last executing test programs: 9.883433579s ago: executing program 2 (id=46): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 9.051326795s ago: executing program 2 (id=52): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000100), &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x62202, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x17, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x1, 0x8}]}) r9 = timerfd_create(0x8, 0x80800) timerfd_gettime(r9, &(0x7f0000000180)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4091, 0xffb}], 0x1) 7.74961657s ago: executing program 2 (id=58): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x100000000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="00d881", 0x3, 0x4044005, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) 7.554935364s ago: executing program 4 (id=60): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.474160405s ago: executing program 2 (id=62): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 7.365646148s ago: executing program 4 (id=65): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='stack\x00') pread64(r2, 0x0, 0x0, 0x4) 5.585242442s ago: executing program 2 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000f90061106c000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r5 = socket$netlink(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xa8}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0xfffffffd, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) setfsuid(0xee00) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$TCSETSW(0xffffffffffffffff, 0x5453, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="0f0000001300000429bd7000fedbdf2526d907024e224e2100800000590c0000f7070000060000000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00'], 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0xc0) socket$kcm(0x10, 0x2, 0x10) 5.433421405s ago: executing program 4 (id=70): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 5.375177426s ago: executing program 1 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) 5.147446951s ago: executing program 1 (id=74): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x8c, 0x200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x1e, 0x800, 0x4) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.493560103s ago: executing program 4 (id=76): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) execve(0x0, 0x0, 0x0) 4.437609514s ago: executing program 3 (id=77): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 4.402326715s ago: executing program 3 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.241459518s ago: executing program 4 (id=79): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r7, 0x0) dup3(r7, r3, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) 2.414707993s ago: executing program 3 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x0) 2.357492025s ago: executing program 0 (id=81): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) close_range(r5, r2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0xffff, 0x1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x3ff}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.357308515s ago: executing program 1 (id=82): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 2.318894525s ago: executing program 1 (id=83): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 2.282955066s ago: executing program 3 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 2.153646058s ago: executing program 1 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, 0x0, 0x0, 0x5412, 0x0, 0x0) 2.129390369s ago: executing program 0 (id=86): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) sysinfo(0x0) 2.117282459s ago: executing program 3 (id=87): unshare(0x22020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) 2.049648381s ago: executing program 1 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 2.038125731s ago: executing program 3 (id=89): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$rds(0x15, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x6, 0xfa00, {0xfffffffffffffffe}}, 0x10) 2.028191541s ago: executing program 0 (id=90): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 1.092617749s ago: executing program 0 (id=91): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 998.553731ms ago: executing program 0 (id=92): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 912.852682ms ago: executing program 4 (id=93): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x8c, 0x200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x1e, 0x800, 0x4) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 337.641253ms ago: executing program 2 (id=94): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000c00)="0500000000029e", 0x7}], 0x1) 0s ago: executing program 0 (id=95): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. syzkaller login: [ 44.477723][ T4171] cgroup: Unknown subsys name 'net' [ 44.583800][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.802699][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.066910][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 47.210383][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 47.224482][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 47.234942][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.243086][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.251039][ T4195] device bridge_slave_0 entered promiscuous mode [ 47.262327][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.269460][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.277477][ T4195] device bridge_slave_1 entered promiscuous mode [ 47.297918][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 47.326496][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.353191][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 47.364575][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.445321][ T4195] team0: Port device team_slave_0 added [ 47.474897][ T4195] team0: Port device team_slave_1 added [ 47.499094][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.506381][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.514003][ T4187] device bridge_slave_0 entered promiscuous mode [ 47.535726][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.542804][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.551029][ T4191] device bridge_slave_0 entered promiscuous mode [ 47.561505][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.569347][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.577285][ T4191] device bridge_slave_1 entered promiscuous mode [ 47.592382][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.599621][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.608004][ T4187] device bridge_slave_1 entered promiscuous mode [ 47.619929][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627072][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.635109][ T4193] device bridge_slave_0 entered promiscuous mode [ 47.665908][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.672869][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.699169][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.710888][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.718254][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.726358][ T4193] device bridge_slave_1 entered promiscuous mode [ 47.741209][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.758649][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.765684][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.791904][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.811207][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.818860][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.827149][ T4183] device bridge_slave_0 entered promiscuous mode [ 47.835673][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.846468][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.867405][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.874583][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.882896][ T4183] device bridge_slave_1 entered promiscuous mode [ 47.905485][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.916657][ T4191] team0: Port device team_slave_0 added [ 47.924841][ T4191] team0: Port device team_slave_1 added [ 47.932705][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.970095][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.996689][ T4187] team0: Port device team_slave_0 added [ 48.018303][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.034937][ T4187] team0: Port device team_slave_1 added [ 48.048681][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.055890][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.081961][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.107691][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.119218][ T4195] device hsr_slave_0 entered promiscuous mode [ 48.126465][ T4195] device hsr_slave_1 entered promiscuous mode [ 48.142587][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.149720][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.176076][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.193349][ T4193] team0: Port device team_slave_0 added [ 48.213110][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.220387][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.246480][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.259668][ T4193] team0: Port device team_slave_1 added [ 48.283289][ T4183] team0: Port device team_slave_0 added [ 48.289456][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.297017][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.322970][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.349472][ T4191] device hsr_slave_0 entered promiscuous mode [ 48.356720][ T4191] device hsr_slave_1 entered promiscuous mode [ 48.363376][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.374099][ T4191] Cannot create hsr debugfs directory [ 48.380780][ T4183] team0: Port device team_slave_1 added [ 48.406314][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.413353][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.439551][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.458993][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.466152][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.492233][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.509530][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.516770][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.542870][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.557892][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.564853][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.590912][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.632874][ T4187] device hsr_slave_0 entered promiscuous mode [ 48.639820][ T4187] device hsr_slave_1 entered promiscuous mode [ 48.646572][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.654273][ T4187] Cannot create hsr debugfs directory [ 48.739287][ T4183] device hsr_slave_0 entered promiscuous mode [ 48.746617][ T4183] device hsr_slave_1 entered promiscuous mode [ 48.753462][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.761079][ T4183] Cannot create hsr debugfs directory [ 48.772377][ T4193] device hsr_slave_0 entered promiscuous mode [ 48.776713][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 48.779308][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 48.791862][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 48.792955][ T4193] device hsr_slave_1 entered promiscuous mode [ 48.804526][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.812280][ T4193] Cannot create hsr debugfs directory [ 48.855764][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 48.861984][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 49.054931][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.066336][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.077145][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.086466][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.129757][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.141467][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.155264][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.169609][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.222559][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.233568][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.255343][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.269225][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.323083][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.332395][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.348900][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.357341][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.388440][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.410164][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.422512][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.433129][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.443383][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.468924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.479670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.493523][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.528129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.538444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.548981][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.556213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.565118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.577778][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.598944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.608726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.617839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.624918][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.636573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.645039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.668997][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.697876][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.707570][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.716784][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.725194][ T896] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.732273][ T896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.740296][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.751333][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.760023][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.770545][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.779000][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.810014][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.819627][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.831089][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.838203][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.847589][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.856798][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.865301][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.874284][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.882923][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.891786][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.900690][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.910018][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.928787][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.945430][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.955460][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.969563][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.979852][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.992588][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.008313][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.029088][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.046619][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.073566][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.085766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.094328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.103898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.112655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.121702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.129570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.138000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.158672][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.182618][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.206385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.215305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.234052][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.241201][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.250303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.259480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.268844][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.276294][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.284443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.292215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.300096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.308225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.316598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.332346][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.343118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.356099][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.390715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.400634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.410308][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.417431][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.426921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.435444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.460440][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.470491][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.479343][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.489602][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.498185][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.506834][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.515066][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.523282][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.531810][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.541042][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.549687][ T896] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.557056][ T896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.566008][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.574655][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.583851][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.592961][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.608716][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.633164][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.642263][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.652326][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.660696][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.669569][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.678069][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.697298][ T4195] device veth0_vlan entered promiscuous mode [ 50.708261][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.722181][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.734277][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.745415][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.754345][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.761413][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.770273][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.780381][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.789189][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.796302][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.804005][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.813433][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.823058][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.831100][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.838887][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.847931][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.857082][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 50.857166][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.864063][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 50.873531][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.882389][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 50.886190][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.901591][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.930077][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.941237][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.948485][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 50.966471][ T4195] device veth1_vlan entered promiscuous mode [ 50.974367][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.984715][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.993707][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 51.008640][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.017750][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.027072][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.035366][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.043936][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.052626][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.063112][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.072238][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.095025][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.117049][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.137453][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.152518][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.181117][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.193341][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.214107][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.222503][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.231415][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.240189][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.264792][ T4191] device veth0_vlan entered promiscuous mode [ 51.301145][ T4195] device veth0_macvtap entered promiscuous mode [ 51.312999][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.326630][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.346291][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.354981][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.366920][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.375302][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.383097][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.398807][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.408489][ T4195] device veth1_macvtap entered promiscuous mode [ 51.428172][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.446245][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.465233][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.473811][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.489477][ T4191] device veth1_vlan entered promiscuous mode [ 51.511495][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.525375][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.534500][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.544619][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.552428][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.561019][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.575187][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.589080][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.606593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.615511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.627292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.651360][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.660120][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.672059][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.682633][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.691717][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.700612][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.726016][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.742325][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.757283][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.772133][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.781489][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.792687][ T4191] device veth0_macvtap entered promiscuous mode [ 51.824272][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.832583][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.843463][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.885417][ T4191] device veth1_macvtap entered promiscuous mode [ 51.894567][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.903518][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.912960][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.921610][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.929784][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.943605][ T4183] device veth0_vlan entered promiscuous mode [ 51.963769][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.972734][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.012677][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.023710][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.035182][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.046418][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.057792][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.069114][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.086196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.094899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.104679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.113813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.125196][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.133691][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.148206][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.157171][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.166824][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.175607][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.190780][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.198737][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.205892][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.208347][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.214894][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.231691][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.240366][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.249915][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.257871][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.267342][ T4187] device veth0_vlan entered promiscuous mode [ 52.276432][ T4193] device veth0_vlan entered promiscuous mode [ 52.311762][ T4187] device veth1_vlan entered promiscuous mode [ 52.322504][ T4183] device veth1_vlan entered promiscuous mode [ 52.333424][ T4193] device veth1_vlan entered promiscuous mode [ 52.387816][ T896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.399042][ T896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.408490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.425132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.434022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.444720][ T4187] device veth0_macvtap entered promiscuous mode [ 52.465218][ T4193] device veth0_macvtap entered promiscuous mode [ 52.481770][ T4187] device veth1_macvtap entered promiscuous mode [ 52.497870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.512140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.522187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.538631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.547875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.557006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.566793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.577861][ T4193] device veth1_macvtap entered promiscuous mode [ 52.609265][ T4183] device veth0_macvtap entered promiscuous mode [ 52.646457][ T4183] device veth1_macvtap entered promiscuous mode [ 52.663113][ T4286] loop2: detected capacity change from 0 to 256 [ 52.669817][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.682180][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.692812][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.706427][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.719536][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.729854][ T896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.739271][ T4286] ======================================================= [ 52.739271][ T4286] WARNING: The mand mount option has been deprecated and [ 52.739271][ T4286] and is ignored by this kernel. Remove the mand [ 52.739271][ T4286] option from the mount to silence this warning. [ 52.739271][ T4286] ======================================================= [ 52.740613][ T896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.792966][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.818538][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.829792][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.842211][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.852304][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.863340][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.879914][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.887481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.888303][ T4286] FAT-fs (loop2): Directory bread(block 64) failed [ 52.896692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.903592][ T4286] FAT-fs (loop2): Directory bread(block 65) failed [ 52.915074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.916552][ T4286] FAT-fs (loop2): Directory bread(block 66) failed [ 52.924655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.929850][ T4286] FAT-fs (loop2): Directory bread(block 67) failed [ 52.929930][ T4286] FAT-fs (loop2): Directory bread(block 68) failed [ 52.929957][ T4286] FAT-fs (loop2): Directory bread(block 69) failed [ 52.930013][ T4286] FAT-fs (loop2): Directory bread(block 70) failed [ 52.945189][ T1324] Bluetooth: hci1: command 0x040f tx timeout [ 52.952327][ T4286] FAT-fs (loop2): Directory bread(block 71) failed [ 52.957726][ T1324] Bluetooth: hci2: command 0x040f tx timeout [ 52.969420][ T4286] FAT-fs (loop2): Directory bread(block 72) failed [ 52.970987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.976883][ T4286] FAT-fs (loop2): Directory bread(block 73) failed [ 52.982641][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 52.997899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.018903][ T1324] Bluetooth: hci4: command 0x040f tx timeout [ 53.030549][ T1324] Bluetooth: hci3: command 0x040f tx timeout [ 53.050003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.060450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.072580][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.083890][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.093977][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.104999][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.116861][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.127641][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.144809][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.155572][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.167420][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.182079][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.192796][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.208248][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.220864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.237109][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.264862][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.278569][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.289399][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.299967][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.309920][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.321019][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.332674][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.333316][ T4292] loop2: detected capacity change from 0 to 512 [ 53.358339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.372181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.380594][ T4292] EXT4-fs (loop2): Ignoring removed oldalloc option [ 53.381647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.388833][ T4292] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.401110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.418981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.427442][ T4292] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.7: Parent and EA inode have the same ino 15 [ 53.428262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.448094][ T4292] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.457364][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.466577][ T4292] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.7: Parent and EA inode have the same ino 15 [ 53.471551][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.489720][ T4292] EXT4-fs (loop2): 1 orphan inode deleted [ 53.492415][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.504971][ T4292] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,block_validity,,errors=continue. Quota mode: none. [ 53.505081][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.576607][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 53.609661][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.618812][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.628081][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.636979][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.651645][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.662778][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.672631][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.683079][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.693082][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.703519][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.713872][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.724643][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.738249][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.759157][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.763297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.776272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.789472][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.800046][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.822142][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.833475][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.842573][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.853236][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.962755][ T896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.999939][ T896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.008092][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.023051][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.041569][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.057893][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.073449][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.097083][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.116197][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.137855][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.151012][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.198036][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.207523][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.223493][ T4302] loop4: detected capacity change from 0 to 128 [ 54.229824][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.230472][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.289152][ T4302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.306531][ T4302] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.334636][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.370888][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.415846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.535468][ T4298] Zero length message leads to an empty skb [ 54.775422][ T4316] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 54.783024][ T4316] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1'. [ 55.128010][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 55.706710][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 55.751212][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 55.789010][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 55.798041][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 55.859712][ T4319] loop4: detected capacity change from 0 to 1024 [ 55.973695][ T4321] loop3: detected capacity change from 0 to 2048 [ 56.455545][ C1] sched: RT throttling activated [ 57.000103][ T4326] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12'. [ 57.010311][ T4327] lo speed is unknown, defaulting to 1000 [ 57.059932][ T4327] lo speed is unknown, defaulting to 1000 [ 57.068471][ T4327] lo speed is unknown, defaulting to 1000 [ 57.078057][ T4327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.090263][ T4327] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.130043][ T4327] lo speed is unknown, defaulting to 1000 [ 57.137638][ T4319] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 57.146629][ T4325] Alternate GPT is invalid, using primary GPT. [ 57.153836][ T4325] loop3: p2 p3 p7 [ 57.158037][ T4319] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 57.168486][ T4327] lo speed is unknown, defaulting to 1000 [ 57.184951][ T4327] lo speed is unknown, defaulting to 1000 [ 57.205700][ T4319] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #5: comm syz.4.8: unexpected bad inode w/o EXT4_IGET_BAD [ 57.271429][ T4319] EXT4-fs (loop4): no journal found [ 57.278837][ T4319] EXT4-fs (loop4): can't get journal size [ 57.285402][ T4319] EXT4-fs (loop4): too many log groups per flexible block group [ 57.294685][ T4319] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 57.304354][ T4319] EXT4-fs (loop4): mount failed [ 57.371792][ T4327] lo speed is unknown, defaulting to 1000 [ 57.378759][ T4327] lo speed is unknown, defaulting to 1000 [ 57.385810][ T4327] lo speed is unknown, defaulting to 1000 [ 57.508789][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 58.031485][ T3561] Alternate GPT is invalid, using primary GPT. [ 58.041324][ T3561] loop3: p2 p3 p7 [ 58.045922][ T4340] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 58.054069][ T4340] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10'. [ 58.474660][ T4321] Alternate GPT is invalid, using primary GPT. [ 58.483797][ T4321] loop3: p2 p3 p7 [ 59.003754][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.003977][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.029352][ T4360] loop2: detected capacity change from 0 to 512 [ 59.047766][ T26] audit: type=1326 audit(1757591453.968:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.051693][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 59.126198][ T26] audit: type=1326 audit(1757591453.998:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.195706][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 59.196157][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.219080][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.285417][ T26] audit: type=1326 audit(1757591453.998:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.325221][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.333923][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.341710][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 59.372380][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.448271][ T4360] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.486834][ T26] audit: type=1326 audit(1757591453.998:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.611159][ T26] audit: type=1326 audit(1757591453.998:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.645904][ T4360] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 59.734336][ T26] audit: type=1326 audit(1757591453.998:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 59.833099][ T4195] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2941: inode #15: comm syz-executor: corrupted xattr block 33 [ 59.857465][ T26] audit: type=1326 audit(1757591453.998:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 60.013211][ T4195] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 60.020412][ T26] audit: type=1326 audit(1757591453.998:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 60.037397][ T4386] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18'. [ 60.044961][ T26] audit: type=1326 audit(1757591453.998:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 60.075651][ T26] audit: type=1326 audit(1757591453.998:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 60.092553][ T4388] loop4: detected capacity change from 0 to 1024 [ 60.190956][ T4390] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 60.199009][ T4390] netlink: 17 bytes leftover after parsing attributes in process `syz.3.29'. [ 60.584100][ T4388] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.049569][ T4388] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.30: Allocating blocks 497-513 which overlap fs metadata [ 61.158317][ T4388] EXT4-fs (loop4): pa ffff88807513a7e0: logic 64, phys. 209, len 19 [ 61.166752][ T4388] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 61.661429][ T4409] netlink: 332 bytes leftover after parsing attributes in process `syz.2.28'. [ 62.034662][ T4413] loop0: detected capacity change from 0 to 8192 [ 62.191782][ T4422] loop4: detected capacity change from 0 to 1024 [ 62.286166][ T4426] process 'syz.1.43' launched '/dev/fd/4' with NULL argv: empty string added [ 62.366513][ T4422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.596091][ T4434] usb usb8: usbfs: process 4434 (syz.1.43) did not claim interface 0 before use [ 63.040384][ T4439] mmap: syz.2.46 (4439) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 63.097126][ T4437] loop0: detected capacity change from 0 to 512 [ 63.420004][ T4451] netlink: 'syz.1.48': attribute type 4 has an invalid length. [ 63.427715][ T4451] netlink: 17 bytes leftover after parsing attributes in process `syz.1.48'. [ 63.725425][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.074144][ T4453] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 64.082192][ T4437] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.596115][ T4463] loop3: detected capacity change from 0 to 128 [ 64.690431][ T4463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.779483][ T4463] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.275305][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 65.286668][ T4477] IPVS: Error joining to the multicast group [ 65.635510][ T4486] loop3: detected capacity change from 0 to 164 [ 66.908058][ T4492] netlink: 830 bytes leftover after parsing attributes in process `syz.2.62'. [ 66.928436][ T4493] netlink: 830 bytes leftover after parsing attributes in process `syz.1.63'. [ 67.348222][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 67.348234][ T26] audit: type=1326 audit(1757591462.268:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1107ababa9 code=0x7ffc0000 [ 67.448278][ T4502] loop4: detected capacity change from 0 to 1024 [ 67.455382][ T26] audit: type=1326 audit(1757591462.308:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1107ababa9 code=0x7ffc0000 [ 67.525826][ T4502] EXT4-fs (loop4): Ignoring removed bh option [ 67.553870][ T26] audit: type=1326 audit(1757591462.318:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1107ababa9 code=0x7ffc0000 [ 67.579125][ T4502] EXT4-fs (loop4): inline encryption not supported [ 67.615066][ T4502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 67.675418][ T26] audit: type=1326 audit(1757591462.318:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1107ababa9 code=0x7ffc0000 [ 67.762825][ T26] audit: type=1326 audit(1757591462.318:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1107ababa9 code=0x7ffc0000 [ 67.804514][ T4502] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.70: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.805997][ T4508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.73'. [ 67.892908][ T4502] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 67.966585][ T4502] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.70: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.024527][ T4502] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 68.059437][ T4502] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.70: Failed to acquire dquot type 0 [ 68.095197][ T4502] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 68.127091][ T4502] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.70: mark_inode_dirty error [ 68.146817][ T4502] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 68.170339][ T4502] EXT4-fs (loop4): 1 orphan inode deleted [ 68.177148][ T4502] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 68.196613][ T4391] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.235912][ T4391] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 68.250889][ T4391] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 0 [ 68.283922][ T4187] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 68.332066][ T4187] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 68.342713][ T4187] EXT4-fs error (device loop4): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 68.505216][ T4518] infiniband syz!: set active [ 68.515705][ T26] audit: type=1326 audit(1757591463.408:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 68.547371][ T4518] infiniband syz!: added team_slave_0 [ 68.572939][ T26] audit: type=1326 audit(1757591463.408:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f207e932ba9 code=0x7ffc0000 [ 68.611443][ T4518] infiniband syz!: Couldn't open port 1 [ 68.784858][ T4531] netlink: 830 bytes leftover after parsing attributes in process `syz.3.78'. [ 69.869360][ T4533] netlink: 830 bytes leftover after parsing attributes in process `syz.4.79'. [ 70.363064][ T4518] RDS/IB: syz!: added [ 70.368678][ T4518] smc: adding ib device syz! with port count 1 [ 70.375161][ T4518] smc: ib device syz! port 1 has pnetid [ 70.483610][ T4538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.550634][ T4538] hub 2-0:1.0: USB hub found [ 70.559693][ T4538] hub 2-0:1.0: 1 port detected [ 70.585357][ T4547] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 70.585978][ T4546] IPVS: stopping master sync thread 4547 ... [ 70.651599][ T4549] syz.1.85[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.651697][ T4549] syz.1.85[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.339870][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365669][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.694492][ T4533] lo speed is unknown, defaulting to 1000 [ 71.700386][ T4533] lo speed is unknown, defaulting to 1000 [ 71.707993][ T4533] lo speed is unknown, defaulting to 1000 [ 71.720844][ T4533] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.724996][ T4564] netlink: 830 bytes leftover after parsing attributes in process `syz.0.91'. [ 71.756143][ T4533] lo speed is unknown, defaulting to 1000 [ 71.765979][ T4533] lo speed is unknown, defaulting to 1000 [ 71.773431][ T4533] lo speed is unknown, defaulting to 1000 [ 71.780784][ T4533] lo speed is unknown, defaulting to 1000 [ 71.787528][ T4533] lo speed is unknown, defaulting to 1000 [ 71.794154][ T4533] lo speed is unknown, defaulting to 1000 [ 72.718820][ T4571] crypto_alloc_aead failed rc=-2 [ 72.892976][ T4588] [ 72.895349][ T4588] ====================================================== [ 72.902358][ T4588] WARNING: possible circular locking dependency detected [ 72.909386][ T4588] syzkaller #0 Not tainted [ 72.913807][ T4588] ------------------------------------------------------ [ 72.920815][ T4588] syz.2.94/4588 is trying to acquire lock: [ 72.926614][ T4588] ffff88807cd00b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 72.937072][ T4588] [ 72.937072][ T4588] but task is already holding lock: [ 72.944429][ T4588] ffff88807cd00ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 72.953746][ T4588] [ 72.953746][ T4588] which lock already depends on the new lock. [ 72.953746][ T4588] [ 72.964146][ T4588] [ 72.964146][ T4588] the existing dependency chain (in reverse order) is: [ 72.973156][ T4588] [ 72.973156][ T4588] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 72.980808][ T4588] __mutex_lock_common+0x1eb/0x2390 [ 72.986536][ T4588] mutex_lock_nested+0x17/0x20 [ 72.991822][ T4588] hci_dev_do_close+0x5f/0x1030 [ 72.997201][ T4588] hci_rfkill_set_block+0x10a/0x190 [ 73.002931][ T4588] rfkill_set_block+0x1c6/0x420 [ 73.008319][ T4588] rfkill_fop_write+0x2ed/0x560 [ 73.013696][ T4588] do_iter_write+0x3e4/0x7b0 [ 73.018810][ T4588] do_writev+0x254/0x410 [ 73.023581][ T4588] do_syscall_64+0x4c/0xa0 [ 73.028526][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.034946][ T4588] [ 73.034946][ T4588] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 73.042943][ T4588] __mutex_lock_common+0x1eb/0x2390 [ 73.048672][ T4588] mutex_lock_nested+0x17/0x20 [ 73.053966][ T4588] rfkill_register+0x33/0x8a0 [ 73.059179][ T4588] hci_register_dev+0x452/0x970 [ 73.064552][ T4588] vhci_create_device+0x32c/0x5c0 [ 73.070099][ T4588] vhci_write+0x391/0x450 [ 73.074957][ T4588] vfs_write+0x712/0xd00 [ 73.079721][ T4588] ksys_write+0x14d/0x250 [ 73.084578][ T4588] do_syscall_64+0x4c/0xa0 [ 73.089516][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.095937][ T4588] [ 73.095937][ T4588] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 73.103755][ T4588] __mutex_lock_common+0x1eb/0x2390 [ 73.109483][ T4588] mutex_lock_nested+0x17/0x20 [ 73.114775][ T4588] vhci_send_frame+0x88/0x100 [ 73.119977][ T4588] hci_send_frame+0x1a9/0x2e0 [ 73.125179][ T4588] hci_tx_work+0x9f9/0x1710 [ 73.130211][ T4588] process_one_work+0x863/0x1000 [ 73.135676][ T4588] worker_thread+0xaa8/0x12a0 [ 73.140877][ T4588] kthread+0x436/0x520 [ 73.145474][ T4588] ret_from_fork+0x1f/0x30 [ 73.150422][ T4588] [ 73.150422][ T4588] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 73.159630][ T4588] __lock_acquire+0x2c33/0x7c60 [ 73.165013][ T4588] lock_acquire+0x197/0x3f0 [ 73.170042][ T4588] __flush_work+0xdd/0x1b0 [ 73.175071][ T4588] hci_dev_do_close+0x1e7/0x1030 [ 73.180535][ T4588] hci_rfkill_set_block+0x10a/0x190 [ 73.186261][ T4588] rfkill_set_block+0x1c6/0x420 [ 73.191636][ T4588] rfkill_fop_write+0x2ed/0x560 [ 73.197025][ T4588] do_iter_write+0x3e4/0x7b0 [ 73.202141][ T4588] do_writev+0x254/0x410 [ 73.206909][ T4588] do_syscall_64+0x4c/0xa0 [ 73.211847][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.218264][ T4588] [ 73.218264][ T4588] other info that might help us debug this: [ 73.218264][ T4588] [ 73.228489][ T4588] Chain exists of: [ 73.228489][ T4588] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 73.228489][ T4588] [ 73.243440][ T4588] Possible unsafe locking scenario: [ 73.243440][ T4588] [ 73.251406][ T4588] CPU0 CPU1 [ 73.256779][ T4588] ---- ---- [ 73.262147][ T4588] lock(&hdev->req_lock); [ 73.266565][ T4588] lock(rfkill_global_mutex); [ 73.273844][ T4588] lock(&hdev->req_lock); [ 73.280801][ T4588] lock((work_completion)(&hdev->tx_work)); [ 73.286779][ T4588] [ 73.286779][ T4588] *** DEADLOCK *** [ 73.286779][ T4588] [ 73.294920][ T4588] 2 locks held by syz.2.94/4588: [ 73.296803][ T4590] caif:caif_disconnect_client(): nothing to disconnect [ 73.299852][ T4588] #0: ffffffff8d4c01a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 73.316769][ T4588] #1: ffff88807cd00ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 73.326535][ T4588] [ 73.326535][ T4588] stack backtrace: [ 73.332428][ T4588] CPU: 1 PID: 4588 Comm: syz.2.94 Not tainted syzkaller #0 [ 73.339629][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.349701][ T4588] Call Trace: [ 73.352998][ T4588] [ 73.355922][ T4588] dump_stack_lvl+0x168/0x230 [ 73.360602][ T4588] ? load_image+0x3b0/0x3b0 [ 73.365105][ T4588] ? show_regs_print_info+0x20/0x20 [ 73.370308][ T4588] ? print_circular_bug+0x12b/0x1a0 [ 73.375513][ T4588] check_noncircular+0x274/0x310 [ 73.380446][ T4588] ? add_chain_block+0x940/0x940 [ 73.385383][ T4588] ? lockdep_lock+0xdc/0x1e0 [ 73.390008][ T4588] ? mark_lock+0x94/0x320 [ 73.394344][ T4588] __lock_acquire+0x2c33/0x7c60 [ 73.399208][ T4588] ? lockdep_unlock+0x134/0x2d0 [ 73.404064][ T4588] ? lockdep_lock+0x1e0/0x1e0 [ 73.408740][ T4588] ? mark_lock+0x94/0x320 [ 73.413074][ T4588] ? verify_lock_unused+0x140/0x140 [ 73.418275][ T4588] ? __lock_acquire+0x12d9/0x7c60 [ 73.423307][ T4588] lock_acquire+0x197/0x3f0 [ 73.427812][ T4588] ? __flush_work+0xc1/0x1b0 [ 73.432407][ T4588] ? __mutex_trylock_common+0x14f/0x250 [ 73.437954][ T4588] ? read_lock_is_recursive+0x10/0x10 [ 73.443329][ T4588] ? lock_chain_count+0x20/0x20 [ 73.448183][ T4588] ? mark_lock+0x94/0x320 [ 73.452517][ T4588] __flush_work+0xdd/0x1b0 [ 73.456931][ T4588] ? __flush_work+0xc1/0x1b0 [ 73.461526][ T4588] ? flush_work+0x20/0x20 [ 73.465864][ T4588] ? hci_leds_update_powered+0x148/0x160 [ 73.471496][ T4588] ? rcu_lock_release+0x5/0x20 [ 73.476264][ T4588] ? __lock_acquire+0x7c60/0x7c60 [ 73.481291][ T4588] hci_dev_do_close+0x1e7/0x1030 [ 73.486228][ T4588] ? _raw_spin_unlock+0x40/0x40 [ 73.491088][ T4588] hci_rfkill_set_block+0x10a/0x190 [ 73.496289][ T4588] ? rcu_lock_release+0x20/0x20 [ 73.501140][ T4588] rfkill_set_block+0x1c6/0x420 [ 73.505993][ T4588] rfkill_fop_write+0x2ed/0x560 [ 73.510847][ T4588] ? _copy_from_user+0x111/0x170 [ 73.515914][ T4588] ? rfkill_fop_read+0x4b0/0x4b0 [ 73.520865][ T4588] ? common_file_perm+0x171/0x1c0 [ 73.525910][ T4588] ? fsnotify_perm+0x5d/0x560 [ 73.530589][ T4588] ? security_file_permission+0x75/0xa0 [ 73.536139][ T4588] do_iter_write+0x3e4/0x7b0 [ 73.540743][ T4588] do_writev+0x254/0x410 [ 73.544996][ T4588] ? do_readv+0x3e0/0x3e0 [ 73.549335][ T4588] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 73.555332][ T4588] ? lock_chain_count+0x20/0x20 [ 73.560183][ T4588] ? vtime_user_exit+0x2dc/0x400 [ 73.565129][ T4588] ? lockdep_hardirqs_on+0x94/0x140 [ 73.570331][ T4588] do_syscall_64+0x4c/0xa0 [ 73.574746][ T4588] ? clear_bhb_loop+0x30/0x80 [ 73.579428][ T4588] ? clear_bhb_loop+0x30/0x80 [ 73.584114][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.590024][ T4588] RIP: 0033:0x7fd387f71ba9 [ 73.594444][ T4588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.614053][ T4588] RSP: 002b:00007fd3861d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 73.622480][ T4588] RAX: ffffffffffffffda RBX: 00007fd3881b8fa0 RCX: 00007fd387f71ba9 [ 73.630452][ T4588] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 73.638428][ T4588] RBP: 00007fd387ff4e19 R08: 0000000000000000 R09: 0000000000000000 [ 73.646404][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.654377][ T4588] R13: 00007fd3881b9038 R14: 00007fd3881b8fa0 R15: 00007ffdbd256c78 [ 73.662358][ T4588] [ 73.675966][ T4568] lo speed is unknown, defaulting to 1000 [ 76.460109][ T1108] cfg80211: failed to load regulatory.db