last executing test programs: 3.37880789s ago: executing program 3 (id=45): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 2.818958986s ago: executing program 0 (id=52): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8, 0x9, 0x5}) 2.628053159s ago: executing program 0 (id=54): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.875485174s ago: executing program 2 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010300000c0000000000070000080c00078008000800000000020500040000000000050005000200000005000100070000000900020073797a310000000010000300686173683a6970"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.739087075s ago: executing program 2 (id=63): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r0 = io_uring_setup(0x5500, &(0x7f0000000000)={0x0, 0xec9b, 0x800, 0x2, 0x8375}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x0}, 0x20) 1.711067879s ago: executing program 2 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e0"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.644248646s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a7de2aa4c6f826e7ad5e50e6f2d96efbaac7ec0649f760409d5afdfa6555614b9e5ddf967d229d9"], 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 1.631152676s ago: executing program 0 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044814) 1.478804654s ago: executing program 3 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.472700942s ago: executing program 0 (id=69): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.471287746s ago: executing program 2 (id=70): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.367183669s ago: executing program 1 (id=71): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x800, @loopback, 0x8}, 0x1c) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 1.298742244s ago: executing program 0 (id=72): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) inotify_init1(0x80000) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.184508649s ago: executing program 2 (id=73): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 1.01123226s ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) 923.668923ms ago: executing program 0 (id=76): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="a6", 0x1}], 0x1}}], 0x1, 0x4010) 763.147614ms ago: executing program 4 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010"], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 758.388229ms ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a7de2aa4c6f826e7ad5e50e6f2d96efbaac7ec0649f760409d5afdfa6555614b9e5ddf967d229d9"], 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 651.800571ms ago: executing program 1 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x1, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfff}}}}}}}, 0x0) 571.67856ms ago: executing program 4 (id=80): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 507.663467ms ago: executing program 4 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e0"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 459.341989ms ago: executing program 1 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0xec0}, @mss={0x2, 0x1}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 307.589768ms ago: executing program 1 (id=83): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 298.892001ms ago: executing program 4 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 268.275175ms ago: executing program 3 (id=85): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) 145.984733ms ago: executing program 3 (id=86): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) 140.059563ms ago: executing program 4 (id=87): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 126.991375ms ago: executing program 1 (id=88): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1.467511ms ago: executing program 3 (id=89): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x800, @loopback, 0x8}, 0x1c) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 0s ago: executing program 4 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x7, 0x2000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 63.360829][ T5618] cgroup: Unknown subsys name 'net' [ 63.510075][ T5618] cgroup: Unknown subsys name 'cpuset' [ 63.519041][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.889701][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.011444][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.020684][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.025656][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.037316][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.045086][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.052866][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.062473][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.064039][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.071385][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.077276][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.085381][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.092032][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.099803][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.106979][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.119090][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.119421][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.134395][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.137557][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.144198][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.149928][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.155924][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.169951][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.170220][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.185496][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.193928][ T4950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.126717][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.134073][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.141593][ T5651] bridge_slave_0: entered allmulticast mode [ 68.148665][ T5651] bridge_slave_0: entered promiscuous mode [ 68.192090][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.199641][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.207383][ T5651] bridge_slave_1: entered allmulticast mode [ 68.214340][ T5651] bridge_slave_1: entered promiscuous mode [ 68.221449][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.228604][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.235720][ T5649] bridge_slave_0: entered allmulticast mode [ 68.242877][ T5649] bridge_slave_0: entered promiscuous mode [ 68.281616][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.289014][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.296210][ T5649] bridge_slave_1: entered allmulticast mode [ 68.303363][ T5649] bridge_slave_1: entered promiscuous mode [ 68.358618][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.398016][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.409603][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.465328][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.474841][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.482056][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.489251][ T5654] bridge_slave_0: entered allmulticast mode [ 68.496142][ T5654] bridge_slave_0: entered promiscuous mode [ 68.503327][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.510450][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.518579][ T5653] bridge_slave_0: entered allmulticast mode [ 68.525524][ T5653] bridge_slave_0: entered promiscuous mode [ 68.569975][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.577321][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.584605][ T5654] bridge_slave_1: entered allmulticast mode [ 68.592702][ T5654] bridge_slave_1: entered promiscuous mode [ 68.599561][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.606643][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.613965][ T5653] bridge_slave_1: entered allmulticast mode [ 68.620912][ T5653] bridge_slave_1: entered promiscuous mode [ 68.628296][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.635382][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.642750][ T5652] bridge_slave_0: entered allmulticast mode [ 68.649854][ T5652] bridge_slave_0: entered promiscuous mode [ 68.658846][ T5651] team0: Port device team_slave_0 added [ 68.666509][ T5649] team0: Port device team_slave_0 added [ 68.691526][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.698817][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.706009][ T5652] bridge_slave_1: entered allmulticast mode [ 68.713176][ T5652] bridge_slave_1: entered promiscuous mode [ 68.721726][ T5651] team0: Port device team_slave_1 added [ 68.729112][ T5649] team0: Port device team_slave_1 added [ 68.784161][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.795358][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.806838][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.853028][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.872876][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.884145][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.894168][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.901300][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.927240][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.941076][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.948381][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.974593][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.013736][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.020987][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.047300][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.058858][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.065887][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.092235][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.105105][ T5654] team0: Port device team_slave_0 added [ 69.112567][ T5653] team0: Port device team_slave_0 added [ 69.143558][ T5654] team0: Port device team_slave_1 added [ 69.150908][ T5653] team0: Port device team_slave_1 added [ 69.158737][ T5652] team0: Port device team_slave_0 added [ 69.167488][ T5652] team0: Port device team_slave_1 added [ 69.257901][ T5636] Bluetooth: hci1: command tx timeout [ 69.264073][ T5636] Bluetooth: hci2: command tx timeout [ 69.264582][ T4950] Bluetooth: hci0: command tx timeout [ 69.269912][ T5636] Bluetooth: hci4: command tx timeout [ 69.277533][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.281609][ T5631] Bluetooth: hci3: command tx timeout [ 69.288428][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.319865][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.338168][ T5651] hsr_slave_0: entered promiscuous mode [ 69.344903][ T5651] hsr_slave_1: entered promiscuous mode [ 69.352990][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.360099][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.386110][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.398799][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.405834][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.432103][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.452654][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.460429][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.486691][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.506068][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.513401][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.539392][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.550841][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.557856][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.584021][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.605951][ T5649] hsr_slave_0: entered promiscuous mode [ 69.612243][ T5649] hsr_slave_1: entered promiscuous mode [ 69.618469][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 69.624255][ T5649] Cannot create hsr debugfs directory [ 69.754402][ T5654] hsr_slave_0: entered promiscuous mode [ 69.760772][ T5654] hsr_slave_1: entered promiscuous mode [ 69.766819][ T5654] debugfs: 'hsr0' already exists in 'hsr' [ 69.772757][ T5654] Cannot create hsr debugfs directory [ 69.783644][ T5653] hsr_slave_0: entered promiscuous mode [ 69.790069][ T5653] hsr_slave_1: entered promiscuous mode [ 69.796077][ T5653] debugfs: 'hsr0' already exists in 'hsr' [ 69.802006][ T5653] Cannot create hsr debugfs directory [ 69.813482][ T5652] hsr_slave_0: entered promiscuous mode [ 69.820375][ T5652] hsr_slave_1: entered promiscuous mode [ 69.826579][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 69.833260][ T5652] Cannot create hsr debugfs directory [ 70.293337][ T5649] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.310986][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.320530][ T5649] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.330720][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.339108][ T5649] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.349307][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.359834][ T5649] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.370906][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.449103][ T5651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.460301][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.470002][ T5651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.480284][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.488381][ T5651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.498961][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.511296][ T5651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.521306][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.612644][ T5654] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.623591][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.632442][ T5654] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.641880][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.649753][ T5654] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.659436][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.667792][ T5654] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.678975][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.792504][ T5652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.801637][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.810238][ T5652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.820003][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.828369][ T5652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.837358][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.851520][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.862382][ T5652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.872669][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.963801][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.985101][ T5653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.994890][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.003574][ T5653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.012767][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.020966][ T5653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.030167][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.038048][ T5653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.047711][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.061837][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.069306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.104557][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.111683][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.149434][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.204267][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.224707][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.249521][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.256636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.266030][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273531][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306647][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.322945][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.330165][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.337673][ T5636] Bluetooth: hci2: command tx timeout [ 71.338668][ T4950] Bluetooth: hci1: command tx timeout [ 71.343907][ T5631] Bluetooth: hci0: command tx timeout [ 71.349719][ T4950] Bluetooth: hci3: command tx timeout [ 71.355490][ T5636] Bluetooth: hci4: command tx timeout [ 71.377346][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.396276][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.403404][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.421033][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.428166][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.484468][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.515696][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.522825][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.539120][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.570386][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.577534][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.625468][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.663190][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.694912][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.702047][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.720306][ T5649] veth0_vlan: entered promiscuous mode [ 71.746099][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.753229][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.781097][ T5649] veth1_vlan: entered promiscuous mode [ 71.813875][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.838943][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.884220][ T5649] veth0_macvtap: entered promiscuous mode [ 71.898580][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.919199][ T5649] veth1_macvtap: entered promiscuous mode [ 71.992425][ T5654] veth0_vlan: entered promiscuous mode [ 72.005281][ T5651] veth0_vlan: entered promiscuous mode [ 72.014951][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.034406][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.046773][ T5654] veth1_vlan: entered promiscuous mode [ 72.060329][ T5651] veth1_vlan: entered promiscuous mode [ 72.074364][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.096023][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110983][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.131743][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.142972][ T1109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.182808][ T5652] veth0_vlan: entered promiscuous mode [ 72.242672][ T5652] veth1_vlan: entered promiscuous mode [ 72.270164][ T5651] veth0_macvtap: entered promiscuous mode [ 72.292091][ T5654] veth0_macvtap: entered promiscuous mode [ 72.308219][ T5651] veth1_macvtap: entered promiscuous mode [ 72.323846][ T5653] veth0_vlan: entered promiscuous mode [ 72.352368][ T5654] veth1_macvtap: entered promiscuous mode [ 72.364092][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.372717][ T5653] veth1_vlan: entered promiscuous mode [ 72.378979][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.414831][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.445963][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.459501][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.486687][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.500835][ T5652] veth0_macvtap: entered promiscuous mode [ 72.509574][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.526157][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.534976][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.545198][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.564152][ T5652] veth1_macvtap: entered promiscuous mode [ 72.575511][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585265][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.595190][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.612117][ T5653] veth0_macvtap: entered promiscuous mode [ 72.633261][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656751][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670376][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683031][ T5649] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.704934][ T5653] veth1_macvtap: entered promiscuous mode [ 72.780633][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.842997][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.886146][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.894574][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.908036][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.920583][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.016162][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.036367][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.055093][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.066402][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.077308][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.088319][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.159623][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.210935][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.228050][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.256229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.288018][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.319143][ T114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.387626][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.410302][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.422419][ T5636] Bluetooth: hci3: command tx timeout [ 73.434160][ T5631] Bluetooth: hci2: command tx timeout [ 73.434190][ T50] Bluetooth: hci1: command tx timeout [ 73.442679][ T5631] Bluetooth: hci4: command tx timeout [ 73.445153][ T4950] Bluetooth: hci0: command tx timeout [ 73.615001][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.624422][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.654959][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.677399][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.840080][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.877436][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.937017][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.971677][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.305272][ T9] IPVS: starting estimator thread 0... [ 74.417797][ T5762] IPVS: using max 34 ests per chain, 81600 per kthread [ 75.497445][ T50] Bluetooth: hci1: command tx timeout [ 75.502930][ T4950] Bluetooth: hci0: command tx timeout [ 75.507502][ T5636] Bluetooth: hci3: command tx timeout [ 75.508624][ T5646] Bluetooth: hci4: command tx timeout [ 75.514114][ T5631] Bluetooth: hci2: command tx timeout [ 76.393310][ T5836] hub 8-0:1.0: USB hub found [ 76.407916][ T5836] hub 8-0:1.0: 1 port detected [ 76.797868][ T5714] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.006642][ T5714] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 77.050656][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.079419][ T5714] usb 4-1: Product: syz [ 77.091844][ T5714] usb 4-1: Manufacturer: syz [ 77.110131][ T5714] usb 4-1: SerialNumber: syz [ 77.420542][ T5714] rtl8150 4-1:1.0: couldn't reset the device [ 77.430740][ T5714] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 77.497626][ T5714] usb 4-1: USB disconnect, device number 2 [ 77.658926][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 77.668354][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 77.679684][ T5870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'. [ 78.705209][ T5903] Zero length message leads to an empty skb [ 78.894867][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 79.037395][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 79.561415][ T5931] loop6: detected capacity change from 0 to 8 [ 79.609053][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.619477][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.636134][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.646392][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.691206][ T5932] [ 79.693571][ T5932] ====================================================== [ 79.700587][ T5932] WARNING: possible circular locking dependency detected [ 79.707614][ T5932] syzkaller #0 Not tainted [ 79.712017][ T5932] ------------------------------------------------------ [ 79.719010][ T5932] syz.1.88/5932 is trying to acquire lock: [ 79.724793][ T5932] ffff88801be85210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 79.735063][ T5932] [ 79.735063][ T5932] but task is already holding lock: [ 79.742420][ T5932] ffff888026e48060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 79.752164][ T5932] [ 79.752164][ T5932] which lock already depends on the new lock. [ 79.752164][ T5932] [ 79.762553][ T5932] [ 79.762553][ T5932] the existing dependency chain (in reverse order) is: [ 79.771552][ T5932] [ 79.771552][ T5932] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 79.780185][ T5932] blk_alloc_queue+0x546/0x680 [ 79.785472][ T5932] __blk_mq_alloc_disk+0x197/0x390 [ 79.791104][ T5932] loop_add+0x482/0xb40 [ 79.795769][ T5932] loop_init+0xd9/0x170 [ 79.800437][ T5932] do_one_initcall+0x250/0x870 [ 79.805708][ T5932] do_initcall_level+0x104/0x190 [ 79.811151][ T5932] do_initcalls+0x59/0xa0 [ 79.815988][ T5932] kernel_init_freeable+0x2a6/0x3e0 [ 79.821697][ T5932] kernel_init+0x1d/0x1d0 [ 79.826532][ T5932] ret_from_fork+0x514/0xb70 [ 79.831624][ T5932] ret_from_fork_asm+0x1a/0x30 [ 79.836901][ T5932] [ 79.836901][ T5932] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 79.844102][ T5932] fs_reclaim_acquire+0x71/0x100 [ 79.849551][ T5932] kmem_cache_alloc_noprof+0x40/0x650 [ 79.855429][ T5932] __kernfs_iattrs+0xdf/0x320 [ 79.860608][ T5932] kernfs_iop_setattr+0xea/0x3f0 [ 79.866047][ T5932] notify_change+0xc1a/0xf40 [ 79.871140][ T5932] do_truncate+0x1c2/0x250 [ 79.876078][ T5932] path_openat+0x2f89/0x3860 [ 79.881194][ T5932] do_file_open+0x23e/0x4a0 [ 79.886210][ T5932] do_sys_openat2+0x113/0x200 [ 79.891404][ T5932] __x64_sys_openat+0x138/0x170 [ 79.896770][ T5932] do_syscall_64+0x174/0x580 [ 79.901875][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.908278][ T5932] [ 79.908278][ T5932] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 79.916778][ T5932] __lock_acquire+0x15a5/0x2cf0 [ 79.922136][ T5932] lock_acquire+0x106/0x350 [ 79.927140][ T5932] down_read+0x47/0x2e0 [ 79.931800][ T5932] kernfs_iop_getattr+0x9e/0x450 [ 79.937246][ T5932] vfs_getattr_nosec+0x2e1/0x430 [ 79.942688][ T5932] loop_assign_backing_file+0x27a/0x4b0 [ 79.948755][ T5932] lo_ioctl+0x1acb/0x1fb0 [ 79.953611][ T5932] lo_compat_ioctl+0x324/0x3f0 [ 79.958883][ T5932] compat_blkdev_ioctl+0x5ea/0x7c0 [ 79.964506][ T5932] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 79.970479][ T5932] __do_fast_syscall_32+0x23e/0x6f0 [ 79.976183][ T5932] do_fast_syscall_32+0x33/0x70 [ 79.981534][ T5932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.988369][ T5932] [ 79.988369][ T5932] other info that might help us debug this: [ 79.988369][ T5932] [ 79.998579][ T5932] Chain exists of: [ 79.998579][ T5932] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 79.998579][ T5932] [ 80.013000][ T5932] Possible unsafe locking scenario: [ 80.013000][ T5932] [ 80.020435][ T5932] CPU0 CPU1 [ 80.025784][ T5932] ---- ---- [ 80.031131][ T5932] lock(&q->q_usage_counter(io)#23); [ 80.036498][ T5932] lock(fs_reclaim); [ 80.042981][ T5932] lock(&q->q_usage_counter(io)#23); [ 80.050948][ T5932] rlock(&root->kernfs_iattr_rwsem); [ 80.056299][ T5932] [ 80.056299][ T5932] *** DEADLOCK *** [ 80.056299][ T5932] [ 80.064418][ T5932] 3 locks held by syz.1.88/5932: [ 80.069335][ T5932] #0: ffff888027012430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 80.078367][ T5932] #1: ffff888026e48060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 80.088534][ T5932] #2: ffff888026e48098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 80.098875][ T5932] [ 80.098875][ T5932] stack backtrace: [ 80.104773][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.1.88 Not tainted syzkaller #0 PREEMPT(full) [ 80.104788][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.104802][ T5932] Call Trace: [ 80.104807][ T5932] [ 80.104815][ T5932] dump_stack_lvl+0xe8/0x150 [ 80.104831][ T5932] print_circular_bug+0x2e1/0x300 [ 80.104849][ T5932] check_noncircular+0x12e/0x150 [ 80.104866][ T5932] __lock_acquire+0x15a5/0x2cf0 [ 80.104886][ T5932] ? kernfs_iop_getattr+0x9e/0x450 [ 80.104900][ T5932] lock_acquire+0x106/0x350 [ 80.104912][ T5932] ? kernfs_iop_getattr+0x9e/0x450 [ 80.104930][ T5932] down_read+0x47/0x2e0 [ 80.104944][ T5932] ? kernfs_iop_getattr+0x9e/0x450 [ 80.104958][ T5932] kernfs_iop_getattr+0x9e/0x450 [ 80.104974][ T5932] vfs_getattr_nosec+0x2e1/0x430 [ 80.104989][ T5932] loop_assign_backing_file+0x27a/0x4b0 [ 80.105007][ T5932] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 80.105031][ T5932] lo_ioctl+0x1acb/0x1fb0 [ 80.105048][ T5932] ? __pfx_lo_ioctl+0x10/0x10 [ 80.105076][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105090][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105103][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105117][ T5932] ? unwind_next_frame+0xa6/0x2550 [ 80.105135][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105148][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105162][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105175][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105188][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105200][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105214][ T5932] ? unwind_next_frame+0xa6/0x2550 [ 80.105229][ T5932] ? unwind_next_frame+0xa6/0x2550 [ 80.105243][ T5932] ? is_bpf_text_address+0x26/0x2b0 [ 80.105260][ T5932] ? is_bpf_text_address+0x26/0x2b0 [ 80.105273][ T5932] ? is_bpf_text_address+0x292/0x2b0 [ 80.105284][ T5932] ? is_bpf_text_address+0x26/0x2b0 [ 80.105297][ T5932] ? kernel_text_address+0xa5/0xe0 [ 80.105313][ T5932] ? __kernel_text_address+0xd/0x30 [ 80.105328][ T5932] ? unwind_get_return_address+0x4d/0x90 [ 80.105341][ T5932] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.105358][ T5932] ? arch_stack_walk+0xfb/0x150 [ 80.105376][ T5932] ? stack_trace_save+0xa9/0x100 [ 80.105391][ T5932] ? __pfx_stack_trace_save+0x10/0x10 [ 80.105407][ T5932] ? kasan_save_free_info+0x46/0x50 [ 80.105422][ T5932] ? stack_depot_save_flags+0x33/0x810 [ 80.105438][ T5932] ? kasan_save_track+0x4f/0x80 [ 80.105452][ T5932] ? kasan_save_track+0x3e/0x80 [ 80.105466][ T5932] ? kasan_save_free_info+0x46/0x50 [ 80.105479][ T5932] ? __kasan_slab_free+0x5c/0x80 [ 80.105493][ T5932] ? kfree+0x1c5/0x640 [ 80.105507][ T5932] ? tomoyo_path_number_perm+0x501/0x630 [ 80.105523][ T5932] ? security_file_ioctl_compat+0xc3/0x2a0 [ 80.105538][ T5932] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 80.105556][ T5932] ? __asan_memset+0x22/0x50 [ 80.105571][ T5932] ? blk_get_meta_cap+0x16d/0x7a0 [ 80.105587][ T5932] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 80.105604][ T5932] ? blkdev_common_ioctl+0x14b7/0x3240 [ 80.105621][ T5932] lo_compat_ioctl+0x324/0x3f0 [ 80.105636][ T5932] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 80.105651][ T5932] ? kasan_quarantine_put+0xbb/0x1f0 [ 80.105668][ T5932] ? tomoyo_path_number_perm+0x219/0x630 [ 80.105683][ T5932] ? tomoyo_path_number_perm+0x219/0x630 [ 80.105699][ T5932] ? do_vfs_ioctl+0x1166/0x1530 [ 80.105717][ T5932] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.105737][ T5932] ? __lock_acquire+0x6b5/0x2cf0 [ 80.105758][ T5932] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 80.105772][ T5932] compat_blkdev_ioctl+0x5ea/0x7c0 [ 80.105788][ T5932] ? __fget_files+0x2a/0x420 [ 80.105803][ T5932] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 80.105818][ T5932] ? __fget_files+0x2a/0x420 [ 80.105832][ T5932] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 80.105850][ T5932] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 80.105868][ T5932] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 80.105886][ T5932] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.105902][ T5932] ? lockdep_hardirqs_on+0x7a/0x110 [ 80.105914][ T5932] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.105929][ T5932] ? __ia32_compat_sys_rt_sigprocmask+0x2c6/0x340 [ 80.105944][ T5932] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 80.105958][ T5932] ? exc_page_fault+0x6a/0xc0 [ 80.105972][ T5932] __do_fast_syscall_32+0x23e/0x6f0 [ 80.105986][ T5932] ? do_fast_syscall_32+0x33/0x70 [ 80.105998][ T5932] ? lockdep_hardirqs_on+0x7a/0x110 [ 80.106009][ T5932] ? irqentry_exit+0x10f/0x8b0 [ 80.106020][ T5932] ? trace_irq_disable+0x3b/0x140 [ 80.106037][ T5932] do_fast_syscall_32+0x33/0x70 [ 80.106050][ T5932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.106065][ T5932] RIP: 0023:0xf7f8601c [ 80.106080][ T5932] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 80.106090][ T5932] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 80.106103][ T5932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 80.106112][ T5932] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.106119][ T5932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.106126][ T5932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 80.106133][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.106145][ T5932] [ 80.648938][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.659210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.680378][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.690649][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.698854][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.709088][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.718381][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.728613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.736789][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.747024][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.755393][ T5931] ldm_validate_partition_table(): Disk read failed. [ 80.762457][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.762489][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.780895][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.791107][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.799126][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.809409][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.819962][ T5931] Dev loop6: unable to read RDB block 0 [ 80.826980][ T5931] loop6: unable to read partition table [ 80.832810][ T5931] loop6: partition table beyond EOD, truncated [ 80.841940][ T5931] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 80.858017][ T5932] ldm_validate_partition_table(): Disk read failed. [ 80.865460][ T5932] Dev loop6: unable to read RDB block 0 [ 80.872028][ T5932] loop6: unable to read partition table [ 80.877921][ T5932] loop6: partition table beyond EOD, truncated [ 80.884139][ T5932] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 81.500450][ T808] cfg80211: failed to load regulatory.db