last executing test programs: 3.647923318s ago: executing program 0 (id=234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x6000, &(0x7f00000004c0)=[{&(0x7f0000000500)='U', 0xa00120}], 0x1}, 0x3) 3.617954131s ago: executing program 4 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x11, &(0x7f0000000c40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000dc0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.546718458s ago: executing program 0 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000800)={0x2, &(0x7f0000000200)=[{0x48, 0x0, 0x0, 0x5}, {0x6}]}) 2.821729392s ago: executing program 0 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.784308406s ago: executing program 2 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0x0) 2.714302153s ago: executing program 4 (id=244): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) iopl(0x3) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000440), 0x0, 0x0, 0x1) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000600)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x74b36ae850024e60) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.696394935s ago: executing program 0 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f0000000400"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="160000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a80)={r0, &(0x7f0000000ac0), &(0x7f0000000b00)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r0, &(0x7f0000000c00), &(0x7f0000000c40)=""/236}, 0x20) 2.685421276s ago: executing program 1 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.659382249s ago: executing program 0 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x2, &(0x7f0000000740)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000840)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000880)=""/229, 0x0, 0x11}, 0x78) 2.630289472s ago: executing program 0 (id=248): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="fb", 0x1}], 0x1}, 0x8040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40), 0xc000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r2, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.521774603s ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.519671653s ago: executing program 4 (id=250): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000008c0), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) splice(r0, 0x0, r3, 0x0, 0x7c, 0x2) 2.44630153s ago: executing program 2 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000580)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @none, 0x7}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xa}, [@typed={0x25, 0x1, 0x0, 0x0, @str='A.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x00'}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 2.441713241s ago: executing program 4 (id=253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000000020104010000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000008000400000001"], 0xb8}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='sys_mnt\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000340), 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000001a00)={'dt2814\x00', [0x2003, 0x20, 0x8, 0x20000001, 0x25, 0x0, 0x400, 0x200002, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff3, 0x400001, 0x6, 0x8, 0x2, 0x7f, 0xffffffff, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x0, 0x3, 0x6, 0x4006, 0x8000, 0x3]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) 2.425928893s ago: executing program 1 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x1, r2}) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x23700, 0x0) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r5, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x2, 0x0) shmctl$SHM_LOCK(r5, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffac9e9f5db7a3", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x7cda91c1, 0x1}, 0x10, 0x23583, r1, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[{0x4, 0x4, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x7}], 0x10, 0xffffff4b}, 0x94) 2.363433789s ago: executing program 3 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) socket$xdp(0x2c, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_create1(0x80000) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x1, r2}) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x23700, 0x0) r4 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_settime(0x0, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r4, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x2, 0x0) shmctl$SHM_LOCK(r4, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2.322720913s ago: executing program 1 (id=257): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) 2.246405311s ago: executing program 3 (id=258): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x2400c890) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r2, 0x0, 0x1002000ff) r4 = fcntl$dupfd(r3, 0x0, r3) close_range(0xffffffffffffffff, r4, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) 2.245343951s ago: executing program 1 (id=259): r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xb, 0x103381) prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000e40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000ec0)='pipefs\x00', 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000c40)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x15) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x110, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf4db}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x440d0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 2.244582631s ago: executing program 2 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000300)={0x1, r2}) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x2, 0x0) shmctl$SHM_LOCK(r5, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x7cda91c1, 0x1}, 0x10, 0x23583, r1, 0x0, &(0x7f0000000400), 0x0, 0x10, 0xffffff4b}, 0x94) 2.189249097s ago: executing program 3 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.152576731s ago: executing program 3 (id=262): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.298142998s ago: executing program 1 (id=263): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000008c0), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) splice(r0, 0x0, r3, 0x0, 0x7c, 0x2) 1.130110955s ago: executing program 2 (id=264): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b700000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.128327915s ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000780)={@val={0x2000}, @void, @eth={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x28, 0x24, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, {0x4e21, 0x600, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}}}}}}}}, 0x36) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)}, 0xff0f000000000000) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.07860378s ago: executing program 4 (id=266): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) 1.019116526s ago: executing program 1 (id=267): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f000000"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000000020104010000000000000002000000340001801400018008000100c0a8010108000200c0a801021c000280050001000600000006000200303900000600030000150000340002801400018008000100c0a8010208000200c0a801011c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000008000400000001"], 0xb8}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='sys_mnt\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000340), 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000001a00)={'dt2814\x00', [0x2003, 0x20, 0x8, 0x20000001, 0x25, 0x0, 0x400, 0x200002, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff3, 0x400001, 0x6, 0x8, 0x2, 0x7f, 0xffffffff, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x0, 0x3, 0x6, 0x4006, 0x8000, 0x3]}) socket(0x400000000010, 0x3, 0x0) 251.065494ms ago: executing program 4 (id=268): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000011c0)=0x64, 0x12) write$sysctl(r1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000001200)={0x6, 0x8, [0x2, 0x200000000a, 0x4, 0x208000005], &(0x7f0000001240)=[0x0]}) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) semget$private(0x0, 0x7, 0x195) syz_clone(0x20000, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="212fc30c79939952e48dbcfd4723aab9dc1bc6032a") madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000001400)=0xfffffffffffffffd, 0x4) syz_io_uring_setup(0xf00, &(0x7f0000001440)={0x0, 0x595f, 0x2, 0x0, 0x4e}, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001580)='numa_maps\x00') read$FUSE(r2, &(0x7f00000015c0)={0x2020}, 0x2020) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8996, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/features/transaction_report\x00', 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000e80), 0x82002, 0x0) write$dsp(r3, &(0x7f0000000ec0)="11", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 2.24415ms ago: executing program 3 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='net/packet\x00') write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="10000000", @ANYRES32], 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x36) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/ip_tables_targets\x00') close(0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @none, 0x7}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) pipe2$watch_queue(0x0, 0x80) r3 = add_key(&(0x7f0000000200)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 47.632665][ T4175] cgroup: Unknown subsys name 'net' [ 47.787960][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.978897][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.589163][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.603275][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.607865][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 50.611681][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.636381][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 50.645316][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 50.652887][ T4190] rdma_rxe: failed to add rxe_eth0 [ 50.669093][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 50.673444][ T4195] rdma_rxe: failed to add rxe_eth0 [ 50.676168][ T4193] rdma_rxe: failed to add rxe_eth0 [ 50.681814][ T4188] rdma_rxe: failed to add rxe_eth0 [ 50.762627][ T4189] infiniband rxe0: set active [ 50.773313][ T4189] infiniband rxe0: added rxe_eth0 [ 50.779607][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.853858][ T4189] RDS/IB: rxe0: added [ 50.859643][ T4189] smc: adding ib device rxe0 with port count 1 [ 50.866225][ T4189] smc: ib device rxe0 port 1 has pnetid [ 50.873092][ T2302] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.901502][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.050701][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.060642][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.108152][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.130050][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.177852][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.238480][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.380807][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.388763][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.396681][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.405355][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.412415][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.420167][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.427571][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.428106][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.441063][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.449269][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.457153][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.467271][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.475736][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.494189][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.501302][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.509873][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.517694][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.525696][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.534649][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.551161][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.563654][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.571592][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.578814][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.586265][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.594578][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.623735][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.639700][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.655026][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.664676][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.666369][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.680588][ T3854] infiniband rxe0: set active [ 51.724903][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.733013][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.754925][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.766792][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.800144][ T4188] team0: Port device team_slave_0 added [ 51.811886][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.830693][ T4193] team0: Port device team_slave_0 added [ 51.841055][ T4193] team0: Port device team_slave_1 added [ 51.848199][ T4188] team0: Port device team_slave_1 added [ 51.867595][ T2302] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.877116][ T4195] team0: Port device team_slave_0 added [ 51.915123][ T4195] team0: Port device team_slave_1 added [ 51.927572][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.934593][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.960918][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.975211][ T4190] team0: Port device team_slave_0 added [ 51.989886][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.996886][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.023297][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.039735][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.046781][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.072695][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.091439][ T4190] team0: Port device team_slave_1 added [ 52.107309][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.114363][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.140701][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.176905][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.183988][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.210032][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.221995][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.229043][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.255011][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.276257][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.283192][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.290481][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.301710][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.327806][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.344057][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.351017][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.377285][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.396621][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.403967][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.410540][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.418370][ T4193] Cannot create hsr debugfs directory [ 52.462469][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.470029][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.476954][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.484683][ T4195] Cannot create hsr debugfs directory [ 52.587175][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.594519][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.601120][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.609329][ T4190] Cannot create hsr debugfs directory [ 52.609353][ T2302] Bluetooth: hci3: command 0x0409 tx timeout [ 52.619366][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.621650][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 52.633346][ T2302] Bluetooth: hci0: command 0x0409 tx timeout [ 52.641403][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.715871][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.852987][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.863660][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.871320][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.879441][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.886995][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.894813][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.921771][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.932103][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.945352][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.955100][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.976286][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.986211][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.997746][ T4189] team0: Port device team_slave_0 added [ 53.006361][ T4189] team0: Port device team_slave_1 added [ 53.037559][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.044623][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.070718][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.086064][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.093007][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.119282][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.136977][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.168161][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.178149][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.215545][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.228301][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.235072][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.241463][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.249193][ T4189] Cannot create hsr debugfs directory [ 53.267290][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.276601][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.288254][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.304934][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.430285][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.440501][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.464886][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.479994][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.517030][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.529954][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.568618][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.578559][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.589422][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.602507][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.615051][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.626372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.635447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.645613][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.652801][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.661251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.670623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.683646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.691683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.701107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.709766][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.716857][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.726785][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.736616][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.747239][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.758835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.780135][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.799465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.808960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.817722][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.824820][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.839479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.847967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.856969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.865324][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.872389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.880711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.890454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.909698][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.934839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.944179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.951854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.960633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.969652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.979534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.988775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.998008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.006739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.015193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.023547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.031687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.040399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.049038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.057220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.083946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.092516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.101585][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.108809][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.117334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.126556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.135321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.155027][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.168661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.178219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.186998][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.194100][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.202201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.212084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.220813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.232237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.246017][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.255075][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.266866][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.284008][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.311014][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.321356][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.330633][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.372205][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.381788][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.398442][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.409934][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.418846][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.429060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.437739][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.444828][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.452890][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.461573][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.469918][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.477017][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.484844][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.494271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.502781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.511367][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.555827][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.571644][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.583073][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.602819][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.613242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.623845][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.645398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.655417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.664675][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.674253][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.682693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.683561][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 54.691173][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 54.704049][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 54.710066][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 54.711242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.716514][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 54.730317][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.738723][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.748232][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.756763][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.765544][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.774949][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.792455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.800028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.819388][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.838467][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.846821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.861008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.874700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.893468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.918685][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.939868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.956766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.970448][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.977583][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.992969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.001975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.016989][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.024101][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.040330][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.051760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.064579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.072103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.111732][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.134374][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.170779][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.180636][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.189696][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.199905][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.208448][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.217824][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.227121][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.234928][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.242340][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.251159][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.260588][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.279449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.288615][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.309169][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.326601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.335504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.343823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.351880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.360679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.368467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.381991][ T4193] device veth0_vlan entered promiscuous mode [ 55.398385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.408422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.417061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.426084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.435649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.443722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.454401][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.462824][ T4188] device veth0_vlan entered promiscuous mode [ 55.470415][ T4190] device veth0_vlan entered promiscuous mode [ 55.483052][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.492015][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.508104][ T4193] device veth1_vlan entered promiscuous mode [ 55.525976][ T4190] device veth1_vlan entered promiscuous mode [ 55.537112][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.549586][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.559597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.572732][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.581262][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.599687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.609361][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.618451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.629653][ T4188] device veth1_vlan entered promiscuous mode [ 55.660363][ T4193] device veth0_macvtap entered promiscuous mode [ 55.688799][ T4190] device veth0_macvtap entered promiscuous mode [ 55.697767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.706064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.715136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.725232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.733871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.742233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.751093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.760098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.771397][ T4193] device veth1_macvtap entered promiscuous mode [ 55.793507][ T4190] device veth1_macvtap entered promiscuous mode [ 55.808737][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.816801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.825931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.834126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.842202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.850558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.858150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.865848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.874743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.883853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.891573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.909337][ T4195] device veth0_vlan entered promiscuous mode [ 55.918471][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.930303][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.942336][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.953586][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.967980][ T4195] device veth1_vlan entered promiscuous mode [ 55.977228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.986906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.995979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.006103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.015082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.031401][ T4188] device veth0_macvtap entered promiscuous mode [ 56.039885][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.048951][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.057993][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.066967][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.082474][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.094297][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.105065][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.114477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.122907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.132355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.142431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.151128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.161395][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.175680][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.184677][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.193570][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.202308][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.217336][ T4188] device veth1_macvtap entered promiscuous mode [ 56.236395][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.244748][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.268447][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.280392][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.291419][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.302198][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.315769][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.338133][ T4195] device veth0_macvtap entered promiscuous mode [ 56.350679][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.359398][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.369113][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.378954][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.387655][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.406315][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.420354][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.436483][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.448510][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.460156][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.484402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.493736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.502456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.511583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.522275][ T4195] device veth1_macvtap entered promiscuous mode [ 56.540198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.548464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.556756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.566459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.574722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.588138][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.598476][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.607578][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.616530][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648830][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.649642][ T4189] device veth0_vlan entered promiscuous mode [ 56.664757][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.707171][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.718962][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.729321][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.739766][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.749619][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.760380][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.771789][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.773990][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 56.785190][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.792879][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.801136][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 56.801933][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.807269][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 56.807341][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 56.831610][ T4189] device veth1_vlan entered promiscuous mode [ 56.838621][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 56.853245][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.861063][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.883000][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.891923][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.904348][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.919069][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.929512][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.940375][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.950452][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.961312][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.973685][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.981272][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.989605][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.998085][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.006236][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.014353][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.022857][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.048898][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.066314][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.075382][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.084586][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.102855][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.113955][ T4189] device veth0_macvtap entered promiscuous mode [ 57.127122][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.140016][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.151011][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.160484][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.178128][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.206942][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.224813][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.234732][ T4189] device veth1_macvtap entered promiscuous mode [ 57.278520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.288574][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.296064][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.321950][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.337427][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.348607][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.359722][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.373860][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.387791][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.398401][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.412072][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.425621][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.438240][ T4293] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.453525][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.462208][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.477667][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.501837][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.512783][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.524772][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.528576][ T4296] loop0: detected capacity change from 0 to 512 [ 57.534925][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.553579][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.564410][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.575191][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.600558][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.612151][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.630031][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.631858][ T4296] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.7: iget: bad i_size value: 38620345925642 [ 57.651494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.661817][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.666075][ T4296] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 57.672759][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.687886][ T4296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.693814][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.711434][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.720577][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.730289][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.777448][ T4300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.7: bg 0: block 5: invalid block bitmap [ 57.790261][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.791802][ T4300] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 464 with error 28 [ 57.808663][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.827732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.835192][ T4300] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.835192][ T4300] [ 57.845834][ T4300] EXT4-fs (loop0): Total free blocks count 0 [ 57.858627][ T4300] EXT4-fs (loop0): Free/Dirty block details [ 57.880866][ T4300] EXT4-fs (loop0): free_blocks=0 [ 57.899124][ T4300] EXT4-fs (loop0): dirty_blocks=468 [ 57.905519][ T4300] EXT4-fs (loop0): Block reservation details [ 57.911722][ T4300] EXT4-fs (loop0): i_reserved_data_blocks=468 [ 57.918270][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.932598][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.941287][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.954605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.967634][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.996622][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.048317][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.067638][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.091276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.099367][ T4306] loop1: detected capacity change from 0 to 512 [ 58.234408][ T4312] loop2: detected capacity change from 0 to 8 [ 58.248568][ T4306] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 58.262218][ T4306] System zones: 0-2, 18-18, 34-35 [ 58.276035][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.299230][ T4306] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.367907][ T4312] SQUASHFS error: Unable to read inode 0xa7 [ 58.865509][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 59.266264][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 59.303768][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 59.324008][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 59.355063][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 59.718017][ T4346] loop0: detected capacity change from 0 to 128 [ 60.594304][ T4360] loop3: detected capacity change from 0 to 2048 [ 60.776397][ T4373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 60.786065][ T4373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.047958][ T4202] loop3: unable to read partition table [ 61.084876][ T4373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29'. [ 61.101271][ T4202] loop3: partition table beyond EOD, truncated [ 61.541005][ T4397] loop2: detected capacity change from 0 to 512 [ 61.577202][ T4397] EXT4-fs (loop2): Ignoring removed bh option [ 61.602431][ T4397] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 61.730306][ T4398] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.312526][ T4398] ip_tables: iptables: counters copy to user failed while replacing table [ 62.575169][ T4360] loop3: unable to read partition table [ 62.580975][ T4360] loop3: partition table beyond EOD, truncated [ 62.693294][ T4360] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 62.707466][ T4401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.37'. [ 63.029445][ T4409] loop4: detected capacity change from 0 to 512 [ 63.158708][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.201690][ T4409] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.393113][ C1] sched: RT throttling activated [ 63.478967][ T4422] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 63.593148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.613150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.623148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.633157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.643442][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.653144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.663149][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.673140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.683145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.693138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.242133][ T3561] loop3: unable to read partition table [ 65.307125][ T3561] loop3: partition table beyond EOD, truncated [ 65.605535][ T4431] loop4: detected capacity change from 0 to 128 [ 65.678744][ T4431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 65.703420][ T4431] System zones: 1-3, 19-19, 35-36 [ 65.709531][ T4431] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 65.792652][ T4436] loop3: detected capacity change from 0 to 4096 [ 65.799171][ T4431] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.888483][ T2240] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.900165][ T4436] EXT4-fs (loop3): Ignoring removed nobh option [ 66.109566][ T4448] loop0: detected capacity change from 0 to 2048 [ 66.128028][ T4436] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.146825][ T4436] EXT4-fs (loop3): Ignoring removed bh option [ 66.175855][ T4436] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 66.343707][ T4448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.613745][ T4436] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 67.727718][ T4486] loop1: detected capacity change from 0 to 512 [ 67.775071][ T4491] ecryptfs_parse_options: eCryptfs: unrecognized option [eccipher=aes] [ 67.780201][ T4486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.856463][ T4486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.178604][ T4486] EXT4-fs (loop1): 1 truncate cleaned up [ 68.236374][ T4486] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 68.706105][ T4509] Illegal XDP return value 4294967274, expect packet loss! [ 68.866341][ T4517] loop0: detected capacity change from 0 to 512 [ 68.920834][ T4517] EXT4-fs (loop0): invalid inodes per group: 0 [ 68.920834][ T4517] [ 69.279969][ T4523] loop0: detected capacity change from 0 to 1024 [ 69.327989][ T4523] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 70.027195][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.040143][ T4525] loop4: detected capacity change from 0 to 8 [ 70.086627][ T4527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 70.201859][ T4532] loop0: detected capacity change from 0 to 512 [ 70.261815][ T4535] loop4: detected capacity change from 0 to 164 [ 70.278396][ T4532] EXT4-fs error (device loop0): __ext4_iget:4919: inode #2: block 131072: comm syz.0.65: invalid block [ 70.314296][ T4532] EXT4-fs (loop0): get root inode failed [ 70.326633][ T4532] EXT4-fs (loop0): mount failed [ 70.403641][ T4255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.428299][ T4255] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.458617][ T4255] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 70.483217][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.703990][ T4255] usb 4-1: 0:1 : does not exist [ 71.177726][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.184444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.409708][ T21] usb 4-1: USB disconnect, device number 2 [ 72.619136][ T4572] loop3: detected capacity change from 0 to 8 [ 72.663088][ T4572] SQUASHFS error: zlib decompression failed, data probably corrupt [ 72.679634][ T4572] SQUASHFS error: Failed to read block 0x4de: -5 [ 72.688405][ T4572] SQUASHFS error: Failed to read block 0x4e2: -5 [ 72.701681][ T4572] SQUASHFS error: Failed to read block 0x9ca: -5 [ 72.709646][ T4572] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 72.722858][ T4572] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 72.731152][ T4572] SQUASHFS error: Failed to read block 0x535f2: -5 [ 72.765384][ T25] audit: type=1800 audit(1792890346.146:2): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 72.845771][ T4584] loop1: detected capacity change from 0 to 2048 [ 72.862942][ T4584] ======================================================= [ 72.862942][ T4584] WARNING: The mand mount option has been deprecated and [ 72.862942][ T4584] and is ignored by this kernel. Remove the mand [ 72.862942][ T4584] option from the mount to silence this warning. [ 72.862942][ T4584] ======================================================= [ 73.045943][ T4584] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 73.593386][ T2240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.797702][ T4596] loop4: detected capacity change from 0 to 512 [ 73.842053][ T4599] netlink: 'syz.0.86': attribute type 2 has an invalid length. [ 73.849873][ T4599] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 73.888049][ T4596] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.951504][ T4603] loop1: detected capacity change from 0 to 128 [ 74.100903][ T4603] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 74.328050][ T4596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.85: bg 0: block 5: invalid block bitmap [ 74.369660][ T4610] loop2: detected capacity change from 0 to 256 [ 74.399192][ T4596] EXT4-fs (loop4): Remounting filesystem read-only [ 74.458839][ T4596] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 74.468849][ T4596] EXT4-fs (loop4): Remounting filesystem read-only [ 74.481506][ T4596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.85: invalid indirect mapped block 3 (level 2) [ 74.501120][ T4596] EXT4-fs (loop4): Remounting filesystem read-only [ 74.519086][ T2240] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 74.549052][ T2240] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 74.561062][ T4596] EXT4-fs (loop4): 2 truncates cleaned up [ 74.568760][ T4610] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 74.591262][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,. Quota mode: writeback. [ 74.612904][ T2240] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.645532][ T25] audit: type=1800 audit(1792890348.026:3): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.89" name="file1" dev="loop2" ino=1048627 res=0 errno=0 [ 74.718521][ T4620] loop1: detected capacity change from 0 to 512 [ 74.804440][ T2240] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 74.824319][ T2240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.832384][ T2240] usb 4-1: Product: syz [ 74.856299][ T2240] usb 4-1: Manufacturer: syz [ 74.861072][ T2240] usb 4-1: SerialNumber: syz [ 75.394539][ T2240] usb 4-1: config 0 descriptor?? [ 75.604918][ T2240] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 75.642824][ T4620] netlink: 72 bytes leftover after parsing attributes in process `syz.1.94'. [ 75.682278][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 75.721494][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 75.767575][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 75.812451][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 75.914219][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 75.969032][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 76.048546][ T2240] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.114984][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 76.186241][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 76.249783][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 76.317880][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 76.383335][ T2240] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 76.399013][ T2240] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.414403][ T2240] usb 4-1: USB disconnect, device number 3 [ 76.470889][ T2240] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 76.489605][ T2240] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 76.520531][ T2240] keyspan 4-1:0.0: device disconnected [ 76.860503][ T4663] loop2: detected capacity change from 0 to 256 [ 76.928775][ T4663] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 76.934295][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 76.942381][ T4665] loop4: detected capacity change from 0 to 512 [ 76.960765][ T4667] loop1: detected capacity change from 0 to 128 [ 77.114588][ T4668] loop0: detected capacity change from 0 to 1024 [ 77.249333][ T4665] process 'syz.4.109' launched './file2' with NULL argv: empty string added [ 77.888546][ T4668] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 77.921867][ T4674] loop2: detected capacity change from 0 to 128 [ 77.930429][ T4672] loop3: detected capacity change from 0 to 128 [ 78.100269][ T4668] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 78.273895][ T4668] EXT4-fs (loop0): Invalid want_extra_isize 133 [ 78.440936][ T4672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.639714][ T4672] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.290140][ T4691] loop3: detected capacity change from 0 to 2048 [ 79.329987][ T4691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.607597][ T4698] loop3: detected capacity change from 0 to 512 [ 79.648198][ T4698] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,init_itable,jqfmt=vfsv1,quota,nogrpid,journal_ioprio=0x0000000000000001,nouid32,,errors=continue. Quota mode: writeback. [ 79.663818][ T4699] netlink: 'syz.0.121': attribute type 12 has an invalid length. [ 79.667990][ T4698] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.824334][ T4704] loop1: detected capacity change from 0 to 128 [ 79.848480][ T4705] loop4: detected capacity change from 0 to 512 [ 79.990856][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 79.995103][ T4705] EXT4-fs (loop4): 1 truncate cleaned up [ 80.005723][ T4704] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.053287][ T4705] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 80.230139][ T4705] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 80.549750][ T4717] loop1: detected capacity change from 0 to 128 [ 81.177272][ T25] audit: type=1326 audit(1792890354.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.459422][ T25] audit: type=1326 audit(1792890354.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.575231][ T4731] loop2: detected capacity change from 0 to 128 [ 81.680289][ T25] audit: type=1326 audit(1792890354.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.686966][ T2240] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 81.716808][ T13] cfg80211: failed to load regulatory.db [ 81.724089][ T2240] Bluetooth: hci4: Injecting HCI hardware error event [ 81.734203][ T4191] Bluetooth: hci4: hardware error 0x00 [ 81.754440][ T25] audit: type=1326 audit(1792890354.556:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.768512][ T4732] loop4: detected capacity change from 0 to 4096 [ 81.781503][ T25] audit: type=1326 audit(1792890354.556:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.806864][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 81.813435][ T25] audit: type=1326 audit(1792890354.556:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 81.852978][ T4731] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.930678][ T25] audit: type=1326 audit(1792890354.556:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 82.070915][ T25] audit: type=1326 audit(1792890354.556:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 82.126418][ T25] audit: type=1326 audit(1792890354.556:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 82.150443][ T25] audit: type=1326 audit(1792890354.556:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.4.128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 82.150989][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.973282][ T4753] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 83.138198][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.343267][ T13] usb 5-1: device descriptor read/64, error -71 [ 83.633404][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.853366][ T13] usb 5-1: device descriptor read/64, error -71 [ 83.974415][ T13] usb usb5-port1: attempt power cycle [ 84.039538][ T4774] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.873335][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.002045][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.017516][ T4790] loop0: detected capacity change from 0 to 512 [ 85.209547][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 85.245474][ T13] usb 5-1: device not accepting address 4, error -71 [ 85.364170][ T21] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 85.414518][ T21] usb 3-1: config 0 has no interface number 0 [ 85.490126][ T21] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 85.683899][ T21] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 86.134320][ T21] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 86.158272][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.187756][ T21] usb 3-1: Product: syz [ 86.191952][ T21] usb 3-1: Manufacturer: syz [ 86.675705][ T21] usb 3-1: SerialNumber: syz [ 86.729211][ T4284] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.757565][ T21] usb 3-1: config 0 descriptor?? [ 86.773516][ T4816] loop4: detected capacity change from 0 to 1024 [ 86.783449][ T4788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.793452][ T4788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.858260][ T4816] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 86.985195][ T4284] usb 2-1: Using ep0 maxpacket: 16 [ 87.020343][ T4788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.033429][ T4788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.203416][ T4284] usb 2-1: config 7 has an invalid interface number: 169 but max is 0 [ 87.229631][ T4284] usb 2-1: config 7 has no interface number 0 [ 87.239102][ T4284] usb 2-1: config 7 interface 169 has no altsetting 0 [ 87.268492][ T4829] loop4: detected capacity change from 0 to 1024 [ 87.313472][ T21] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 87.439400][ T4829] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 87.450386][ T4829] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.472049][ T4829] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 87.480811][ T4829] System zones: 0-1, 3-36 [ 87.613783][ T4284] usb 2-1: string descriptor 0 read error: -22 [ 87.628662][ T4284] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=37.d0 [ 87.753944][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.881988][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 88.056123][ T4284] option 2-1:7.169: GSM modem (1-port) converter detected [ 88.249382][ T4252] usb 2-1: USB disconnect, device number 2 [ 88.267488][ T4252] option 2-1:7.169: device disconnected [ 88.353415][ T21] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 88.393240][ T21] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 88.421074][ T4841] loop0: detected capacity change from 0 to 2048 [ 88.446290][ T21] asix: probe of 3-1:0.34 failed with error -71 [ 88.484255][ T4841] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 88.508555][ T4841] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.512019][ T21] usb 3-1: USB disconnect, device number 2 [ 89.115527][ T4847] loop0: detected capacity change from 0 to 1164 [ 90.620428][ T4857] loop2: detected capacity change from 0 to 1024 [ 92.560373][ T25] kauditd_printk_skb: 56 callbacks suppressed [ 92.560387][ T25] audit: type=1326 audit(1792890365.936:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4866 comm="syz.4.178" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1928b559 code=0x7fc00000 [ 92.639773][ T4885] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.648494][ T4885] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.424367][ T4897] binder: 4896:4897 ioctl c0046209 0 returned -22 [ 93.447561][ T4899] loop1: detected capacity change from 0 to 512 [ 93.548980][ T25] audit: type=1800 audit(1792890366.926:71): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file1" dev="loop1" ino=1048638 res=0 errno=0 [ 94.494397][ T25] audit: type=1800 audit(1792890366.956:72): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file1" dev="loop1" ino=1048638 res=0 errno=0 [ 94.711539][ T4909] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 94.746102][ T4909] FAT-fs (loop1): Filesystem has been set read-only [ 94.908422][ T4939] dummy0: mtu less than device minimum [ 95.201994][ T4952] device syzkaller0 entered promiscuous mode [ 95.218594][ T4952] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 95.863565][ T25] audit: type=1326 audit(1792890369.246:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a7fa7559 code=0x7fc00000 [ 96.346351][ T25] audit: type=1326 audit(1792890369.726:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 96.395543][ T25] audit: type=1326 audit(1792890369.756:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 96.425847][ T25] audit: type=1326 audit(1792890369.756:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 97.150145][ T25] audit: type=1326 audit(1792890369.756:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 97.180759][ T25] audit: type=1326 audit(1792890369.756:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 97.205267][ T25] audit: type=1326 audit(1792890369.756:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.1.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf4f7a559 code=0x7fc00000 [ 98.071210][ T4998] ªªªªªª: renamed from vlan0 [ 98.401533][ T5027] device syzkaller0 entered promiscuous mode [ 98.748824][ T5063] Zero length message leads to an empty skb [ 98.776281][ T5064] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.032376][ T5076] comedi comedi3: board detection failed [ 99.993990][ T5086] syz.3.265 uses obsolete (PF_INET,SOCK_PACKET) [ 100.010664][ T5084] comedi comedi3: board detection failed [ 101.359707][ T5102] [ 101.362058][ T5102] ====================================================== [ 101.366617][ T5097] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 101.369062][ T5102] WARNING: possible circular locking dependency detected [ 101.369086][ T5102] syzkaller #0 Not tainted [ 101.369095][ T5102] ------------------------------------------------------ [ 101.369100][ T5102] syz.2.270/5102 is trying to acquire lock: [ 101.369109][ T5102] ffff888073db1458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 101.369164][ T5102] [ 101.369164][ T5102] but task is already holding lock: [ 101.369168][ T5102] ffff888073db0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 101.369209][ T5102] [ 101.369209][ T5102] which lock already depends on the new lock. [ 101.369209][ T5102] [ 101.369221][ T5102] [ 101.369221][ T5102] the existing dependency chain (in reverse order) is: [ 101.369227][ T5102] [ 101.369227][ T5102] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 101.369258][ T5102] lock_sock_nested+0x44/0x100 [ 101.369277][ T5102] smc_listen_out+0xd4/0x3c0 [ 101.369292][ T5102] smc_listen_work+0x52a/0xd10 [ 101.369306][ T5102] process_one_work+0x867/0xff0 [ 101.369321][ T5102] worker_thread+0xad7/0x12a0 [ 101.369335][ T5102] kthread+0x42e/0x520 [ 101.369348][ T5102] ret_from_fork+0x1f/0x30 [ 101.369363][ T5102] [ 101.369363][ T5102] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 101.369386][ T5102] __lock_acquire+0x38f7/0x7d40 [ 101.369400][ T5102] lock_acquire+0x19f/0x400 [ 101.369413][ T5102] __flush_work+0x116/0x210 [ 101.369424][ T5102] __cancel_work_timer+0x3f4/0x560 [ 101.369437][ T5102] smc_clcsock_release+0x5c/0xe0 [ 101.369451][ T5102] __smc_release+0x644/0x7b0 [ 101.513427][ T5097] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 101.518364][ T5102] smc_close_non_accepted+0xd1/0x1f0 [ 101.518390][ T5102] smc_close_active+0xae2/0xea0 [ 101.518405][ T5102] __smc_release+0x9c/0x7b0 [ 101.558563][ T5102] smc_release+0x2c1/0x520 [ 101.563485][ T5102] sock_close+0xbf/0x210 [ 101.568240][ T5102] __fput+0x212/0x8c0 [ 101.572724][ T5102] task_work_run+0x125/0x1a0 [ 101.577810][ T5102] exit_to_user_mode_loop+0x10f/0x130 [ 101.583705][ T5102] exit_to_user_mode_prepare+0xee/0x180 [ 101.589745][ T5102] syscall_exit_to_user_mode+0x16/0x40 [ 101.595703][ T5102] do_syscall_64+0x58/0xa0 [ 101.600615][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.607001][ T5102] [ 101.607001][ T5102] other info that might help us debug this: [ 101.607001][ T5102] [ 101.617296][ T5102] Possible unsafe locking scenario: [ 101.617296][ T5102] [ 101.624732][ T5102] CPU0 CPU1 [ 101.630103][ T5102] ---- ---- [ 101.635442][ T5102] lock(sk_lock-AF_SMC/1); [ 101.639921][ T5102] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.649344][ T5102] lock(sk_lock-AF_SMC/1); [ 101.656339][ T5102] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.663248][ T5102] [ 101.663248][ T5102] *** DEADLOCK *** [ 101.663248][ T5102] [ 101.671380][ T5102] 2 locks held by syz.2.270/5102: [ 101.676375][ T5102] #0: ffff8880741c0210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 101.686527][ T5102] #1: ffff888073db0120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 101.695935][ T5102] [ 101.695935][ T5102] stack backtrace: [ 101.701806][ T5102] CPU: 0 PID: 5102 Comm: syz.2.270 Not tainted syzkaller #0 [ 101.709068][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.719193][ T5102] Call Trace: [ 101.722473][ T5102] [ 101.725394][ T5102] dump_stack_lvl+0x188/0x250 [ 101.730048][ T5102] ? load_image+0x410/0x410 [ 101.734523][ T5102] ? show_regs_print_info+0x20/0x20 [ 101.739712][ T5102] ? print_circular_bug+0x12b/0x1a0 [ 101.745008][ T5102] check_noncircular+0x2f8/0x400 [ 101.749944][ T5102] ? look_up_lock_class+0x71/0x110 [ 101.755058][ T5102] ? print_deadlock_bug+0x5d0/0x5d0 [ 101.760236][ T5102] ? lockdep_lock+0xf1/0x1f0 [ 101.764806][ T5102] ? lock_release+0xb5/0x8a0 [ 101.769374][ T5102] ? mark_lock+0x94/0x320 [ 101.773682][ T5102] ? _find_first_zero_bit+0xd1/0xf0 [ 101.778871][ T5102] __lock_acquire+0x38f7/0x7d40 [ 101.783700][ T5102] ? deref_stack_reg+0xd0/0x120 [ 101.788540][ T5102] ? verify_lock_unused+0x140/0x140 [ 101.793745][ T5102] ? mark_lock+0x94/0x320 [ 101.798061][ T5102] ? __lock_acquire+0x13b3/0x7d40 [ 101.803074][ T5102] ? lockdep_lock+0xf1/0x1f0 [ 101.807674][ T5102] lock_acquire+0x19f/0x400 [ 101.812177][ T5102] ? __flush_work+0xfa/0x210 [ 101.816757][ T5102] ? read_lock_is_recursive+0x10/0x10 [ 101.822111][ T5102] __flush_work+0x116/0x210 [ 101.826593][ T5102] ? __flush_work+0xfa/0x210 [ 101.831159][ T5102] ? flush_work+0x20/0x20 [ 101.835466][ T5102] ? try_to_grab_pending+0xfb/0x820 [ 101.840639][ T5102] ? mark_lock+0x94/0x320 [ 101.844958][ T5102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.850918][ T5102] ? lock_chain_count+0x20/0x20 [ 101.855747][ T5102] ? mark_lock+0x94/0x320 [ 101.860057][ T5102] ? __cancel_work_timer+0x36a/0x560 [ 101.865443][ T5102] __cancel_work_timer+0x3f4/0x560 [ 101.870535][ T5102] ? cancel_work_sync+0x20/0x20 [ 101.875362][ T5102] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.880713][ T5102] ? lockdep_hardirqs_on+0x94/0x140 [ 101.885891][ T5102] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.891244][ T5102] ? _local_bh_enable+0xa0/0xa0 [ 101.896093][ T5102] smc_clcsock_release+0x5c/0xe0 [ 101.901009][ T5102] __smc_release+0x644/0x7b0 [ 101.905576][ T5102] smc_close_non_accepted+0xd1/0x1f0 [ 101.910846][ T5102] smc_close_active+0xae2/0xea0 [ 101.915680][ T5102] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 101.921290][ T5102] __smc_release+0x9c/0x7b0 [ 101.925788][ T5102] smc_release+0x2c1/0x520 [ 101.930181][ T5102] sock_close+0xbf/0x210 [ 101.934410][ T5102] ? sock_mmap+0x90/0x90 [ 101.938640][ T5102] __fput+0x212/0x8c0 [ 101.942608][ T5102] task_work_run+0x125/0x1a0 [ 101.947177][ T5102] exit_to_user_mode_loop+0x10f/0x130 [ 101.952531][ T5102] exit_to_user_mode_prepare+0xee/0x180 [ 101.958069][ T5102] syscall_exit_to_user_mode+0x16/0x40 [ 101.963515][ T5102] do_syscall_64+0x58/0xa0 [ 101.967926][ T5102] ? clear_bhb_loop+0x30/0x80 [ 101.972608][ T5102] ? clear_bhb_loop+0x30/0x80 [ 101.977269][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.983163][ T5102] RIP: 0033:0x7f7b01096559 [ 101.987564][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.007156][ T5102] RSP: 002b:00007f7aff2ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 102.015555][ T5102] RAX: 0000000000000000 RBX: 00007f7b0131cfa0 RCX: 00007f7b01096559 [ 102.023505][ T5102] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 102.031452][ T5102] RBP: 00007f7b0112db20 R08: 0000000000000000 R09: 0000000000000000 [ 102.039401][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.047349][ T5102] R13: 00007f7b0131d038 R14: 00007f7b0131cfa0 R15: 00007ffd75481c38 [ 102.055301][ T5102] [ 102.066622][ T5095] comedi comedi2: reset error (fatal) [ 102.080656][ T5110] bridge0: port 3(syz_tun) entered blocking state [ 102.089409][ T5110] bridge0: port 3(syz_tun) entered disabled state [ 102.097097][ T5110] device syz_tun entered promiscuous mode [ 102.111831][ T5110] bridge0: port 3(syz_tun) entered blocking state [ 102.118312][ T5110] bridge0: port 3(syz_tun) entered forwarding state