733][ T4495] attempt to access beyond end of device [ 76.122733][ T4495] loop4: rw=2049, want=1041, limit=128 [ 76.180847][ T4499] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.217355][ T4499] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.272145][ T4499] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 76.512884][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 76.570833][ T4510] netlink: 676 bytes leftover after parsing attributes in process `syz.2.83'. [ 76.662551][ T4516] loop4: detected capacity change from 0 to 128 [ 76.752953][ T4516] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.801284][ T4519] netlink: 'syz.2.85': attribute type 21 has an invalid length. [ 76.828144][ T4516] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.840572][ T4519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.85'. [ 76.898742][ T4519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 76.912848][ T26] audit: type=1326 audit(1768022946.262:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 77.005153][ T26] audit: type=1326 audit(1768022946.262:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 77.098547][ T26] audit: type=1326 audit(1768022946.262:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 77.123490][ T26] audit: type=1326 audit(1768022946.262:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74005e1783 code=0x7ffc0000 [ 77.179688][ T4527] loop2: detected capacity change from 0 to 1024 [ 77.193124][ T26] audit: type=1326 audit(1768022946.292:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74005e01ff code=0x7ffc0000 [ 77.234944][ T4289] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.320133][ T4527] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 77.338584][ T26] audit: type=1326 audit(1768022946.302:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74005e17d7 code=0x7ffc0000 [ 77.372303][ T4527] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.477139][ T4527] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.88: bg 0: block 112: padding at end of block bitmap is not set [ 77.550700][ T26] audit: type=1326 audit(1768022946.302:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74005dff90 code=0x7ffc0000 [ 77.575220][ T4527] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 77.592219][ T4526] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 1: comm syz.2.88: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.640662][ T4527] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.640662][ T4527] [ 77.650677][ T4536] process 'syz.4.90' launched './file0' with NULL argv: empty string added [ 77.655280][ T26] audit: type=1326 audit(1768022946.312:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74005e134b code=0x7ffc0000 [ 77.720837][ T4535] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #15: block 1: comm syz.2.88: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.788664][ T26] audit: type=1326 audit(1768022946.312:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74005e134b code=0x7ffc0000 [ 77.915442][ T318] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 78.000526][ T318] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 78.025292][ T318] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.025292][ T318] [ 78.053720][ T4542] loop1: detected capacity change from 0 to 512 [ 78.170606][ T4542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.267989][ T4542] EXT4-fs (loop1): 1 truncate cleaned up [ 78.284218][ T4542] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 78.415322][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.506405][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.540792][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.572623][ T4550] device bridge_slave_0 left promiscuous mode [ 78.611778][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.692320][ T4551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 78.710555][ T4550] device bridge_slave_1 left promiscuous mode [ 78.728360][ T4554] netlink: 76 bytes leftover after parsing attributes in process `syz.1.98'. [ 78.728696][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.785594][ T4550] bond0: (slave bond_slave_0): Releasing backup interface [ 78.840053][ T4550] bond0: (slave bond_slave_1): Releasing backup interface [ 78.952791][ T4550] team0: Port device team_slave_0 removed [ 78.992586][ T4550] team0: Port device team_slave_1 removed [ 79.056909][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.076368][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.095014][ T4550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.108663][ T4550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.219213][ T4551] syz.4.97 (4551) used greatest stack depth: 18560 bytes left [ 79.354152][ T4572] tipc: Started in network mode [ 79.365077][ T4572] tipc: Node identity 7692a58f87d3, cluster identity 4711 [ 79.387863][ T4572] tipc: Enabled bearer , priority 0 [ 79.425109][ T4574] device macvtap1 entered promiscuous mode [ 79.470878][ T4572] tipc: Disabling bearer [ 80.265992][ T4602] loop1: detected capacity change from 0 to 164 [ 80.375216][ T4602] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 81.941067][ T4638] loop4: detected capacity change from 0 to 512 [ 82.260500][ T4638] EXT4-fs (loop4): 1 orphan inode deleted [ 82.318707][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.413547][ T4638] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.515697][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 82.566785][ T4654] loop1: detected capacity change from 0 to 164 [ 82.669017][ T4653] device syz_tun entered promiscuous mode [ 82.748465][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 82.748480][ T26] audit: type=1326 audit(1768022952.092:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 82.859437][ T4653] syz_tun: refused to change device tx_queue_len [ 82.928330][ T26] audit: type=1326 audit(1768022952.132:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.023317][ T4661] netlink: 14 bytes leftover after parsing attributes in process `syz.4.134'. [ 83.088296][ T26] audit: type=1326 audit(1768022952.132:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.156190][ T26] audit: type=1326 audit(1768022952.132:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.227611][ T26] audit: type=1326 audit(1768022952.132:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.291168][ T4661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.388546][ T26] audit: type=1326 audit(1768022952.132:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.421928][ T4661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.510848][ T4661] bond0 (unregistering): Released all slaves [ 83.567761][ T4665] netlink: 52 bytes leftover after parsing attributes in process `syz.1.136'. [ 83.579868][ T26] audit: type=1326 audit(1768022952.142:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.671158][ T26] audit: type=1326 audit(1768022952.142:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.773424][ T26] audit: type=1326 audit(1768022952.142:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 83.915747][ T26] audit: type=1326 audit(1768022952.162:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74005e1749 code=0x7ffc0000 [ 84.009577][ T4677] loop4: detected capacity change from 0 to 128 [ 84.300967][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 84.313039][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.497932][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.559260][ T4691] netlink: 96 bytes leftover after parsing attributes in process `syz.1.148'. [ 84.731244][ T4691] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 84.923062][ T4706] ALSA: seq fatal error: cannot create timer (-22) [ 85.192699][ T4715] loop4: detected capacity change from 0 to 512 [ 85.278508][ T4715] EXT4-fs (loop4): Unrecognized mount option "fsname=errors=remount-ro" or missing value [ 85.737567][ T4726] netlink: 277 bytes leftover after parsing attributes in process `syz.4.159'. [ 85.832170][ T4726] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 85.908728][ T4731] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.033651][ T4736] loop1: detected capacity change from 0 to 512 [ 86.043897][ T4731] autofs4:pid:4731:autofs_fill_super: called with bogus options [ 86.344267][ T4744] capability: warning: `syz.2.164' uses 32-bit capabilities (legacy support in use) [ 86.366660][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.390550][ T4744] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 86.489106][ T4746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.165'. [ 86.882068][ T4754] loop2: detected capacity change from 0 to 4096 [ 86.977049][ T4754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.386829][ T4771] syz.2.175[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.386968][ T4771] syz.2.175[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.618229][ T4756] infiniband !yz!: set active [ 87.653151][ T4756] infiniband !yz!: added team_slave_0 [ 87.667050][ T4778] loop9: detected capacity change from 0 to 7 [ 87.688575][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 87.772163][ T4756] RDS/IB: !yz!: added [ 87.777023][ T4756] smc: adding ib device !yz! with port count 1 [ 87.799139][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.810349][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.835020][ T4756] smc: ib device !yz! port 1 has pnetid [ 87.860506][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.871500][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.906644][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 87.942526][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.953584][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.012245][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.023262][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.075016][ T4787] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.088448][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.099435][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.137232][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.148318][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.162570][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.173534][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.181764][ T4778] ldm_validate_partition_table(): Disk read failed. [ 88.204248][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.215240][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.248948][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.259930][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.309254][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.320299][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.330646][ T4778] Dev loop9: unable to read RDB block 0 [ 88.385653][ T4778] loop9: unable to read partition table [ 88.446643][ T4778] loop9: partition table beyond EOD, truncated [ 88.484161][ T4778] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.484161][ T4778] ) failed (rc=-5) [ 88.569143][ T4792] loop0: detected capacity change from 0 to 512 [ 88.721387][ T4792] EXT4-fs (loop0): too many log groups per flexible block group [ 88.729984][ T4792] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 88.768656][ T4792] EXT4-fs (loop0): mount failed [ 88.795762][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 89.001189][ T26] kauditd_printk_skb: 78 callbacks suppressed [ 89.001204][ T26] audit: type=1326 audit(1768022958.352:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.029628][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.069168][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 89.116603][ T26] audit: type=1326 audit(1768022958.382:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.141292][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 89.201168][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 89.226388][ T26] audit: type=1326 audit(1768022958.382:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.308003][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 89.352504][ T26] audit: type=1326 audit(1768022958.382:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.376455][ T4823] 9pnet: Insufficient options for proto=fd [ 89.415931][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 89.445416][ T26] audit: type=1326 audit(1768022958.382:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.529625][ T26] audit: type=1326 audit(1768022958.382:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.681192][ T26] audit: type=1326 audit(1768022958.382:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.811803][ T26] audit: type=1326 audit(1768022958.382:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 89.941494][ T26] audit: type=1326 audit(1768022958.382:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 90.055456][ T26] audit: type=1326 audit(1768022958.392:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b61e5a749 code=0x7ffc0000 [ 90.691175][ T4863] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 90.747789][ T4864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.983443][ T4910] macvtap0: refused to change device tx_queue_len [ 92.165237][ T4918] loop3: detected capacity change from 0 to 512 [ 92.353609][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: none. [ 92.523011][ T4934] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 92.603259][ T4200] [ 92.605643][ T4200] ====================================================== [ 92.612673][ T4200] WARNING: possible circular locking dependency detected [ 92.619713][ T4200] syzkaller #0 Not tainted [ 92.624150][ T4200] ------------------------------------------------------ [ 92.631179][ T4200] udevd/4200 is trying to acquire lock: [ 92.636738][ T4200] ffff888020e89938 ((wq_completion)loop3){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 92.646515][ T4200] [ 92.646515][ T4200] but task is already holding lock: [ 92.650906][ T4934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.653888][ T4200] ffff88814775c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 92.669301][ T4200] [ 92.669301][ T4200] which lock already depends on the new lock. [ 92.669301][ T4200] [ 92.679719][ T4200] [ 92.679719][ T4200] the existing dependency chain (in reverse order) is: [ 92.688841][ T4200] [ 92.688841][ T4200] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 92.696354][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 92.702101][ T4200] mutex_lock_killable_nested+0x17/0x20 [ 92.708212][ T4200] lo_open+0x6a/0x100 [ 92.712740][ T4200] blkdev_get_whole+0x90/0x390 [ 92.718041][ T4200] blkdev_get_by_dev+0x2d0/0xa60 [ 92.718619][ T4938] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 92.723519][ T4200] blkdev_open+0x12d/0x2c0 [ 92.723537][ T4200] do_dentry_open+0x7ff/0xf80 [ 92.723555][ T4200] path_openat+0x2682/0x2f30 [ 92.745600][ T4200] do_filp_open+0x1b3/0x3e0 [ 92.747170][ T4938] bond1: (slave batadv2): making interface the new active one [ 92.750646][ T4200] do_sys_openat2+0x142/0x4a0 [ 92.750672][ T4200] __x64_sys_openat+0x135/0x160 [ 92.768721][ T4200] do_syscall_64+0x4c/0xa0 [ 92.773692][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.780075][ T4938] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 92.780146][ T4200] [ 92.780146][ T4200] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 92.796641][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 92.799514][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 92.802391][ T4200] mutex_lock_nested+0x17/0x20 [ 92.802415][ T4200] bd_register_pending_holders+0x33/0x310 [ 92.821130][ T4200] device_add_disk+0x5a7/0xd40 [ 92.826438][ T4200] md_alloc+0x809/0xc00 [ 92.831140][ T4200] blk_request_module+0x26e/0x290 [ 92.836710][ T4200] blkdev_get_no_open+0x38/0x1d0 [ 92.842185][ T4200] blkdev_get_by_dev+0x77/0xa60 [ 92.847568][ T4200] swsusp_check+0x9b/0x2a0 [ 92.852518][ T4200] software_resume+0xc6/0x3b0 [ 92.857726][ T4200] resume_store+0xe4/0x130 [ 92.862680][ T4200] kernfs_fop_write_iter+0x379/0x4c0 [ 92.868761][ T4200] vfs_write+0x712/0xd00 [ 92.873536][ T4200] ksys_write+0x14d/0x250 [ 92.878396][ T4200] do_syscall_64+0x4c/0xa0 [ 92.883346][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.889782][ T4200] [ 92.889782][ T4200] -> #6 (disks_mutex){+.+.}-{3:3}: [ 92.897095][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 92.902831][ T4200] mutex_lock_nested+0x17/0x20 [ 92.908214][ T4200] md_alloc+0x48/0xc00 [ 92.912814][ T4200] blk_request_module+0x26e/0x290 [ 92.918367][ T4200] blkdev_get_no_open+0x38/0x1d0 [ 92.923836][ T4200] blkdev_get_by_dev+0x77/0xa60 [ 92.929217][ T4200] swsusp_check+0x9b/0x2a0 [ 92.934167][ T4200] software_resume+0xc6/0x3b0 [ 92.939404][ T4200] resume_store+0xe4/0x130 [ 92.944355][ T4200] kernfs_fop_write_iter+0x379/0x4c0 [ 92.950176][ T4200] vfs_write+0x712/0xd00 [ 92.954949][ T4200] ksys_write+0x14d/0x250 [ 92.959815][ T4200] do_syscall_64+0x4c/0xa0 [ 92.964780][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.971208][ T4200] [ 92.971208][ T4200] -> #5 (major_names_lock){+.+.}-{3:3}: [ 92.978936][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 92.984660][ T4200] mutex_lock_nested+0x17/0x20 [ 92.989944][ T4200] blk_request_module+0x31/0x290 [ 92.995406][ T4200] blkdev_get_no_open+0x38/0x1d0 [ 93.000870][ T4200] blkdev_get_by_dev+0x77/0xa60 [ 93.006255][ T4200] swsusp_check+0x9b/0x2a0 [ 93.011207][ T4200] software_resume+0xc6/0x3b0 [ 93.016426][ T4200] resume_store+0xe4/0x130 [ 93.021375][ T4200] kernfs_fop_write_iter+0x379/0x4c0 [ 93.027213][ T4200] vfs_write+0x712/0xd00 [ 93.031993][ T4200] ksys_write+0x14d/0x250 [ 93.036850][ T4200] do_syscall_64+0x4c/0xa0 [ 93.041800][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.048224][ T4200] [ 93.048224][ T4200] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 93.056740][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 93.062470][ T4200] mutex_lock_nested+0x17/0x20 [ 93.067770][ T4200] software_resume+0x7c/0x3b0 [ 93.072976][ T4200] resume_store+0xe4/0x130 [ 93.077923][ T4200] kernfs_fop_write_iter+0x379/0x4c0 [ 93.083756][ T4200] vfs_write+0x712/0xd00 [ 93.088527][ T4200] ksys_write+0x14d/0x250 [ 93.093385][ T4200] do_syscall_64+0x4c/0xa0 [ 93.098338][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.104757][ T4200] [ 93.104757][ T4200] -> #3 (&of->mutex){+.+.}-{3:3}: [ 93.111967][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 93.117703][ T4200] mutex_lock_nested+0x17/0x20 [ 93.123006][ T4200] kernfs_seq_start+0x51/0x3c0 [ 93.128307][ T4200] seq_read_iter+0x3c4/0xd50 [ 93.133430][ T4200] vfs_read+0x725/0xcf0 [ 93.138139][ T4200] ksys_read+0x14d/0x250 [ 93.142918][ T4200] do_syscall_64+0x4c/0xa0 [ 93.147864][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.154310][ T4200] [ 93.154310][ T4200] -> #2 (&p->lock){+.+.}-{3:3}: [ 93.161346][ T4200] __mutex_lock_common+0x1eb/0x2390 [ 93.167157][ T4200] mutex_lock_nested+0x17/0x20 [ 93.172455][ T4200] seq_read_iter+0xad/0xd50 [ 93.177488][ T4200] do_iter_readv_writev+0x497/0x600 [ 93.183215][ T4200] do_iter_read+0x20b/0x7c0 [ 93.188245][ T4200] loop_process_work+0x18dc/0x2480 [ 93.193880][ T4200] process_one_work+0x863/0x1000 [ 93.199343][ T4200] worker_thread+0xaa8/0x12a0 [ 93.204564][ T4200] kthread+0x436/0x520 [ 93.209190][ T4200] ret_from_fork+0x1f/0x30 [ 93.214142][ T4200] [ 93.214142][ T4200] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 93.223269][ T4200] process_one_work+0x7bf/0x1000 [ 93.228760][ T4200] worker_thread+0xaa8/0x12a0 [ 93.233971][ T4200] kthread+0x436/0x520 [ 93.238575][ T4200] ret_from_fork+0x1f/0x30 [ 93.243529][ T4200] [ 93.243529][ T4200] -> #0 ((wq_completion)loop3){+.+.}-{0:0}: [ 93.251620][ T4200] __lock_acquire+0x2c33/0x7c60 [ 93.257007][ T4200] lock_acquire+0x197/0x3f0 [ 93.262046][ T4200] flush_workqueue+0x142/0x1380 [ 93.267434][ T4200] drain_workqueue+0xcf/0x380 [ 93.272635][ T4200] destroy_workqueue+0x7b/0xb20 [ 93.278017][ T4200] __loop_clr_fd+0x234/0xb90 [ 93.283139][ T4200] blkdev_put+0x53f/0x7d0 [ 93.288010][ T4200] blkdev_close+0x76/0xa0 [ 93.292876][ T4200] __fput+0x234/0x930 [ 93.297388][ T4200] task_work_run+0x125/0x1a0 [ 93.302505][ T4200] exit_to_user_mode_loop+0x10f/0x130 [ 93.308424][ T4200] exit_to_user_mode_prepare+0xee/0x180 [ 93.314494][ T4200] syscall_exit_to_user_mode+0x16/0x40 [ 93.320476][ T4200] do_syscall_64+0x58/0xa0 [ 93.325437][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.331862][ T4200] [ 93.331862][ T4200] other info that might help us debug this: [ 93.331862][ T4200] [ 93.342094][ T4200] Chain exists of: [ 93.342094][ T4200] (wq_completion)loop3 --> &disk->open_mutex --> &lo->lo_mutex [ 93.342094][ T4200] [ 93.355567][ T4200] Possible unsafe locking scenario: [ 93.355567][ T4200] [ 93.363021][ T4200] CPU0 CPU1 [ 93.368392][ T4200] ---- ---- [ 93.373757][ T4200] lock(&lo->lo_mutex); [ 93.378011][ T4200] lock(&disk->open_mutex); [ 93.385127][ T4200] lock(&lo->lo_mutex); [ 93.391904][ T4200] lock((wq_completion)loop3); [ 93.396750][ T4200] [ 93.396750][ T4200] *** DEADLOCK *** [ 93.396750][ T4200] [ 93.404892][ T4200] 2 locks held by udevd/4200: [ 93.409583][ T4200] #0: ffff88802080a518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 93.418890][ T4200] #1: ffff88814775c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 93.428108][ T4200] [ 93.428108][ T4200] stack backtrace: [ 93.433999][ T4200] CPU: 0 PID: 4200 Comm: udevd Not tainted syzkaller #0 [ 93.440941][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.451038][ T4200] Call Trace: [ 93.454327][ T4200] [ 93.457265][ T4200] dump_stack_lvl+0x168/0x230 [ 93.461950][ T4200] ? load_image+0x3b0/0x3b0 [ 93.466463][ T4200] ? show_regs_print_info+0x20/0x20 [ 93.471685][ T4200] ? print_circular_bug+0x12b/0x1a0 [ 93.476892][ T4200] check_noncircular+0x274/0x310 [ 93.481843][ T4200] ? add_chain_block+0x940/0x940 [ 93.486809][ T4200] ? lockdep_lock+0xdc/0x1e0 [ 93.491415][ T4200] ? mark_lock+0x94/0x320 [ 93.495749][ T4200] __lock_acquire+0x2c33/0x7c60 [ 93.500622][ T4200] ? __lock_acquire+0x13ad/0x7c60 [ 93.505663][ T4200] ? verify_lock_unused+0x140/0x140 [ 93.510868][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 93.516866][ T4200] ? verify_lock_unused+0x140/0x140 [ 93.522069][ T4200] ? verify_lock_unused+0x140/0x140 [ 93.527314][ T4200] ? memset+0x1e/0x40 [ 93.531314][ T4200] lock_acquire+0x197/0x3f0 [ 93.535826][ T4200] ? flush_workqueue+0x126/0x1380 [ 93.540867][ T4200] ? finish_task_switch+0x1e4/0x640 [ 93.546079][ T4200] ? __mutex_trylock_common+0x14f/0x250 [ 93.551664][ T4200] ? read_lock_is_recursive+0x10/0x10 [ 93.557049][ T4200] ? __init_swait_queue_head+0xa5/0x150 [ 93.562606][ T4200] flush_workqueue+0x142/0x1380 [ 93.567492][ T4200] ? flush_workqueue+0x126/0x1380 [ 93.572551][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 93.577589][ T4200] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 93.582984][ T4200] ? rcu_work_rcufn+0x110/0x110 [ 93.587845][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 93.593615][ T4200] ? finish_wait+0xc0/0x1d0 [ 93.598150][ T4200] drain_workqueue+0xcf/0x380 [ 93.602840][ T4200] destroy_workqueue+0x7b/0xb20 [ 93.607704][ T4200] __loop_clr_fd+0x234/0xb90 [ 93.612319][ T4200] ? lo_release+0x172/0x1f0 [ 93.616856][ T4200] ? lo_open+0x100/0x100 [ 93.621112][ T4200] blkdev_put+0x53f/0x7d0 [ 93.625452][ T4200] blkdev_close+0x76/0xa0 [ 93.629786][ T4200] ? blkdev_open+0x2c0/0x2c0 [ 93.634402][ T4200] __fput+0x234/0x930 [ 93.638400][ T4200] task_work_run+0x125/0x1a0 [ 93.643004][ T4200] exit_to_user_mode_loop+0x10f/0x130 [ 93.648390][ T4200] exit_to_user_mode_prepare+0xee/0x180 [ 93.653945][ T4200] syscall_exit_to_user_mode+0x16/0x40 [ 93.659420][ T4200] do_syscall_64+0x58/0xa0 [ 93.663848][ T4200] ? clear_bhb_loop+0x30/0x80 [ 93.668537][ T4200] ? clear_bhb_loop+0x30/0x80 [ 93.673219][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.679124][ T4200] RIP: 0033:0x7f41b6372407 [ 93.683577][ T4200] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 93.703190][ T4200] RSP: 002b:00007ffcd95fd890 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 93.711609][ T4200] RAX: 0000000000000000 RBX: 00007f41b6284880 RCX: 00007f41b6372407 [ 93.719604][ T4200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 93.727574][ T4200] RBP: 00007f41b62846e8 R08: 0000000000000000 R09: 0000000000000000 [ 93.735542][ T4200] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 93.743518][ T4200] R13: 000055ecf8ff7410 R14: 0000000000000008 R15: 000055ecf8ffcf10 [ 93.751506][ T4200]