last executing test programs: 1.991468003s ago: executing program 4 (id=113): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) read(r1, &(0x7f0000000040)=""/190, 0xbe) 1.818313169s ago: executing program 3 (id=117): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x144, 0x44003) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.731882556s ago: executing program 4 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) 1.623883706s ago: executing program 4 (id=121): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="400204a015cd42"], 0x7) 1.391887647s ago: executing program 2 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.378637428s ago: executing program 4 (id=125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0x8000000000000003}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.115732511s ago: executing program 4 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) 1.027078039s ago: executing program 4 (id=130): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x800800, &(0x7f0000000080)={[{@fat=@flush}, {@utf8}, {@utf8no}, {@utf8}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0x3, 0x21f, &(0x7f0000000940)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 932.014157ms ago: executing program 2 (id=131): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r0 = syz_io_uring_setup(0xbd6, &(0x7f0000000640)={0x0, 0x356d, 0x80, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 931.651577ms ago: executing program 1 (id=132): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 843.327465ms ago: executing program 3 (id=133): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000340)={@multicast, @remote, @void, {@generic={0x16, "da581f2b1361b1096ef8242e4e186ca3e463eb11d46d"}}}, 0x0) 830.792716ms ago: executing program 2 (id=134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r2, &(0x7f0000000040)=""/190, 0xbe) 672.106ms ago: executing program 1 (id=135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000080)={[{@nombcache}, {@debug}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) quotactl$Q_SETQUOTA(0x80000000c0001400, &(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 671.80595ms ago: executing program 3 (id=136): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) 666.433701ms ago: executing program 2 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) 599.351277ms ago: executing program 3 (id=138): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0xee01, r0, r0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'syzkaller1\x00'}) 504.025195ms ago: executing program 0 (id=139): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5ff, &(0x7f0000000600)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 503.712065ms ago: executing program 1 (id=140): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) 401.131044ms ago: executing program 1 (id=141): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 384.641406ms ago: executing program 3 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000b0605000000000000000000000000000900020073797a3000000000050001000700000004000780592e4abd953cf25181511afd76cd4a4084"], 0x2c}}, 0x0) 291.957654ms ago: executing program 0 (id=143): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x44000400) inotify_rm_watch(r0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 279.617565ms ago: executing program 3 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") 274.670015ms ago: executing program 0 (id=145): syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@rand_addr=0x64010102}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 180.262214ms ago: executing program 1 (id=146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="200000001114074904000000fddbdf2508004a000000000008004b0013"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 179.881084ms ago: executing program 0 (id=147): bpf$TOKEN_CREATE(0x24, &(0x7f0000002600), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x218}, 0x1c) 170.283834ms ago: executing program 1 (id=148): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) 121.205109ms ago: executing program 0 (id=149): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4010000000000dfd, 0x0, 0x0, 0x19, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 67.715884ms ago: executing program 2 (id=150): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r0, 0x7}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x20000003}, r4}}, 0x30) 1.904689ms ago: executing program 2 (id=151): getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xec4}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 0 (id=152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.225' (ED25519) to the list of known hosts. [ 54.449734][ T4170] cgroup: Unknown subsys name 'net' [ 54.582750][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.060232][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.120987][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.204618][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 58.283683][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 58.308478][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.325196][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 58.375895][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.383258][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.392288][ T4183] device bridge_slave_0 entered promiscuous mode [ 58.417296][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.424434][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.432756][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.440817][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.447936][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.456003][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.463862][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.470939][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.479061][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.562046][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.569392][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.577409][ T4180] device bridge_slave_0 entered promiscuous mode [ 58.585403][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.592786][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.601006][ T4193] device bridge_slave_0 entered promiscuous mode [ 58.610516][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.622220][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.639094][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.646252][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.654686][ T4180] device bridge_slave_1 entered promiscuous mode [ 58.662266][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.669708][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.678241][ T4193] device bridge_slave_1 entered promiscuous mode [ 58.687479][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.698063][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.747805][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.754874][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.763393][ T4181] device bridge_slave_0 entered promiscuous mode [ 58.793388][ T4183] team0: Port device team_slave_0 added [ 58.799611][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.806966][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.814900][ T4181] device bridge_slave_1 entered promiscuous mode [ 58.823497][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.836140][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.847164][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.858650][ T4188] team0: Port device team_slave_0 added [ 58.865891][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.879830][ T4183] team0: Port device team_slave_1 added [ 58.905839][ T4188] team0: Port device team_slave_1 added [ 58.963852][ T4180] team0: Port device team_slave_0 added [ 58.971930][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.983849][ T4193] team0: Port device team_slave_0 added [ 58.991257][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.998660][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.024727][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.038033][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.044991][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.071098][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.083245][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.090431][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.116402][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.129069][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.139629][ T4180] team0: Port device team_slave_1 added [ 59.146595][ T4193] team0: Port device team_slave_1 added [ 59.164671][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.171773][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.198168][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.237463][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.244421][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.270606][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.311788][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.319998][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.346052][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.373112][ T4181] team0: Port device team_slave_0 added [ 59.379598][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.386571][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.412872][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.435810][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.442604][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.456680][ T4181] team0: Port device team_slave_1 added [ 59.465647][ T4193] device hsr_slave_0 entered promiscuous mode [ 59.472675][ T4193] device hsr_slave_1 entered promiscuous mode [ 59.479371][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.487251][ T4193] Cannot create hsr debugfs directory [ 59.493020][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.500032][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.525943][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.571761][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.578613][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.585064][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.592697][ T4183] Cannot create hsr debugfs directory [ 59.622970][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.630183][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.656178][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.692253][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.699337][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.725743][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.762091][ T4180] device hsr_slave_0 entered promiscuous mode [ 59.769735][ T4180] device hsr_slave_1 entered promiscuous mode [ 59.776318][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.783980][ T4180] Cannot create hsr debugfs directory [ 59.853235][ T4181] device hsr_slave_0 entered promiscuous mode [ 59.860374][ T4181] device hsr_slave_1 entered promiscuous mode [ 59.867480][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 59.867639][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 59.880268][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 59.886300][ T4191] Bluetooth: hci4: command 0x0409 tx timeout [ 59.886537][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.892820][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 59.906369][ T4181] Cannot create hsr debugfs directory [ 60.107675][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.122640][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.142333][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.150984][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.210877][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.226025][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.245283][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.263712][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.308464][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.318466][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.328293][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.362960][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.383616][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.404033][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.420278][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.437479][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.446364][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.456031][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.471342][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.479159][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.526541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.535857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.546052][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.553330][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.562405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.571939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.582338][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.589461][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.597595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.606439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.633177][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.649626][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.656442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.671791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.682558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.698237][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.707148][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.720260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.737709][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.769489][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.782836][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.793720][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.818725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.829148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.838843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.847731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.857432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.865701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.875352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.883221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.910446][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.926790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.958922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.974754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.982686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.997746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.006477][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013581][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.022704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.032132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.040659][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.047754][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.056196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.069817][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.079444][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.100566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.110159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.119066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.132759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.142082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.156483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.169177][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.205409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.214250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.225688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.235086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.245004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.253713][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.260853][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.269503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.278684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.286975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.295480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.304257][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.311424][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.320137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.329309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.337848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.346458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.355712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.378994][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.394114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.403548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.414313][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.421438][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.430448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.439345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.448096][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.455154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.463811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.472088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.502432][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.510619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.519996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.544106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.568906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.583514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.592733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.602272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.611301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.624379][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.651793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.664955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.682241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.693912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.702640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.715741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.730297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.739810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.750682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.767872][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.775624][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.787040][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.807183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.815522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.833075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.854142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.869026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.891619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.904735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.923842][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.938731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.946148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.954933][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 61.973768][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 61.987355][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 61.997051][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 62.005987][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.007841][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 62.030910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.053354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.077494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.084578][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.102355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.122404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.131367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.140510][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.147605][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.189702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.205193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.221115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.230943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.240223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.254276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.271715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.280492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.312739][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.323881][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.338278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.346050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.355148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.363942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.373593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.383377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.392105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.400954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.409984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.421864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.430148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.439137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.451529][ T4193] device veth0_vlan entered promiscuous mode [ 62.471369][ T4193] device veth1_vlan entered promiscuous mode [ 62.502202][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.516250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.526391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.534770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.542466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.550893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.560908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.582908][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.599068][ T4188] device veth0_vlan entered promiscuous mode [ 62.605978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.614107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.644496][ T4188] device veth1_vlan entered promiscuous mode [ 62.661533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.674837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.684112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.693707][ T4193] device veth0_macvtap entered promiscuous mode [ 62.711987][ T4193] device veth1_macvtap entered promiscuous mode [ 62.737284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.745512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.754287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.762821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.771830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.781247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.790174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.806472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.816232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.845327][ T4183] device veth0_vlan entered promiscuous mode [ 62.863330][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.872734][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.882043][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.891353][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.900575][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.911415][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.922234][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.932736][ T4188] device veth0_macvtap entered promiscuous mode [ 62.945310][ T4180] device veth0_vlan entered promiscuous mode [ 62.955524][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.968416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.976496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.985265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.994713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.003610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.015437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.023609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.036473][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.045976][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.055302][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.064161][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.076454][ T4188] device veth1_macvtap entered promiscuous mode [ 63.085696][ T4183] device veth1_vlan entered promiscuous mode [ 63.095485][ T4180] device veth1_vlan entered promiscuous mode [ 63.125705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.134011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.146025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.155846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.164064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.172517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.180194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.190596][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.201586][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.213535][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.240203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.254921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.266173][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.277390][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.288547][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.299902][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.319918][ T4183] device veth0_macvtap entered promiscuous mode [ 63.339810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.349173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.362618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.371732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.380474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.395435][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.406343][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.415513][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.425005][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.461867][ T4183] device veth1_macvtap entered promiscuous mode [ 63.477924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.492714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.529366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.538655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.547237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.555448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.565467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.574936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.591167][ T4180] device veth0_macvtap entered promiscuous mode [ 63.598888][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.608425][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.615025][ T4181] device veth0_vlan entered promiscuous mode [ 63.633761][ T4180] device veth1_macvtap entered promiscuous mode [ 63.643612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.653370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.662728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.686107][ T4181] device veth1_vlan entered promiscuous mode [ 63.695124][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.705761][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.716985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.728101][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.739320][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.749307][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.759908][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.770343][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.780969][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.792742][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.821662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.831341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.840846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.850195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.859709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.869023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.885066][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.895920][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.906053][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.917377][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.927643][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.938304][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.951275][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.969738][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.982654][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.993973][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.005070][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.015131][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.025803][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.036864][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 64.041467][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.043583][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 64.056591][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 64.062784][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 64.070310][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081173][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.090003][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.099130][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.108230][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 64.121972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.131395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.140515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.149290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.167469][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.173534][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.175454][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.187760][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.204428][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.213672][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.237767][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.256308][ T4181] device veth0_macvtap entered promiscuous mode [ 64.281222][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.289381][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.307438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.322757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.332699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.348582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.417368][ T4181] device veth1_macvtap entered promiscuous mode [ 64.440045][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.462098][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.483823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.499467][ T4288] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.524732][ T4288] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.638959][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.641196][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.657979][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.671220][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.697278][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.720862][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.730953][ T26] audit: type=1326 audit(1767858293.293:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 64.776538][ T26] audit: type=1326 audit(1767858293.293:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 64.777130][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.800217][ T26] audit: type=1326 audit(1767858293.293:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 64.832250][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.844451][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.855153][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.865231][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.877144][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.889399][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.904287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.913779][ T26] audit: type=1326 audit(1767858293.293:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 64.938206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.945753][ T26] audit: type=1326 audit(1767858293.293:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 64.973604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.984366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.008682][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.026654][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.043135][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.065909][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.078004][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.103505][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.120157][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.130861][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.142887][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.172050][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.187034][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.200078][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.211820][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.213927][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235619][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.246120][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.262108][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.311597][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.341935][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.350965][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.362093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.467729][ T4286] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.505836][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.528734][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.560372][ T4308] syz.1.2[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.560476][ T4308] syz.1.2[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.580482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.620976][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.646743][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.685739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.707539][ T4286] usb 3-1: device descriptor read/64, error -71 [ 65.719735][ T26] audit: type=1326 audit(1767858294.293:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 65.775297][ T4312] loop1: detected capacity change from 0 to 764 [ 65.786053][ T26] audit: type=1326 audit(1767858294.333:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 65.822172][ T26] audit: type=1326 audit(1767858294.333:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 65.851746][ T26] audit: type=1326 audit(1767858294.333:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 65.878709][ T26] audit: type=1326 audit(1767858294.333:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 65.919104][ T4312] rock: directory entry would overflow storage [ 65.928388][ T4312] rock: sig=0x4654, size=5, remaining=4 [ 66.012382][ T4286] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.030286][ T4318] loop3: detected capacity change from 0 to 256 [ 66.107562][ T2239] Bluetooth: hci1: command 0x0419 tx timeout [ 66.114317][ T2239] Bluetooth: hci4: command 0x0419 tx timeout [ 66.153552][ T2239] Bluetooth: hci3: command 0x0419 tx timeout [ 66.182301][ T2239] Bluetooth: hci2: command 0x0419 tx timeout [ 66.252559][ T2239] Bluetooth: hci0: command 0x0419 tx timeout [ 66.369633][ T4286] usb 3-1: device descriptor read/64, error -71 [ 66.502789][ T4286] usb usb3-port1: attempt power cycle [ 66.553030][ T4339] loop1: detected capacity change from 0 to 512 [ 66.575644][ T4341] loop0: detected capacity change from 0 to 1024 [ 66.612683][ T4341] ======================================================= [ 66.612683][ T4341] WARNING: The mand mount option has been deprecated and [ 66.612683][ T4341] and is ignored by this kernel. Remove the mand [ 66.612683][ T4341] option from the mount to silence this warning. [ 66.612683][ T4341] ======================================================= [ 66.681768][ T4339] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nogrpid,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 66.716339][ T4339] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.934729][ T4341] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.987070][ T4286] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 67.086958][ T4286] usb 3-1: device descriptor read/8, error -71 [ 67.366784][ T4286] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 67.496952][ T4286] usb 3-1: device descriptor read/8, error -71 [ 67.641587][ T4286] usb usb3-port1: unable to enumerate USB device [ 67.683329][ T4373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 67.778757][ T4373] device  entered promiscuous mode [ 67.793570][ T4375] loop4: detected capacity change from 0 to 1024 [ 67.863266][ T4375] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 67.906076][ T4375] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 67.944291][ T4375] EXT4-fs (loop4): invalid journal inode [ 67.985270][ T4375] EXT4-fs (loop4): can't get journal size [ 67.996909][ T4375] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.26: blocks 2-2 from inode overlap system zone [ 68.018364][ T4375] EXT4-fs (loop4): failed to initialize system zone (-117) [ 68.026208][ T4375] EXT4-fs (loop4): mount failed [ 68.513192][ T4401] xt_hashlimit: max too large, truncated to 1048576 [ 68.528476][ T4401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.138678][ T4412] process 'syz.1.41' launched './file0' with NULL argv: empty string added [ 70.006541][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 70.006554][ T26] audit: type=1326 audit(1767858298.573:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 70.077844][ T4441] loop4: detected capacity change from 0 to 512 [ 70.110160][ T26] audit: type=1326 audit(1767858298.623:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 70.197184][ T26] audit: type=1326 audit(1767858298.623:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 70.239589][ T4441] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 70.256951][ T4441] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.397533][ T26] audit: type=1326 audit(1767858298.623:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f953791d783 code=0x7ffc0000 [ 70.421178][ T4448] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 70.485973][ T4448] netlink: 'syz.4.48': attribute type 2 has an invalid length. [ 70.503464][ T26] audit: type=1326 audit(1767858298.623:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f953791c1ff code=0x7ffc0000 [ 70.529012][ T4441] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.48: iget: bad i_size value: 2533274857506816 [ 70.566365][ T4443] batman_adv: batadv0: Adding interface: dummy0 [ 70.580569][ T26] audit: type=1326 audit(1767858298.623:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f953791d7d7 code=0x7ffc0000 [ 70.598074][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 70.627488][ T4443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.677850][ T26] audit: type=1326 audit(1767858298.653:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f953791bf90 code=0x7ffc0000 [ 70.732067][ T4443] batman_adv: batadv0: Interface activated: dummy0 [ 70.750633][ T26] audit: type=1326 audit(1767858298.653:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f953791d34b code=0x7ffc0000 [ 70.791151][ T4449] batadv0: mtu less than device minimum [ 70.813658][ T26] audit: type=1326 audit(1767858298.683:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f953791c3aa code=0x7ffc0000 [ 70.836019][ T4448] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.48: iget: bad i_size value: 2533274857506816 [ 70.846643][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.860877][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.873266][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.885607][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.897934][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.910242][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.922561][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.934795][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.947156][ T4449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.011417][ T4443] loop1: detected capacity change from 0 to 512 [ 71.017488][ T26] audit: type=1326 audit(1767858298.683:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f953791c3aa code=0x7ffc0000 [ 71.084088][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.090846][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.144202][ T4443] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 71.241608][ T4459] loop3: detected capacity change from 0 to 1024 [ 71.334210][ T4459] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.406223][ T4459] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 71.453714][ T4459] EXT4-fs (loop3): invalid journal inode [ 71.469741][ T4459] EXT4-fs (loop3): can't get journal size [ 71.499053][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 71.542719][ T4459] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 37: comm syz.3.54: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.607655][ T4459] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.54: path /2/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 71.887819][ T4474] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.59' sets config #0 [ 72.008887][ T4478] loop4: detected capacity change from 0 to 512 [ 72.034890][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 72.173269][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 72.240512][ T4478] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.652321][ T4507] device veth0 entered promiscuous mode [ 72.674035][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 72.933582][ T4514] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 73.184057][ T4525] IPv6: Can't replace route, no match found [ 73.578891][ T4542] device syzkaller0 entered promiscuous mode [ 73.863489][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 73.903967][ T4553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.89'. [ 73.938906][ T4557] netlink: 'syz.3.91': attribute type 12 has an invalid length. [ 73.948225][ T4555] loop1: detected capacity change from 0 to 1024 [ 74.008776][ T4555] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.028150][ T4555] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.144977][ T4555] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ÿ: bg 0: block 10: padding at end of block bitmap is not set [ 74.183678][ T4562] loop4: detected capacity change from 0 to 512 [ 74.195179][ T4555] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm ÿ: Failed to acquire dquot type 0 [ 74.222208][ T4562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.243517][ T4562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.269331][ T4555] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm ÿ: Failed to acquire dquot type 0 [ 74.300718][ T4555] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm ÿ: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.316218][ T4562] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.379335][ T4565] netlink: 'syz.3.94': attribute type 12 has an invalid length. [ 74.388949][ T4562] EXT4-fs (loop4): 1 truncate cleaned up [ 74.395333][ T4562] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 74.440585][ T4555] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm ÿ: Failed to acquire dquot type 0 [ 74.523246][ T4555] EXT4-fs (loop1): 1 orphan inode deleted [ 74.554147][ T4555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.585437][ T4555] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm ÿ: iget: bad extended attribute block 6 [ 74.829552][ T4572] loop3: detected capacity change from 0 to 512 [ 74.830047][ T4555] ÿ (4555) used greatest stack depth: 20144 bytes left [ 74.939625][ T4572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.017866][ T4572] EXT4-fs (loop3): 1 truncate cleaned up [ 75.023605][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 75.220209][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 75.220225][ T26] audit: type=1800 audit(1767858303.793:124): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 75.361882][ T26] audit: type=1326 audit(1767858303.933:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 75.444133][ T26] audit: type=1326 audit(1767858303.973:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 75.534982][ T26] audit: type=1326 audit(1767858303.983:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 75.634577][ T26] audit: type=1326 audit(1767858303.983:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953791d749 code=0x7ffc0000 [ 75.667846][ T26] audit: type=1326 audit(1767858303.983:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f953791f667 code=0x7ffc0000 [ 75.710681][ T4594] loop3: detected capacity change from 0 to 1024 [ 75.721076][ T26] audit: type=1326 audit(1767858303.983:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f953791f5dc code=0x7ffc0000 [ 75.761421][ T26] audit: type=1326 audit(1767858303.983:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f953791f514 code=0x7ffc0000 [ 75.804611][ T26] audit: type=1326 audit(1767858303.983:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f953791f514 code=0x7ffc0000 [ 75.829801][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.841069][ T26] audit: type=1326 audit(1767858303.983:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f953791c3aa code=0x7ffc0000 [ 75.859003][ T4594] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.057175][ T4604] loop2: detected capacity change from 0 to 128 [ 77.594287][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 77.624766][ T4648] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.634195][ T4648] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.643074][ T4648] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.651887][ T4648] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.701557][ T4648] Zero length message leads to an empty skb [ 77.709156][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 77.911592][ T4660] loop4: detected capacity change from 0 to 128 [ 78.576630][ T4686] mmap: syz.1.141 (4686) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.828641][ T4705] loop7: detected capacity change from 0 to 7 [ 78.907850][ T4172] [ 78.910213][ T4172] ====================================================== [ 78.917232][ T4172] WARNING: possible circular locking dependency detected [ 78.924264][ T4172] syzkaller #0 Not tainted [ 78.928687][ T4172] ------------------------------------------------------ [ 78.935727][ T4172] udevd/4172 is trying to acquire lock: [ 78.941291][ T4172] ffff888073fcc138 ((wq_completion)loop7){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 78.951072][ T4172] [ 78.951072][ T4172] but task is already holding lock: [ 78.958448][ T4172] ffff8881475fd468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 78.967261][ T4172] [ 78.967261][ T4172] which lock already depends on the new lock. [ 78.967261][ T4172] [ 78.977679][ T4172] [ 78.977679][ T4172] the existing dependency chain (in reverse order) is: [ 78.986715][ T4172] [ 78.986715][ T4172] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 78.994203][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 78.999959][ T4172] mutex_lock_killable_nested+0x17/0x20 [ 79.006050][ T4172] lo_open+0x6a/0x100 [ 79.010580][ T4172] blkdev_get_whole+0x90/0x390 [ 79.016021][ T4172] blkdev_get_by_dev+0x2d0/0xa60 [ 79.021537][ T4172] blkdev_open+0x12d/0x2c0 [ 79.026493][ T4172] do_dentry_open+0x7ff/0xf80 [ 79.031724][ T4172] path_openat+0x2682/0x2f30 [ 79.036855][ T4172] do_filp_open+0x1b3/0x3e0 [ 79.041893][ T4172] do_sys_openat2+0x142/0x4a0 [ 79.047124][ T4172] __x64_sys_openat+0x135/0x160 [ 79.052516][ T4172] do_syscall_64+0x4c/0xa0 [ 79.057474][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.063915][ T4172] [ 79.063915][ T4172] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 79.071759][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.077501][ T4172] mutex_lock_nested+0x17/0x20 [ 79.082815][ T4172] bd_register_pending_holders+0x33/0x310 [ 79.089065][ T4172] device_add_disk+0x5a7/0xd40 [ 79.094356][ T4172] md_alloc+0x809/0xc00 [ 79.099046][ T4172] blk_request_module+0x26e/0x290 [ 79.104605][ T4172] blkdev_get_no_open+0x38/0x1d0 [ 79.110084][ T4172] blkdev_get_by_dev+0x77/0xa60 [ 79.115466][ T4172] swsusp_check+0x9b/0x2a0 [ 79.120414][ T4172] software_resume+0xc6/0x3b0 [ 79.125626][ T4172] resume_store+0xe4/0x130 [ 79.130583][ T4172] kernfs_fop_write_iter+0x379/0x4c0 [ 79.136400][ T4172] vfs_write+0x712/0xd00 [ 79.141165][ T4172] ksys_write+0x14d/0x250 [ 79.146024][ T4172] do_syscall_64+0x4c/0xa0 [ 79.150973][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.157397][ T4172] [ 79.157397][ T4172] -> #6 (disks_mutex){+.+.}-{3:3}: [ 79.164698][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.170432][ T4172] mutex_lock_nested+0x17/0x20 [ 79.175723][ T4172] md_alloc+0x48/0xc00 [ 79.180320][ T4172] blk_request_module+0x26e/0x290 [ 79.185872][ T4172] blkdev_get_no_open+0x38/0x1d0 [ 79.191341][ T4172] blkdev_get_by_dev+0x77/0xa60 [ 79.196717][ T4172] swsusp_check+0x9b/0x2a0 [ 79.201663][ T4172] software_resume+0xc6/0x3b0 [ 79.206867][ T4172] resume_store+0xe4/0x130 [ 79.211820][ T4172] kernfs_fop_write_iter+0x379/0x4c0 [ 79.217634][ T4172] vfs_write+0x712/0xd00 [ 79.222403][ T4172] ksys_write+0x14d/0x250 [ 79.227257][ T4172] do_syscall_64+0x4c/0xa0 [ 79.232196][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.238616][ T4172] [ 79.238616][ T4172] -> #5 (major_names_lock){+.+.}-{3:3}: [ 79.246359][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.252091][ T4172] mutex_lock_nested+0x17/0x20 [ 79.257380][ T4172] blk_request_module+0x31/0x290 [ 79.262842][ T4172] blkdev_get_no_open+0x38/0x1d0 [ 79.268326][ T4172] blkdev_get_by_dev+0x77/0xa60 [ 79.273703][ T4172] swsusp_check+0x9b/0x2a0 [ 79.278650][ T4172] software_resume+0xc6/0x3b0 [ 79.283869][ T4172] resume_store+0xe4/0x130 [ 79.288824][ T4172] kernfs_fop_write_iter+0x379/0x4c0 [ 79.294637][ T4172] vfs_write+0x712/0xd00 [ 79.299405][ T4172] ksys_write+0x14d/0x250 [ 79.304257][ T4172] do_syscall_64+0x4c/0xa0 [ 79.309201][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.315629][ T4172] [ 79.315629][ T4172] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 79.324152][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.329886][ T4172] mutex_lock_nested+0x17/0x20 [ 79.335183][ T4172] software_resume+0x7c/0x3b0 [ 79.340394][ T4172] resume_store+0xe4/0x130 [ 79.345337][ T4172] kernfs_fop_write_iter+0x379/0x4c0 [ 79.351150][ T4172] vfs_write+0x712/0xd00 [ 79.355913][ T4172] ksys_write+0x14d/0x250 [ 79.360763][ T4172] do_syscall_64+0x4c/0xa0 [ 79.365700][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.372115][ T4172] [ 79.372115][ T4172] -> #3 (&of->mutex){+.+.}-{3:3}: [ 79.379325][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.385050][ T4172] mutex_lock_nested+0x17/0x20 [ 79.390338][ T4172] kernfs_seq_start+0x51/0x3c0 [ 79.395628][ T4172] seq_read_iter+0x3c4/0xd50 [ 79.400736][ T4172] vfs_read+0x725/0xcf0 [ 79.405411][ T4172] ksys_read+0x14d/0x250 [ 79.410182][ T4172] do_syscall_64+0x4c/0xa0 [ 79.415155][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.421584][ T4172] [ 79.421584][ T4172] -> #2 (&p->lock){+.+.}-{3:3}: [ 79.428625][ T4172] __mutex_lock_common+0x1eb/0x2390 [ 79.434344][ T4172] mutex_lock_nested+0x17/0x20 [ 79.439636][ T4172] seq_read_iter+0xad/0xd50 [ 79.444658][ T4172] do_iter_readv_writev+0x497/0x600 [ 79.450380][ T4172] do_iter_read+0x20b/0x7c0 [ 79.455406][ T4172] loop_process_work+0x18dc/0x2480 [ 79.461049][ T4172] process_one_work+0x863/0x1000 [ 79.466514][ T4172] worker_thread+0xaa8/0x12a0 [ 79.471732][ T4172] kthread+0x436/0x520 [ 79.476338][ T4172] ret_from_fork+0x1f/0x30 [ 79.481287][ T4172] [ 79.481287][ T4172] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 79.490768][ T4172] process_one_work+0x7bf/0x1000 [ 79.496225][ T4172] worker_thread+0xaa8/0x12a0 [ 79.501423][ T4172] kthread+0x436/0x520 [ 79.506010][ T4172] ret_from_fork+0x1f/0x30 [ 79.510948][ T4172] [ 79.510948][ T4172] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 79.519042][ T4172] __lock_acquire+0x2c33/0x7c60 [ 79.524418][ T4172] lock_acquire+0x197/0x3f0 [ 79.529445][ T4172] flush_workqueue+0x142/0x1380 [ 79.534825][ T4172] drain_workqueue+0xcf/0x380 [ 79.540024][ T4172] destroy_workqueue+0x7b/0xb20 [ 79.545400][ T4172] __loop_clr_fd+0x234/0xb90 [ 79.550519][ T4172] blkdev_put+0x53f/0x7d0 [ 79.555377][ T4172] blkdev_close+0x76/0xa0 [ 79.560228][ T4172] __fput+0x234/0x930 [ 79.564733][ T4172] task_work_run+0x125/0x1a0 [ 79.569864][ T4172] exit_to_user_mode_loop+0x10f/0x130 [ 79.575760][ T4172] exit_to_user_mode_prepare+0xee/0x180 [ 79.581839][ T4172] syscall_exit_to_user_mode+0x16/0x40 [ 79.587927][ T4172] do_syscall_64+0x58/0xa0 [ 79.592866][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.599283][ T4172] [ 79.599283][ T4172] other info that might help us debug this: [ 79.599283][ T4172] [ 79.609516][ T4172] Chain exists of: [ 79.609516][ T4172] (wq_completion)loop7 --> &disk->open_mutex --> &lo->lo_mutex [ 79.609516][ T4172] [ 79.622984][ T4172] Possible unsafe locking scenario: [ 79.622984][ T4172] [ 79.630548][ T4172] CPU0 CPU1 [ 79.635911][ T4172] ---- ---- [ 79.641268][ T4172] lock(&lo->lo_mutex); [ 79.645512][ T4172] lock(&disk->open_mutex); [ 79.652622][ T4172] lock(&lo->lo_mutex); [ 79.659394][ T4172] lock((wq_completion)loop7); [ 79.664256][ T4172] [ 79.664256][ T4172] *** DEADLOCK *** [ 79.664256][ T4172] [ 79.672397][ T4172] 2 locks held by udevd/4172: [ 79.677074][ T4172] #0: ffff8880201de118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 79.686386][ T4172] #1: ffff8881475fd468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 79.695616][ T4172] [ 79.695616][ T4172] stack backtrace: [ 79.701526][ T4172] CPU: 0 PID: 4172 Comm: udevd Not tainted syzkaller #0 [ 79.708475][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.718537][ T4172] Call Trace: [ 79.721822][ T4172] [ 79.724767][ T4172] dump_stack_lvl+0x168/0x230 [ 79.729447][ T4172] ? load_image+0x3b0/0x3b0 [ 79.733951][ T4172] ? show_regs_print_info+0x20/0x20 [ 79.739156][ T4172] ? print_circular_bug+0x12b/0x1a0 [ 79.744367][ T4172] check_noncircular+0x274/0x310 [ 79.749304][ T4172] ? add_chain_block+0x940/0x940 [ 79.754243][ T4172] ? lockdep_lock+0xdc/0x1e0 [ 79.758847][ T4172] ? mark_lock+0x94/0x320 [ 79.763185][ T4172] __lock_acquire+0x2c33/0x7c60 [ 79.768055][ T4172] ? __lock_acquire+0x13ad/0x7c60 [ 79.773085][ T4172] ? verify_lock_unused+0x140/0x140 [ 79.778291][ T4172] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.784285][ T4172] ? verify_lock_unused+0x140/0x140 [ 79.789485][ T4172] ? verify_lock_unused+0x140/0x140 [ 79.794698][ T4172] ? memset+0x1e/0x40 [ 79.798685][ T4172] lock_acquire+0x197/0x3f0 [ 79.803192][ T4172] ? flush_workqueue+0x126/0x1380 [ 79.808222][ T4172] ? finish_task_switch+0x12f/0x640 [ 79.813420][ T4172] ? __mutex_trylock_common+0x14f/0x250 [ 79.818964][ T4172] ? read_lock_is_recursive+0x10/0x10 [ 79.824343][ T4172] ? __init_swait_queue_head+0xa5/0x150 [ 79.829887][ T4172] flush_workqueue+0x142/0x1380 [ 79.834739][ T4172] ? flush_workqueue+0x126/0x1380 [ 79.839764][ T4172] ? __lock_acquire+0x7c60/0x7c60 [ 79.844803][ T4172] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 79.850173][ T4172] ? rcu_work_rcufn+0x110/0x110 [ 79.855027][ T4172] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 79.860668][ T4172] ? finish_wait+0xc0/0x1d0 [ 79.865181][ T4172] drain_workqueue+0xcf/0x380 [ 79.869864][ T4172] destroy_workqueue+0x7b/0xb20 [ 79.874718][ T4172] __loop_clr_fd+0x234/0xb90 [ 79.879321][ T4172] ? lo_release+0x172/0x1f0 [ 79.883828][ T4172] ? lo_open+0x100/0x100 [ 79.888073][ T4172] blkdev_put+0x53f/0x7d0 [ 79.892402][ T4172] blkdev_close+0x76/0xa0 [ 79.896730][ T4172] ? blkdev_open+0x2c0/0x2c0 [ 79.901326][ T4172] __fput+0x234/0x930 [ 79.905311][ T4172] task_work_run+0x125/0x1a0 [ 79.910033][ T4172] exit_to_user_mode_loop+0x10f/0x130 [ 79.915414][ T4172] exit_to_user_mode_prepare+0xee/0x180 [ 79.920972][ T4172] syscall_exit_to_user_mode+0x16/0x40 [ 79.926439][ T4172] do_syscall_64+0x58/0xa0 [ 79.930855][ T4172] ? clear_bhb_loop+0x30/0x80 [ 79.935539][ T4172] ? clear_bhb_loop+0x30/0x80 [ 79.940229][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.946147][ T4172] RIP: 0033:0x7fa7f1248407 [ 79.950565][ T4172] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 79.970174][ T4172] RSP: 002b:00007ffdb8da4c60 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 79.978601][ T4172] RAX: 0000000000000000 RBX: 00007fa7f115a880 RCX: 00007fa7f1248407 [ 79.986588][ T4172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 79.994566][ T4172] RBP: 00007fa7f115a6e8 R08: 0000000000000000 R09: 0000000000000000 [ 80.002547][ T4172] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 80.010565][ T4172] R13: 0000561cc0587410 R14: 0000000000000008 R15: 0000561cc0597a40 [ 80.018642][ T4172] [ 80.058680][ T4695] loop3: detected capacity change from 0 to 8192 [ 81.310719][ T1324] cfg80211: failed to load regulatory.db