last executing test programs: 3.920445754s ago: executing program 1 (id=9229): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) 3.015952099s ago: executing program 1 (id=9253): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3a0c2dc2e2fc98226f1ffa65683e1a43196c042b9d3ac322f760", @ANYBLOB="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"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x2, 0x14}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) 2.963964436s ago: executing program 3 (id=9256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 2.943641s ago: executing program 2 (id=9257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x3d0, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a4, 0x3, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "dd68226ae4fd82b1c2c2453ba7d3d9633c9bb4c94be8315bc6bbf602839861424b5d7b6fc5aff835221928dd0b328a6af47f7dafbdea296d4454d516dcd1ff1912deb62ff4d4baf81ce25a2d9801883008396e87d0021cb9cb1fe8c278be269c82"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x94, 0x1, "c940bf945fe1b82ec87455fc4bf3c6ed161d9df8d254c60d08153748d5a6000f81b77dc054bd65221345a266b0124f3885d90f5af327d713283c96a8f1ec4f5c7835ace253a9e446ccda7df61991356df0616ac9cd3d1e3dc5fd6379f331a40959f53dfd4db716055a67e0d137e877f5ecd6b6926f202611bdf62ff31fdd4f4d414527ce071b4c736f1c7225e7d6296a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "844c7f2590f1618e26255e543f0847725eaffab01724da1642db858ef3d77e722c5008d14fab1d3e23ba343c776408f8654093fd7364c64f47986d737d2a6acd465a85e1f39adba3d87b256dbc2555741e1769058d02b13e04f65f654651bf38c17e2385ef9635e6f08a991dca0b34c13119e36b2ac7ca2e3b0a897add35cb2e5b747c571fc94f6775bb98ae6a894d325a7eb355aeedf6ca3a05e0a47d8706cdce1c9c82541e322cc1adcb3f546a1c825f22d6f33ce7d179f69d262edff906df8de355c7f56cfb4b6c2d98d7ab8c067eb48c385ff0ab79981e5b44a3583079aca467f3682ea70312a20c3d22be4bb52f62a082"}, @NFTA_DATA_VALUE={0x10, 0x1, "981693ec6f5b3a621630bf06"}, @NFTA_DATA_VALUE={0x62, 0x1, "6a9c5169f8b596da0070a79998ecafe6fae319d8c982541139c41fb056ea097c250029c386892daa183a2b3a6e72bd05ceddda6aa2f63e6edbb6800a00d922960261f17aa005dc8e4914c33f8f410a274919ad0a465d28bb0c7980c1c485"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x454}}, 0x0) 2.927136312s ago: executing program 4 (id=9258): socket$inet6(0xa, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f00000036c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 2.825681479s ago: executing program 3 (id=9259): r0 = socket(0x2, 0x6, 0x0) connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c0033008000000008021100000108021100000050505050505000000000"], 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) openat$cgroup_ro(r11, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r12, 0x0) 2.796123573s ago: executing program 2 (id=9260): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500000010040000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000ac"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.707123388s ago: executing program 0 (id=9262): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000100400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000ac"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.686207121s ago: executing program 4 (id=9263): clock_gettime(0x2, &(0x7f0000000280)) 2.648179467s ago: executing program 2 (id=9264): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) 2.638182189s ago: executing program 4 (id=9265): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x9, 0xc, 0x59b, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe48, 0x1}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x814) sendmsg$802154_raw(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)="3bfd946afb88dac6cd897dd0a9868f284156759537c9927ad6c11e8f752542cd1619a4d2628100afaebae70d2b35c46e7fc30d2d62ba4a2530b651a6af4539e198b6b014204622fdbc94b8dc77d7fa93ec6dc50835061ef56d218508c999b8b3c5336dbc69dc2da5712953f58c2e9bf352ffb6f2edda6029e90b11c11bbf8a4540e8095c4effcaa127b854d93d5fc782d69ef600fe0e06ffd4ccec8bd60df7b703cd8d7656f618f1fbc4f050c4082403708e4059d3ae7f250a66929811da4cc998bf1c1c58321d40", 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x40}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={0x24, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) 2.624154301s ago: executing program 0 (id=9266): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="567eec5677d3", 'veth1_to_hsr\x00'}}, 0x1e) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x16ec7077c8c871d9}, 0x38) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) close(r1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x4, "f38dcb55cb5ae8aa42ee1acd1126da324e87e81c"}]}}}}}}}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r12}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x2000) 2.608829453s ago: executing program 3 (id=9267): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.511368879s ago: executing program 3 (id=9268): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x191, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xb2, 0x53}}, @measure_req={0x26, 0x92, {0xe0, 0xa, 0x81, "fd3cbda0e777d318bdd8de4f6e3108dd5a8a1687aac8c578d5dd14d3473a076569ba501e0f567aaa158f49dfd7c8d7b81f09ef6b51029547340513a0cffc70fc3da7df0083c4cd0365be70e9c2e2325b354f18828f2a0131d01ae423ff35a30f3548192a97273efabcfebc4558dd98faee68081006d8cc672408a66c6d73c944cd11c8b61edc6467b39c30a8e01e85"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0x2f, 0x4ff}}, @supported_rates={0x1, 0x2, [{0x36}, {0x30}]}, @fast_bss_trans={0x37, 0x9b, {0x0, 0x4, "fdfeb6af1f4ded79c197e99f40e88307", "2fdf71217a8c7dcc615b1d749f5d5cff9aa42169a6eafd1229ad9bb76cc5134e", "8f20073897868b9109b4cbbaf3eaf58d510d2b48a87a85aca783a59948e12b2b", [{0x4, 0x3, "7ddaec"}, {0x4, 0x18, "c7eb832d7175cc025bed82d30d144187a7458a51cba31816"}, {0x3, 0x18, "03e26030ca01c93525f719fd0375dd7e886d4676e578e28c"}, {0x4, 0xe, "7af4a8523720307f8d1af1d9fa79"}]}}, @tim={0x5, 0x17, {0x9, 0xe8, 0xc5, "72414165dd116b630103cfe3763f1c1d8478c41c"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @val, @void, @val="0dc20f839892ee7df9997c6761e53167"}}, @measure_req={0x26, 0x3, {0x4, 0x0, 0x2}}, @link_id={0x65, 0x12, {@random="fd0ee84e1f38", @device_a, @device_b}}]}, @NL80211_ATTR_SSID={0xb, 0x34, @random="d67d51453bbbe5"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x18, 0x13, 0x81f, 0x0, 0x0, "", [@typed={0x8, 0x7f, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 2.510583249s ago: executing program 4 (id=9269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 2.498985621s ago: executing program 0 (id=9270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x3d4, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a8, 0x3, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "dd68226ae4fd82b1c2c2453ba7d3d9633c9bb4c94be8315bc6bbf602839861424b5d7b6fc5aff835221928dd0b328a6af47f7dafbdea296d4454d516dcd1ff1912deb62ff4d4baf81ce25a2d9801883008396e87d0021cb9cb1fe8c278be269c82"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x94, 0x1, "c940bf945fe1b82ec87455fc4bf3c6ed161d9df8d254c60d08153748d5a6000f81b77dc054bd65221345a266b0124f3885d90f5af327d713283c96a8f1ec4f5c7835ace253a9e446ccda7df61991356df0616ac9cd3d1e3dc5fd6379f331a40959f53dfd4db716055a67e0d137e877f5ecd6b6926f202611bdf62ff31fdd4f4d414527ce071b4c736f1c7225e7d6296a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "844c7f2590f1618e26255e543f0847725eaffab01724da1642db858ef3d77e722c5008d14fab1d3e23ba343c776408f8654093fd7364c64f47986d737d2a6acd465a85e1f39adba3d87b256dbc2555741e1769058d02b13e04f65f654651bf38c17e2385ef9635e6f08a991dca0b34c13119e36b2ac7ca2e3b0a897add35cb2e5b747c571fc94f6775bb98ae6a894d325a7eb355aeedf6ca3a05e0a47d8706cdce1c9c82541e322cc1adcb3f546a1c825f22d6f33ce7d179f69d262edff906df8de355c7f56cfb4b6c2d98d7ab8c067eb48c385ff0ab79981e5b44a3583079aca467f3682ea70312a20c3d22be4bb52f62a0828a77"}, @NFTA_DATA_VALUE={0x10, 0x1, "981693ec6f5b3a621630bf06"}, @NFTA_DATA_VALUE={0x62, 0x1, "6a9c5169f8b596da0070a79998ecafe6fae319d8c982541139c41fb056ea097c250029c386892daa183a2b3a6e72bd05ceddda6aa2f63e6edbb6800a00d922960261f17aa005dc8e4914c33f8f410a274919ad0a465d28bb0c7980c1c485"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x458}}, 0x0) 2.490026642s ago: executing program 1 (id=9271): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000001004"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9c", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.423208203s ago: executing program 1 (id=9272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.396870007s ago: executing program 3 (id=9273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e40)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) 2.396336737s ago: executing program 4 (id=9274): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500000010040000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000ac"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.359490303s ago: executing program 0 (id=9275): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 2.354204494s ago: executing program 1 (id=9276): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000100400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000ac"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2.337804776s ago: executing program 3 (id=9277): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 2.309839221s ago: executing program 4 (id=9278): r0 = socket(0x2, 0x6, 0x0) connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c0033008000000008021100000108021100000050505050505000000000"], 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) openat$cgroup_ro(r11, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r12, 0x0) 2.266841378s ago: executing program 0 (id=9279): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.248063631s ago: executing program 1 (id=9280): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="567eec5677d3", 'veth1_to_hsr\x00'}}, 0x1e) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x16ec7077c8c871d9}, 0x38) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) close(r1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x4, "f38dcb55cb5ae8aa42ee1acd1126da324e87e81c"}]}}}}}}}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r12}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x2000) 2.186897551s ago: executing program 0 (id=9281): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3a0c2dc2e2fc98226f1ffa65683e1a43196c042b9d3ac322f760", @ANYBLOB="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"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x2, 0x14}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) 949.461508ms ago: executing program 2 (id=9282): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000001004"], 0x80}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9c", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 879.058809ms ago: executing program 2 (id=9283): msgget$private(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="dd85801e280142d80885d3dddebc7a08cc1265a9df7da852f1dfd56877a913e476e7f783888ad34d681f0dc2a69831619acd87b4e262cbf69628b32b041d559f423feb673203f6ec0d27708cb3222942b2aeb68d4dc7057e1cda7f82e8a5e766913ce3ff8ca583f20f8e0e79754e333c8f7efe01bd610d1c535f7cb2865720d14e2b6d5aee"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 0s ago: executing program 2 (id=9284): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1a8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x178, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xb2, 0x53}}, @measure_req={0x26, 0x92, {0xe0, 0xa, 0x81, "fd3cbda0e777d318bdd8de4f6e3108dd5a8a1687aac8c578d5dd14d3473a076569ba501e0f567aaa158f49dfd7c8d7b81f09ef6b51029547340513a0cffc70fc3da7df0083c4cd0365be70e9c2e2325b354f18828f2a0131d01ae423ff35a30f3548192a97273efabcfebc4558dd98faee68081006d8cc672408a66c6d73c944cd11c8b61edc6467b39c30a8e01e85"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0x2f, 0x4ff}}, @supported_rates={0x1, 0x2, [{0x36}, {0x30}]}, @fast_bss_trans={0x37, 0x9b, {0x0, 0x4, "fdfeb6af1f4ded79c197e99f40e88307", "2fdf71217a8c7dcc615b1d749f5d5cff9aa42169a6eafd1229ad9bb76cc5134e", "8f20073897868b9109b4cbbaf3eaf58d510d2b48a87a85aca783a59948e12b2b", [{0x4, 0x3, "7ddaec"}, {0x4, 0x18, "c7eb832d7175cc025bed82d30d144187a7458a51cba31816"}, {0x3, 0x18, "03e26030ca01c93525f719fd0375dd7e886d4676e578e28c"}, {0x4, 0xe, "7af4a8523720307f8d1af1d9fa79"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @val=0x31, @void, @val="0dc20f839892ee7df9997c6761e53167"}}, @measure_req={0x26, 0x3, {0x4, 0x0, 0x2}}, @link_id={0x65, 0x12, {@random="fd0ee84e1f38", @device_a, @device_b}}]}, @NL80211_ATTR_SSID={0xb, 0x34, @random="d67d51453bbbe5"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x18, 0x13, 0x81f, 0x0, 0x0, "", [@typed={0x8, 0x7f, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): eout [ 390.859960][T19422] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 390.931063][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 390.982920][ T4241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.988695][ T4241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.991855][ T4241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.994525][ T4241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.007590][ T4241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 391.014130][ T4241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.163236][T14736] bond0: (slave syz_tun): Releasing backup interface [ 391.336378][T19458] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 391.394803][T19431] chnl_net:caif_netlink_parms(): no params data found [ 391.572679][T19431] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.574860][T19431] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.578003][T19431] device bridge_slave_0 entered promiscuous mode [ 391.585500][T19431] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.589543][T19431] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.595713][T19431] device bridge_slave_1 entered promiscuous mode [ 391.648534][T19431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.663206][T19431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.718912][T19431] team0: Port device team_slave_0 added [ 391.730845][T19431] team0: Port device team_slave_1 added [ 392.039984][ T460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.069677][T19431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.071494][T19431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.086157][T19431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.104297][T19431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.114615][T19431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.145846][T19431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.163600][ T460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.178049][T19515] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 392.251887][ T460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.417829][T19431] device hsr_slave_0 entered promiscuous mode [ 392.455845][T19431] device hsr_slave_1 entered promiscuous mode [ 392.514541][T19431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.524652][T19431] Cannot create hsr debugfs directory [ 392.594695][ T460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.694170][T19542] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 392.866682][T19552] device syzkaller0 entered promiscuous mode [ 393.095355][ T4241] Bluetooth: hci5: command tx timeout [ 393.211268][T19573] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 394.030761][T19579] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6244'. [ 394.053431][T19579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.629168][ T460] device gretap0 left promiscuous mode [ 394.630791][ T460] bridge0: port 4(gretap0) entered disabled state [ 394.774866][T19431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.809787][T19634] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6258'. [ 394.844829][T19431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.846019][T19634] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.877461][T19431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.897345][T19431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.125544][ T4241] Bluetooth: hci5: command tx timeout [ 395.297888][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6270'. [ 395.306534][T19431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.336208][T19664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6270'. [ 395.460563][T19431] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.570077][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.572730][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.658558][ T460] device hsr_slave_0 left promiscuous mode [ 395.690078][ T460] device hsr_slave_1 left promiscuous mode [ 395.756501][ T460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.758679][ T460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.763354][ T460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.770838][ T460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.780950][ T460] bridge0: port 3(dummy0) entered disabled state [ 395.826260][ T460] device bridge_slave_1 left promiscuous mode [ 395.828057][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.876387][ T460] device bridge_slave_0 left promiscuous mode [ 395.878393][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.919732][T19687] loop3: detected capacity change from 0 to 32768 [ 395.934671][T19687] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.6275 (19687) [ 395.957151][T19687] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 395.959832][T19687] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 395.962256][T19687] BTRFS info (device loop3): using free space tree [ 396.005814][ T460] device veth1_macvtap left promiscuous mode [ 396.007538][ T460] device veth0_macvtap left promiscuous mode [ 396.009234][ T460] device veth1_vlan left promiscuous mode [ 396.010836][ T460] device veth0_vlan left promiscuous mode [ 396.109433][T19687] BTRFS info (device loop3): enabling ssd optimizations [ 396.138981][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 396.458413][ T460] team0 (unregistering): Port device team_slave_1 removed [ 396.473754][ T460] team0 (unregistering): Port device team_slave_0 removed [ 396.503573][ T460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.571751][ T460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.700553][ T460] bond0 (unregistering): Released all slaves [ 396.798021][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.800730][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.803231][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.805140][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.819155][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.828887][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.832602][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.834581][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.873257][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.875922][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.914282][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.983339][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.987124][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.990081][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.996724][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.072933][T19431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.079689][T19431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.088519][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.091040][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.093583][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.103160][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.106445][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.124527][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.205594][ T4235] Bluetooth: hci5: command tx timeout [ 397.399527][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.401709][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.420567][T19431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.462533][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.465580][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.550528][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.553180][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.558140][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.563855][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.589108][T19736] loop2: detected capacity change from 0 to 32768 [ 397.602084][T19736] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6287 (19736) [ 397.613558][T19736] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 397.622362][T19736] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 397.624950][T19736] BTRFS info (device loop2): using free space tree [ 397.716256][T19431] device veth0_vlan entered promiscuous mode [ 397.729870][T19431] device veth1_vlan entered promiscuous mode [ 397.810012][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.812594][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.841687][T19431] device veth0_macvtap entered promiscuous mode [ 397.873836][T19736] BTRFS info (device loop2): enabling ssd optimizations [ 397.883094][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.886188][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.888965][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.892736][T19431] device veth1_macvtap entered promiscuous mode [ 397.973488][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.997706][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.000352][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.003079][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.035338][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.048431][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.058567][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.068664][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.071338][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.085400][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.088005][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.104656][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.107379][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.121410][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.124056][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.133648][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.136734][T16118] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 398.153644][T19431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.164829][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.171752][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.184741][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.187765][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.190354][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.193168][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.197858][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.206055][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.208768][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.213906][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.219926][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.226004][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.230943][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.256546][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.259184][T19431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.272364][T19431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.287152][T19431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.299107][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.306005][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.311022][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.319226][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.345021][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.360649][T19431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.362908][T19431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.365148][T19431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.375761][T19431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.615120][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.633632][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.781677][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.790979][ T4651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.793308][ T4651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.838275][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.285543][ T4241] Bluetooth: hci5: command tx timeout [ 399.555875][T19812] loop1: detected capacity change from 0 to 32768 [ 399.581210][T19812] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6312 (19812) [ 399.611280][T19812] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 399.614096][T19812] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 399.616692][T19812] BTRFS info (device loop1): using free space tree [ 399.761278][T19812] BTRFS info (device loop1): enabling ssd optimizations [ 399.880688][T12747] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 401.034473][T19902] loop3: detected capacity change from 0 to 32768 [ 401.042364][T19902] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.6343 (19902) [ 401.097611][T19902] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 401.100364][T19902] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 401.102779][T19902] BTRFS info (device loop3): using free space tree [ 401.265970][T19902] BTRFS info (device loop3): enabling ssd optimizations [ 401.300268][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 401.334986][T19973] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6369'. [ 401.358541][T19973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.706327][T20003] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6383'. [ 401.710083][T20003] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.084888][T20024] loop4: detected capacity change from 0 to 512 [ 402.134836][T20024] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.6391: invalid block [ 402.179191][T20024] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.6391: invalid indirect mapped block 4294967295 (level 1) [ 402.228942][T20024] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.6391: invalid indirect mapped block 4294967295 (level 1) [ 402.278839][T20024] EXT4-fs (loop4): 2 truncates cleaned up [ 402.292701][T20024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 402.358776][T15370] EXT4-fs (loop4): unmounting filesystem. [ 402.401619][T19999] loop3: detected capacity change from 0 to 32768 [ 402.443117][T20040] loop2: detected capacity change from 0 to 2048 [ 402.464127][T19999] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.6380 (19999) [ 402.475334][T19999] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 402.488532][T19999] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 402.505379][T19999] BTRFS info (device loop3): using free space tree [ 402.505483][T20040] loop2: p2 < > [ 402.759933][T19999] BTRFS info (device loop3): enabling ssd optimizations [ 402.857949][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 403.234557][T20103] loop0: detected capacity change from 0 to 2048 [ 403.303565][T20103] loop0: p2 < > [ 403.406593][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 403.982458][ T8676] udevd[8676]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 404.153017][T20149] loop0: detected capacity change from 0 to 2048 [ 404.258041][T20149] loop0: p2 < > [ 404.419198][ T8768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.484622][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 404.576976][ T27] audit: type=1326 audit(404.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20172 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4342468 code=0x7ffc0000 [ 404.585178][ T27] audit: type=1326 audit(404.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20172 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffb4342468 code=0x7ffc0000 [ 404.621805][ T27] audit: type=1326 audit(404.590:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20172 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4342468 code=0x7ffc0000 [ 404.652326][ T27] audit: type=1326 audit(404.630:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20172 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4342468 code=0x7ffc0000 [ 404.683505][ T27] audit: type=1326 audit(404.660:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20178 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb436c498 code=0x7ffc0000 [ 404.906664][ T27] audit: type=1326 audit(404.860:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20178 comm="syz.1.6443" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffb4342468 code=0x7ffc0000 [ 405.499636][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6458'. [ 405.960411][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6473'. [ 405.973685][T20260] loop2: detected capacity change from 0 to 256 [ 406.037342][T20256] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 407.010784][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 407.037337][T20323] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 408.337723][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6545'. [ 408.356844][T20421] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 409.839349][T20529] loop3: detected capacity change from 0 to 2048 [ 409.892816][T20529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 411.095374][T20537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 411.105364][T20537] EXT4-fs (loop3): Remounting filesystem read-only [ 411.192740][T18960] EXT4-fs (loop3): unmounting filesystem. [ 418.998437][T15117] device hsr_slave_0 left promiscuous mode [ 419.037668][T15117] device hsr_slave_1 left promiscuous mode [ 419.135695][T15117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.137794][T15117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.187776][T15117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.189921][T15117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.198176][T15117] device bridge_slave_1 left promiscuous mode [ 419.199874][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.227880][T15117] device bridge_slave_0 left promiscuous mode [ 419.229614][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.395458][T15117] device veth1_macvtap left promiscuous mode [ 419.397179][T15117] device veth0_macvtap left promiscuous mode [ 419.398848][T15117] device veth1_vlan left promiscuous mode [ 419.400431][T15117] device veth0_vlan left promiscuous mode [ 419.439567][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6644'. [ 420.116108][T15117] team0 (unregistering): Port device team_slave_1 removed [ 420.134637][T15117] team0 (unregistering): Port device team_slave_0 removed [ 420.706593][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6660'. [ 420.897168][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'. [ 421.460957][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6682'. [ 422.106136][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6697'. [ 423.791234][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6744'. [ 423.826470][T20884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6744'. [ 423.834055][T20856] loop0: detected capacity change from 0 to 32768 [ 423.840492][T20856] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.6731 (20856) [ 423.851787][T20856] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 423.858488][T20856] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 423.863243][T20856] BTRFS info (device loop0): using free space tree [ 424.117653][T20856] BTRFS info (device loop0): enabling ssd optimizations [ 424.186044][T19431] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 424.718024][T20943] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6762'. [ 424.749039][T20943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.889457][T20953] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 424.965465][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 425.220275][T20973] device syzkaller0 entered promiscuous mode [ 425.404556][T20979] netlink: 'syz.1.6778': attribute type 1 has an invalid length. [ 425.843611][T21004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.846256][T21004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.886946][T21002] device syzkaller0 entered promiscuous mode [ 427.446065][T21103] syz.4.6835 sent an empty control message without MSG_MORE. [ 427.475953][T21105] netlink: 'syz.2.6838': attribute type 1 has an invalid length. [ 427.674591][T21116] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6842'. [ 427.681097][T21116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.854663][T21121] device syzkaller0 entered promiscuous mode [ 428.539343][T21153] device syzkaller0 entered promiscuous mode [ 428.890701][T21151] loop0: detected capacity change from 0 to 40427 [ 428.916048][T21151] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 428.924368][T21151] F2FS-fs (loop0): invalid crc value [ 428.934169][T21151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 428.963073][T21151] F2FS-fs (loop0): recover fsync data on readonly fs [ 428.971663][T21151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 429.360987][T21190] device syzkaller0 entered promiscuous mode [ 430.108395][T21203] loop1: detected capacity change from 0 to 40427 [ 430.120158][T21203] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 430.131299][T21203] F2FS-fs (loop1): invalid crc value [ 430.138487][T21203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 430.161345][T21203] F2FS-fs (loop1): recover fsync data on readonly fs [ 430.163430][T21234] device syzkaller0 entered promiscuous mode [ 430.166836][T21203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 430.318058][T21240] loop4: detected capacity change from 0 to 4096 [ 430.332969][T21240] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 430.384224][T21240] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 430.386428][T21240] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 430.452890][ T55] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 430.456265][T15370] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 430.608939][T21255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.611292][T21255] IPv6: NLM_F_CREATE should be set when creating new route [ 432.116563][T21297] loop2: detected capacity change from 0 to 512 [ 432.118974][T21297] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.140057][T21297] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 432.145447][T21297] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 432.148147][T21297] EXT4-fs (loop2): group descriptors corrupted! [ 432.207708][T21293] loop1: detected capacity change from 0 to 4096 [ 432.220590][T21293] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 432.284721][T21293] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 432.293727][T21293] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 432.380186][ T33] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 432.397841][T12747] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 432.624491][T21325] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6924'. [ 432.641417][T21325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.986087][T21341] loop1: detected capacity change from 0 to 4096 [ 432.996684][T21341] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 433.044408][T21317] device syzkaller0 entered promiscuous mode [ 433.071453][T21341] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 433.073518][T21341] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 433.135813][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.137553][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.178227][ T33] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 433.180755][T12747] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 433.557136][T21374] loop4: detected capacity change from 0 to 512 [ 433.605830][ T8768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 433.612243][T21377] binder: 21377:21375 cannot find target node [ 433.623962][T21377] binder: 21375:21377 transaction call to 0:0 failed 5/29189/-22, size 0-0 line 3056 [ 433.631878][ T4386] binder: undelivered TRANSACTION_ERROR: 29189 [ 436.615397][T21465] sctp: [Deprecated]: syz.2.6981 (pid 21465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.615397][T21465] Use struct sctp_sack_info instead [ 436.921876][ T4302] device hsr_slave_0 left promiscuous mode [ 436.986632][ T4302] device hsr_slave_1 left promiscuous mode [ 436.990699][T21498] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6996'. [ 437.035443][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.037901][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.045742][T21502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.052151][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.054300][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.068956][ T4302] device bridge_slave_1 left promiscuous mode [ 437.075132][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.133130][ T4302] device bridge_slave_0 left promiscuous mode [ 437.134950][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.255621][ T4302] device veth1_macvtap left promiscuous mode [ 437.257315][ T4302] device veth0_macvtap left promiscuous mode [ 437.259963][ T4302] device veth1_vlan left promiscuous mode [ 437.261647][ T4302] device veth0_vlan left promiscuous mode [ 437.476579][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 437.486638][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 437.494501][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.542023][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.703162][ T4302] bond0 (unregistering): Released all slaves [ 437.861358][T21515] device syzkaller0 entered promiscuous mode [ 438.228846][T21566] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7020'. [ 438.234743][T21566] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.497153][T21574] device syzkaller0 entered promiscuous mode [ 438.854586][T21599] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7035'. [ 438.867183][T21599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 439.205619][T21616] ptrace attach of "./syz-executor exec"[16118] was attempted by "./syz-executor exec"[21616] [ 439.387860][T21629] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7048'. [ 439.390774][T21613] device syzkaller0 entered promiscuous mode [ 439.402481][T21629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.268793][T21665] device syzkaller0 entered promiscuous mode [ 440.461339][T21675] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7065'. [ 440.476600][T21675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.399143][T21705] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7080'. [ 441.426177][T21705] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.549152][T21737] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7094'. [ 442.559679][T21737] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.564107][T21818] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7131'. [ 445.574746][T21818] xt_TPROXY: Can be used only with -p tcp or -p udp [ 447.624795][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7153'. [ 447.670301][T21869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.680215][T21869] bond0: (slave bond1): Enslaving as an active interface with an up link [ 448.236845][T21884] netlink: 'syz.4.7159': attribute type 1 has an invalid length. [ 448.445778][T21891] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7162'. [ 448.457439][T21891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.768808][T21909] netlink: 'syz.2.7169': attribute type 10 has an invalid length. [ 449.771041][T21909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7169'. [ 449.774155][T21909] batman_adv: batadv0: Adding interface: vlan1 [ 449.785390][T21909] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.822200][T21909] batman_adv: batadv0: Interface activated: vlan1 [ 449.874547][T21889] loop4: detected capacity change from 0 to 32768 [ 449.910434][T21889] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7161 (21889) [ 449.937854][T21889] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 449.943014][T21889] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 449.946379][T21889] BTRFS info (device loop4): using free space tree [ 449.997999][T21917] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 450.117996][T21926] team0 (unregistering): Port device team_slave_0 removed [ 450.144610][T21926] team0 (unregistering): Port device team_slave_1 removed [ 450.225039][T21889] BTRFS info (device loop4): enabling ssd optimizations [ 450.293294][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 450.558416][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7185'. [ 450.562825][T21960] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 450.582718][T21962] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7186'. [ 450.602741][T21962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.730794][T21976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.735850][T21976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.148074][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7200'. [ 451.162915][T21997] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.186009][T21970] loop4: detected capacity change from 0 to 32768 [ 451.194778][T21970] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7190 (21970) [ 451.214664][T21970] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 451.218814][T21970] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 451.232861][T21970] BTRFS info (device loop4): using free space tree [ 451.264092][T22003] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7202'. [ 451.287757][T22003] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.463761][T21970] BTRFS info (device loop4): enabling ssd optimizations [ 452.253567][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 452.422428][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7212'. [ 452.437401][T22045] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 452.603025][T22056] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7217'. [ 452.608130][T22047] team0 (unregistering): Port device team_slave_0 removed [ 452.644849][T22047] team0 (unregistering): Port device team_slave_1 removed [ 452.746890][T22062] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.836465][ T4235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.840754][ T4235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.916397][ T4235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.019419][ T4235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.030717][ T4235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 453.036802][ T4235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.746947][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7228'. [ 453.823233][T22091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7228'. [ 453.833365][T22093] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7231'. [ 453.889560][T22096] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.968058][T15117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.849460][T22065] chnl_net:caif_netlink_parms(): no params data found [ 454.871811][T15117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.935881][T15117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.072912][T15117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.111077][T22065] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.116634][T22065] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.124872][T22065] device bridge_slave_0 entered promiscuous mode [ 455.125592][ T4235] Bluetooth: hci3: command tx timeout [ 455.140150][T22065] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.144647][T22065] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.151950][T22065] device bridge_slave_1 entered promiscuous mode [ 455.166301][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7243'. [ 455.221506][T22065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.229224][T22065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.249787][T22138] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7245'. [ 455.259805][T22065] team0: Port device team_slave_0 added [ 455.263439][T22065] team0: Port device team_slave_1 added [ 455.276781][T22065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.278615][T22065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.285813][T22065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.290698][T22065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.292731][T22065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.300060][T22065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.391000][T22141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 455.412157][T22065] device hsr_slave_0 entered promiscuous mode [ 455.554910][T22065] device hsr_slave_1 entered promiscuous mode [ 455.608692][T22065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.652089][T22065] Cannot create hsr debugfs directory [ 456.540843][ T4235] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 457.206826][ T4235] Bluetooth: hci3: command tx timeout [ 457.626763][T22197] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7261'. [ 457.630422][T22197] xt_TPROXY: Can be used only with -p tcp or -p udp [ 457.788178][T22171] loop3: detected capacity change from 0 to 32768 [ 457.802211][T22065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.819124][T22171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7254 (22171) [ 457.834446][T22171] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 457.844832][T22171] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 457.847354][T22065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.856761][T22171] BTRFS info (device loop3): using free space tree [ 457.870431][T22065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.906630][T22065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.994203][T22171] BTRFS info (device loop3): enabling ssd optimizations [ 458.062882][T18960] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.163580][T22236] device syzkaller0 entered promiscuous mode [ 458.517298][T22065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.540679][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7272'. [ 458.576626][T22229] loop2: detected capacity change from 0 to 32768 [ 458.579445][T22229] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.7267 (22229) [ 458.588254][T15117] device hsr_slave_0 left promiscuous mode [ 458.596465][T22229] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 458.599277][T22229] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 458.601717][T22229] BTRFS info (device loop2): using free space tree [ 458.635785][T15117] device hsr_slave_1 left promiscuous mode [ 458.695612][T15117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.697709][T15117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.702464][T15117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.708258][T15117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.716726][T15117] device bridge_slave_1 left promiscuous mode [ 458.721830][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.735682][T22229] BTRFS info (device loop2): enabling ssd optimizations [ 458.756557][T15117] device bridge_slave_0 left promiscuous mode [ 458.758237][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.780469][T16118] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 458.928753][T15117] device veth1_macvtap left promiscuous mode [ 458.930488][T15117] device veth0_macvtap left promiscuous mode [ 458.932159][T15117] device veth1_vlan left promiscuous mode [ 458.933722][T15117] device veth0_vlan left promiscuous mode [ 458.998563][T22285] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7274'. [ 459.055786][T22288] xt_TPROXY: Can be used only with -p tcp or -p udp [ 459.253869][T15117] team0 (unregistering): Port device team_slave_1 removed [ 459.264035][T15117] team0 (unregistering): Port device team_slave_0 removed [ 459.272076][T15117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.285470][ T4235] Bluetooth: hci3: command tx timeout [ 459.312374][T15117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.336596][T22290] loop3: detected capacity change from 0 to 32768 [ 459.339753][T22290] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7278 (22290) [ 459.364614][T22290] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.368768][T22290] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 459.371068][T22290] BTRFS info (device loop3): using free space tree [ 459.435013][T22290] BTRFS info (device loop3): enabling ssd optimizations [ 459.511913][T18960] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.530661][T15117] bond0 (unregistering): Released all slaves [ 459.629988][T22065] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.697942][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.700335][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.737009][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.739850][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.742320][T19263] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.744196][T19263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.759264][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.761958][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.769432][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.771302][T19263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.773652][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.786914][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.790094][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.793571][T22319] loop4: detected capacity change from 0 to 512 [ 459.796549][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.799129][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.803990][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.813022][T22065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.818681][T22065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.823433][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.826361][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.829023][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.831955][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.836828][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.839332][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.846666][T22319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 459.856787][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.924510][T15370] EXT4-fs (loop4): unmounting filesystem. [ 460.085701][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.087984][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.100282][T22065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.147676][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.150430][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.176229][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7289'. [ 460.190634][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.193767][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.199138][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.206323][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.218267][T22065] device veth0_vlan entered promiscuous mode [ 460.234395][T22065] device veth1_vlan entered promiscuous mode [ 460.305997][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.308507][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.310936][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.313447][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.348844][T22065] device veth0_macvtap entered promiscuous mode [ 460.353547][T22065] device veth1_macvtap entered promiscuous mode [ 460.383219][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.387959][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.390545][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.393242][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.412072][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.414767][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.440136][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.443313][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.452301][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.454914][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.465380][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.468124][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.486612][T22065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.491163][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.504290][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.517501][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.520387][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.523036][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.543780][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.547744][T22326] loop2: detected capacity change from 0 to 32768 [ 460.549567][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.565310][ T4246] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 460.567703][ T4246] Bluetooth: hci4: Injecting HCI hardware error event [ 460.570930][ T4235] Bluetooth: hci4: hardware error 0x00 [ 460.578047][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.578790][T22326] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.7283 (22326) [ 460.580581][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.593747][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.596931][T22065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.599860][T22065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.603905][T22065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.617234][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.621131][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.623723][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.631066][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.638728][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.641801][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.667271][T22326] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 460.670129][T22326] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 460.672571][T22326] BTRFS info (device loop2): using free space tree [ 460.686430][T22065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.688807][T22065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.691106][T22065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.693405][T22065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.849007][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7301'. [ 460.853758][T22386] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 460.876267][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.880109][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.889508][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.912179][T22326] BTRFS info (device loop2): enabling ssd optimizations [ 460.963785][T21284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.969104][T21284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.021497][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.057898][T16118] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 461.365606][ T4246] Bluetooth: hci3: command tx timeout [ 461.446272][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7314'. [ 461.451723][T22428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.454200][T22428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.464098][T22426] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 461.692709][T22440] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7321'. [ 461.700623][T22440] xt_TPROXY: Can be used only with -p tcp or -p udp [ 462.171875][T22431] loop4: detected capacity change from 0 to 32768 [ 462.212212][T22431] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7317 (22431) [ 462.241256][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7330'. [ 462.250594][T22431] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 462.253454][T22431] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 462.283550][T22431] BTRFS info (device loop4): using free space tree [ 462.437070][T22479] loop3: detected capacity change from 0 to 1024 [ 462.612426][T22431] BTRFS info (device loop4): enabling ssd optimizations [ 462.620596][ T8768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.704274][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 462.806374][ T4235] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 462.982376][T22508] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7343'. [ 463.002395][T22508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.229418][T22485] loop2: detected capacity change from 0 to 32768 [ 463.262308][T22485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7338 (22485) [ 463.275875][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'. [ 463.285810][T22485] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.295749][T22514] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.299206][T22485] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 463.301549][T22485] BTRFS info (device loop2): using free space tree [ 463.517844][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7353'. [ 463.575902][T22545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7353'. [ 463.613132][T22485] BTRFS info (device loop2): enabling ssd optimizations [ 463.706219][T22554] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7356'. [ 463.742004][T22554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.786521][T16118] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.913098][T22535] loop3: detected capacity change from 0 to 32768 [ 463.920538][T22535] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7351 (22535) [ 463.936751][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7360'. [ 463.982641][T22535] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 463.985702][T22535] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 463.988255][T22535] BTRFS info (device loop3): using free space tree [ 464.051131][T22571] loop1: detected capacity change from 0 to 512 [ 464.152231][T22571] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.7362: bad orphan inode 17 [ 464.162622][T22571] ext4_test_bit(bit=16, block=4) = 1 [ 464.164044][T22571] is_bad_inode(inode)=0 [ 464.172781][T22571] NEXT_ORPHAN(inode)=0 [ 464.173958][T22571] max_ino=32 [ 464.174765][T22571] i_nlink=1 [ 464.180828][T22571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 464.235421][T12747] EXT4-fs (loop1): unmounting filesystem. [ 464.304296][T22535] BTRFS info (device loop3): enabling ssd optimizations [ 464.358229][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7369'. [ 464.401445][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 464.405952][T22606] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7369'. [ 464.642834][T22611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7373'. [ 464.806853][T22618] device syzkaller0 entered promiscuous mode [ 465.042562][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7384'. [ 465.461934][T22660] device syzkaller0 entered promiscuous mode [ 465.473250][T22663] tipc: Enabling of bearer rejected, media not registered [ 465.542976][T22664] loop2: detected capacity change from 0 to 512 [ 465.600014][ T8676] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.053935][T22695] device syzkaller0 entered promiscuous mode [ 466.497124][T22733] device syzkaller0 entered promiscuous mode [ 467.027691][T22773] device syzkaller0 entered promiscuous mode [ 467.418348][T22810] device syzkaller0 entered promiscuous mode [ 468.016238][T22844] __nla_validate_parse: 13 callbacks suppressed [ 468.016254][T22844] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7473'. [ 468.044195][T22849] device syzkaller0 entered promiscuous mode [ 468.389809][T22878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7489'. [ 468.425841][T22878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7489'. [ 468.631129][T22895] device syzkaller0 entered promiscuous mode [ 468.741286][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7503'. [ 468.780071][T22908] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7503'. [ 469.121172][T22934] device syzkaller0 entered promiscuous mode [ 469.145419][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7519'. [ 469.202570][T22944] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7519'. [ 469.326594][T22949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7522'. [ 469.532207][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'. [ 469.543606][T22969] device syzkaller0 entered promiscuous mode [ 469.585533][T22975] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7533'. [ 469.738530][T22986] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 470.000759][T23010] device syzkaller0 entered promiscuous mode [ 470.116099][T23016] netlink: 'syz.2.7550': attribute type 10 has an invalid length. [ 470.120252][T23016] bridge0: port 3(batadv0) entered disabled state [ 470.122234][T23016] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.125688][T23016] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.149622][T23016] bridge0: port 3(batadv0) entered blocking state [ 470.151561][T23016] bridge0: port 3(batadv0) entered forwarding state [ 470.153539][T23016] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.155430][T23016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.157396][T23016] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.159307][T23016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.175140][T23016] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 470.602801][T23046] device syzkaller0 entered promiscuous mode [ 470.693224][T23055] netlink: 'syz.1.7565': attribute type 10 has an invalid length. [ 470.699147][T23055] bridge0: port 4(hsr0) entered disabled state [ 470.700939][T23055] bridge0: port 3(dummy0) entered disabled state [ 470.702659][T23055] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.704772][T23055] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.736689][T23055] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.741038][T23055] bridge0: port 4(hsr0) entered blocking state [ 470.742825][T23055] bridge0: port 4(hsr0) entered forwarding state [ 470.744571][T23055] bridge0: port 3(dummy0) entered blocking state [ 470.746498][T23055] bridge0: port 3(dummy0) entered forwarding state [ 470.748350][T23055] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.750245][T23055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.752282][T23055] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.754210][T23055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.810774][T23055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 471.183638][T23083] device syzkaller0 entered promiscuous mode [ 471.761877][T23119] device syzkaller0 entered promiscuous mode [ 471.879486][T23134] netlink: 'syz.1.7602': attribute type 10 has an invalid length. [ 471.881873][T23134] bridge0: port 4(hsr0) entered disabled state [ 471.883690][T23134] bridge0: port 3(dummy0) entered disabled state [ 471.885609][T23134] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.887482][T23134] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.310085][T23158] device syzkaller0 entered promiscuous mode [ 472.857391][T23192] device syzkaller0 entered promiscuous mode [ 473.057292][T23208] __nla_validate_parse: 14 callbacks suppressed [ 473.057308][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7637'. [ 473.078144][T23208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7637'. [ 473.393676][T23227] device syzkaller0 entered promiscuous mode [ 473.987612][T23266] device syzkaller0 entered promiscuous mode [ 474.547502][T23303] device syzkaller0 entered promiscuous mode [ 475.078509][T23339] device syzkaller0 entered promiscuous mode [ 475.686770][T23380] device syzkaller0 entered promiscuous mode [ 476.182853][T23414] device syzkaller0 entered promiscuous mode [ 476.870855][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7754'. [ 476.876330][T23464] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7754'. [ 476.881029][T23464] netlink: 'syz.2.7754': attribute type 2 has an invalid length. [ 476.888247][T23464] netlink: 'syz.2.7754': attribute type 2 has an invalid length. [ 476.893926][T23464] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7754'. [ 477.139186][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7762'. [ 477.281708][T23490] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7766'. [ 477.300257][T23490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 478.474361][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7775'. [ 478.482654][T23512] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.559191][T23486] loop0: detected capacity change from 0 to 32768 [ 478.581143][T23486] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7764 (23486) [ 478.596774][T23486] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 478.599508][T23486] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 478.601984][T23486] BTRFS info (device loop0): using free space tree [ 478.691937][T23527] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7780'. [ 478.696580][T23527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.493454][T23486] BTRFS info (device loop0): enabling ssd optimizations [ 479.688598][T22065] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 479.706213][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7788'. [ 479.728783][T23556] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 480.022734][T23575] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7796'. [ 480.036786][T23575] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.916045][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7802'. [ 481.339298][T23611] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7813'. [ 481.354198][T23611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.583136][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7817'. [ 481.604878][T23619] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 482.107404][T23581] loop4: detected capacity change from 0 to 32768 [ 482.289758][T23581] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7799 (23581) [ 482.308633][T23581] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 482.311409][T23581] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 482.313828][T23581] BTRFS info (device loop4): using free space tree [ 482.639288][T23581] BTRFS info (device loop4): enabling ssd optimizations [ 482.726179][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7830'. [ 482.738464][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 482.746069][T23664] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 482.767455][T23666] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7829'. [ 482.800049][T23666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.023342][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7843'. [ 484.037596][T23695] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 484.149478][T23701] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7846'. [ 484.153205][T23701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 485.244282][T23692] loop3: detected capacity change from 0 to 32768 [ 485.248486][T23692] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7841 (23692) [ 485.257795][T23692] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 485.261588][T23692] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 485.264223][T23692] BTRFS info (device loop3): using free space tree [ 485.312471][T23692] BTRFS info (device loop3): enabling ssd optimizations [ 485.389385][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 485.405801][ T4653] tipc: Left network mode [ 485.586128][T23760] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7862'. [ 485.615456][T23760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 485.647451][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7859'. [ 485.688765][T23764] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 486.876415][T23789] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7876'. [ 486.906630][T23789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.924322][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7877'. [ 487.087762][T23772] loop0: detected capacity change from 0 to 32768 [ 487.102115][T23772] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7869 (23772) [ 487.282915][T23772] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 487.295464][T23772] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 487.325345][T23772] BTRFS info (device loop0): using free space tree [ 488.123338][T23772] BTRFS info (device loop0): enabling ssd optimizations [ 488.199406][T22065] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 488.345180][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7889'. [ 488.356533][T23836] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 488.434818][T23838] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7891'. [ 488.441666][T23838] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.634224][ T4653] device hsr_slave_0 left promiscuous mode [ 488.701212][ T4653] device hsr_slave_1 left promiscuous mode [ 488.803218][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.806864][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.811368][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.814145][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.825686][ T4653] device bridge_slave_1 left promiscuous mode [ 488.828810][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.866159][ T4653] device bridge_slave_0 left promiscuous mode [ 488.868008][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.985465][ T4653] device veth1_macvtap left promiscuous mode [ 488.987255][ T4653] device veth0_macvtap left promiscuous mode [ 488.988912][ T4653] device veth1_vlan left promiscuous mode [ 488.990489][ T4653] device veth0_vlan left promiscuous mode [ 489.322696][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 489.333402][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 489.340540][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.384045][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.511255][ T4653] bond0 (unregistering): Released all slaves [ 489.726600][T23864] device syzkaller0 entered promiscuous mode [ 489.819474][T23873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7905'. [ 490.770658][T23887] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 490.994593][T23877] netlink: 'syz.1.7906': attribute type 3 has an invalid length. [ 491.092905][T23902] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7915'. [ 491.113183][T23902] xt_TPROXY: Can be used only with -p tcp or -p udp [ 491.182554][T23904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7917'. [ 491.194737][T23885] loop4: detected capacity change from 0 to 32768 [ 491.238662][T23885] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7910 (23885) [ 491.265945][T23885] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 491.273764][T23885] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 491.287490][T23885] BTRFS info (device loop4): using free space tree [ 491.367677][T23909] device syzkaller0 entered promiscuous mode [ 491.606587][T23885] BTRFS info (device loop4): enabling ssd optimizations [ 492.310375][T23937] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 492.356228][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 492.687147][T23952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7929'. [ 492.722170][T23954] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7930'. [ 492.742289][T23954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 492.923925][T23966] device syzkaller0 entered promiscuous mode [ 493.049268][T23967] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 494.161738][T23988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7947'. [ 494.173005][T23990] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7946'. [ 494.177089][T23990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 494.416235][T23997] device syzkaller0 entered promiscuous mode [ 494.437657][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7951'. [ 494.441396][T24000] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 494.566162][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.568809][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.336026][T23972] loop4: detected capacity change from 0 to 32768 [ 495.349830][T23972] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7938 (23972) [ 495.371669][T23972] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 495.374432][T23972] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 495.386812][T23972] BTRFS info (device loop4): using free space tree [ 495.476736][T24018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7958'. [ 495.635350][T23972] BTRFS info (device loop4): enabling ssd optimizations [ 495.714937][T24041] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7961'. [ 495.737811][T24041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 495.814824][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7964'. [ 495.834899][T24046] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 495.946790][T15370] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 496.887531][T24056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7970'. [ 496.970133][T24060] device syzkaller0 entered promiscuous mode [ 497.145020][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7976'. [ 497.361306][T24081] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7978'. [ 497.401386][T24081] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.378267][T24076] loop0: detected capacity change from 0 to 32768 [ 498.381265][T24076] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7975 (24076) [ 498.415178][T24076] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 498.418959][T24076] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 498.437039][T24076] BTRFS info (device loop0): using free space tree [ 498.503281][T24102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7984'. [ 498.609215][T24076] BTRFS info (device loop0): enabling ssd optimizations [ 498.650750][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7988'. [ 498.712526][T22065] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 498.759497][T24128] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7993'. [ 498.892528][T24125] device syzkaller0 entered promiscuous mode [ 498.948395][T24128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 499.957279][T24153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7998'. [ 500.181470][ T4653] device hsr_slave_0 left promiscuous mode [ 500.228927][ T4653] device hsr_slave_1 left promiscuous mode [ 500.365490][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.367657][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.386235][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.388294][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.415560][ T4653] bridge0: port 4(dummy0) entered disabled state [ 500.655436][ T4653] device bond_slave_0 left promiscuous mode [ 500.658029][ T4653] bridge0: port 3(bond_slave_0) entered disabled state [ 500.823944][ T4653] device bridge_slave_1 left promiscuous mode [ 500.830194][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.022771][ T4653] device bridge_slave_0 left promiscuous mode [ 501.093005][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.260613][T24163] loop3: detected capacity change from 0 to 32768 [ 501.296979][T24163] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.8002 (24163) [ 501.314121][T24163] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 501.316264][ T4653] device veth1_macvtap left promiscuous mode [ 501.317816][T24163] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 501.318751][ T4653] device veth0_macvtap left promiscuous mode [ 501.321026][T24163] BTRFS info (device loop3): using free space tree [ 501.324038][ T4653] device veth1_vlan left promiscuous mode [ 501.328550][ T4653] device veth0_vlan left promiscuous mode [ 501.505541][T24163] BTRFS info (device loop3): enabling ssd optimizations [ 501.584760][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 501.719681][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 501.740338][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 501.758166][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.835830][T24208] __nla_validate_parse: 1 callbacks suppressed [ 501.835844][T24208] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8012'. [ 501.903202][T24209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 501.931774][ T4653] bond0 (unregistering): Released all slaves [ 502.095655][T24180] device syzkaller0 entered promiscuous mode [ 502.242785][T24216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8014'. [ 502.317044][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8016'. [ 502.553275][T24238] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8025'. [ 502.563776][T24238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 502.797473][T24244] device syzkaller0 entered promiscuous mode [ 502.831955][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8031'. [ 503.070030][T24234] loop3: detected capacity change from 0 to 32768 [ 503.079784][T24234] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.8023 (24234) [ 503.093215][T24234] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 503.114944][T24234] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 503.125405][T24234] BTRFS info (device loop3): using free space tree [ 503.239679][T24278] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8040'. [ 503.243569][T24278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.378702][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8043'. [ 503.444368][T24234] BTRFS info (device loop3): enabling ssd optimizations [ 503.521350][T24299] device syzkaller0 entered promiscuous mode [ 503.544080][T18960] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 503.890835][T24322] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8055'. [ 503.909095][T24322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.946886][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8057'. [ 504.297741][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8071'. [ 504.310987][T24353] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 504.416070][T24359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.721364][T24334] loop2: detected capacity change from 0 to 32768 [ 504.744474][T24334] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.8060 (24334) [ 504.765807][T24334] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 504.768506][T24334] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 504.770891][T24334] BTRFS info (device loop2): using free space tree [ 505.045022][T24399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.169272][T24334] BTRFS info (device loop2): enabling ssd optimizations [ 505.300986][T16118] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 505.663431][T24437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.102240][T24469] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.549295][T24505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.885422][ T4241] Bluetooth: hci2: command 0x0406 tx timeout [ 507.058030][T24538] __nla_validate_parse: 10 callbacks suppressed [ 507.058045][T24538] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8152'. [ 507.072174][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8153'. [ 507.076288][T24538] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.083101][T24540] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 507.403969][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8167'. [ 507.420578][T24569] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 507.522198][T24577] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8171'. [ 507.538809][T24577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.784880][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8180'. [ 507.807187][T24595] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 507.984623][T24612] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8188'. [ 508.021936][T24612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.299773][T24634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8199'. [ 508.467346][T24644] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8204'. [ 508.491666][T24644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.701061][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8212'. [ 508.920215][T24681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8221'. [ 508.923890][T24681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.327937][T24719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.511405][T24733] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 509.758988][T24749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.897866][T24758] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 510.125028][T24781] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.565633][T24811] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.725779][T24820] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 510.975159][T24841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 511.603050][T24882] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.036354][T24917] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.379666][T24943] tproxy_tg4_check: 2 callbacks suppressed [ 512.379680][T24943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.433435][T24945] __nla_validate_parse: 15 callbacks suppressed [ 512.433449][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8351'. [ 512.472043][T24945] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.843020][T24976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.915336][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8368'. [ 513.206760][T25005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.283091][T25014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8383'. [ 513.698015][T25046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.731422][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8401'. [ 514.070101][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8414'. [ 514.084882][T25080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.090116][T25076] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 514.460077][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8430'. [ 514.472465][T25106] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 514.506048][T25110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.844419][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8445'. [ 514.963194][T25145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.244410][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8460'. [ 515.264637][T25166] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 515.468206][T25179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.661333][ T4235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.665142][ T4235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.668496][ T4235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.671053][ T4235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.673430][ T4235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 515.679832][ T4235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 515.800869][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8475'. [ 515.842748][T25197] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 516.141545][T25213] xt_TPROXY: Can be used only with -p tcp or -p udp [ 516.279327][T15241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.297944][T25187] chnl_net:caif_netlink_parms(): no params data found [ 516.358336][T15241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.423898][T25187] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.428695][T25187] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.431134][T25187] device bridge_slave_0 entered promiscuous mode [ 516.434936][T25187] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.437026][T25187] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.439699][T25187] device bridge_slave_1 entered promiscuous mode [ 516.477598][T15241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.501545][T25187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.506480][T25187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.527421][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8487'. [ 516.530245][T25187] team0: Port device team_slave_0 added [ 516.534048][T25187] team0: Port device team_slave_1 added [ 516.566207][T15241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.600965][T25187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.602773][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.645625][T25187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.656183][T25187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.657985][T25187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.683301][T25187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.793694][T25187] device hsr_slave_0 entered promiscuous mode [ 516.846591][T25187] device hsr_slave_1 entered promiscuous mode [ 516.869858][T25253] xt_TPROXY: Can be used only with -p tcp or -p udp [ 516.885442][T25187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.887534][T25187] Cannot create hsr debugfs directory [ 517.404824][T25286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 517.451597][T25292] __nla_validate_parse: 5 callbacks suppressed [ 517.451611][T25292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8513'. [ 517.634963][T25303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8517'. [ 517.765365][ T4246] Bluetooth: hci5: command tx timeout [ 517.857041][T25320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8524'. [ 517.880758][T25323] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8525'. [ 517.898289][T25323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 517.947302][T25187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.986839][T25187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.021881][T25187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.141607][T25187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.190371][T25335] netlink: 'syz.1.8530': attribute type 72 has an invalid length. [ 518.444731][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8536'. [ 518.600148][T25362] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8539'. [ 518.613765][T15241] device hsr_slave_0 left promiscuous mode [ 518.662058][T15241] device hsr_slave_1 left promiscuous mode [ 518.664434][T25369] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.735318][T15241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.737460][T15241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.742543][T15241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.744766][T15241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.749746][T15241] device bridge_slave_1 left promiscuous mode [ 518.751498][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.806634][T15241] device bridge_slave_0 left promiscuous mode [ 518.808568][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.995488][T15241] device veth1_macvtap left promiscuous mode [ 518.997252][T15241] device veth0_macvtap left promiscuous mode [ 518.999114][T15241] device veth1_vlan left promiscuous mode [ 519.000952][T15241] device veth0_vlan left promiscuous mode [ 519.335535][T15241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.381722][T15241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.458876][T15241] bond0 (unregistering): Released all slaves [ 519.561025][T25187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.581144][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 519.583489][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.598194][T25187] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.647091][T25380] netlink: 'syz.0.8544': attribute type 72 has an invalid length. [ 519.665007][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.669418][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.671968][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.673925][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.677456][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.680617][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.689870][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.691858][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.703754][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.745905][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.748378][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.751104][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.754254][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.771192][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.773963][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.795912][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.798942][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.811757][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.814232][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.824830][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.829668][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.849335][T25397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8550'. [ 519.855411][ T4235] Bluetooth: hci5: command tx timeout [ 520.023163][T25409] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8555'. [ 520.036880][T25409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 520.172343][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8560'. [ 520.174983][T25187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.183196][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.186259][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.213941][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.216752][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.222453][T25419] netlink: 'syz.0.8558': attribute type 72 has an invalid length. [ 520.255952][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.258535][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.261177][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.263540][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.275896][T25187] device veth0_vlan entered promiscuous mode [ 520.282362][T25187] device veth1_vlan entered promiscuous mode [ 520.326308][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.328732][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.331094][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.334457][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.341007][T25187] device veth0_macvtap entered promiscuous mode [ 520.352145][T25426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8563'. [ 520.352336][T25187] device veth1_macvtap entered promiscuous mode [ 520.390994][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.413134][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.422079][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.424727][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.432288][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.449739][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.452318][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.457847][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.462644][T25187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.466187][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.468607][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.476711][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.479333][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.484431][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.502306][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.507241][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.513463][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.531826][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.534542][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.542077][T25187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.559232][T25187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.563270][T25187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.570207][T25187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.572423][T25187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.574635][T25187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.578279][T25187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.589168][T25436] xt_TPROXY: Can be used only with -p tcp or -p udp [ 520.590377][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.593541][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.722193][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.724465][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.749379][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.802206][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.804441][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.821299][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.903717][T25450] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 521.185474][T25466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 521.593309][T25481] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 521.927017][ T4235] Bluetooth: hci5: command tx timeout [ 521.982204][T25503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.567378][T25539] __nla_validate_parse: 10 callbacks suppressed [ 522.567394][T25539] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8614'. [ 522.583186][T25539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.626584][T25541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8615'. [ 522.841498][T25557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8622'. [ 523.065498][T25568] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8629'. [ 523.080428][T25568] xt_TPROXY: Can be used only with -p tcp or -p udp [ 523.178839][T25575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8631'. [ 523.188455][T25575] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 523.593571][T25602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8643'. [ 523.656237][T25606] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8645'. [ 523.672972][T25606] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.005818][ T4235] Bluetooth: hci5: command tx timeout [ 524.034188][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8658'. [ 524.153269][T25645] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8662'. [ 524.157820][T25645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.399555][T25665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8671'. [ 524.567603][T25680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.732533][T25693] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 525.055986][T25718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 525.498836][T25753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 525.507931][T25756] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 525.856681][T25781] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 525.917010][T25787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 526.357623][T25820] xt_TPROXY: Can be used only with -p tcp or -p udp [ 526.844155][T25855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 527.540452][T25908] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 527.788900][T25927] __nla_validate_parse: 15 callbacks suppressed [ 527.788913][T25927] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8794'. [ 527.804507][T25927] tproxy_tg4_check: 1 callbacks suppressed [ 527.804528][T25927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 527.924226][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8797'. [ 528.226566][T25959] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8809'. [ 528.233709][T25959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.316588][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8810'. [ 528.593607][T25990] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8823'. [ 528.607201][T25990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.642222][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8824'. [ 528.659245][T25993] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 528.906411][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8838'. [ 528.910275][T26020] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8837'. [ 528.914181][T26021] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 528.921311][T26020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 529.213633][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8851'. [ 529.229275][T26046] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 529.374304][T26060] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8854'. [ 529.383470][T26060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 529.587382][T26074] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 529.816221][T26097] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.114561][T26125] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.582425][T26158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.734783][T26166] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 530.999819][T26192] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.045275][T26197] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 531.426964][T26228] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 531.484194][T26232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 532.088607][T26282] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 532.314829][T26301] netlink: 'syz.4.8966': attribute type 2 has an invalid length. [ 532.320497][T26301] netlink: 'syz.4.8966': attribute type 2 has an invalid length. [ 532.661205][T26333] netlink: 'syz.1.8982': attribute type 2 has an invalid length. [ 532.663452][T26333] netlink: 'syz.1.8982': attribute type 2 has an invalid length. [ 533.108312][T26371] __nla_validate_parse: 24 callbacks suppressed [ 533.108330][T26371] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8999'. [ 533.131351][T26371] tproxy_tg4_check: 3 callbacks suppressed [ 533.131365][T26371] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.157731][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9000'. [ 533.472965][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9015'. [ 533.482238][T26406] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 533.611139][T26418] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9019'. [ 533.619494][T26418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.789109][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9027'. [ 533.802512][T26434] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 533.937175][T26448] loop1: detected capacity change from 0 to 512 [ 533.987802][T26448] EXT4-fs error (device loop1): ext4_quota_enable:6964: comm syz.1.9034: Bad quota inum: 1, type: 2 [ 533.991111][T26448] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 534.007110][T26448] EXT4-fs (loop1): mount failed [ 534.146214][T26467] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9039'. [ 534.147116][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9041'. [ 534.150070][T26467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.348869][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9051'. [ 534.360608][T26486] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9051'. [ 534.363071][T26486] netlink: 'syz.4.9051': attribute type 2 has an invalid length. [ 534.365135][T26486] netlink: 'syz.4.9051': attribute type 2 has an invalid length. [ 534.375405][T26486] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9051'. [ 534.406801][T26494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.412810][T26494] bond0: (slave bond1): Enslaving as an active interface with an up link [ 534.562844][T26499] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 534.600094][T26506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.849136][T26532] netlink: 'syz.3.9068': attribute type 2 has an invalid length. [ 534.851308][T26532] netlink: 'syz.3.9068': attribute type 2 has an invalid length. [ 534.918969][T26539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.921788][T26539] bond0: (slave bond1): Enslaving as an active interface with an up link [ 534.950941][T26536] loop1: detected capacity change from 0 to 4096 [ 534.954506][T26536] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 534.979219][T26536] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 535.089069][T26551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 535.113864][T12747] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 535.213084][T26565] netlink: 'syz.2.9084': attribute type 2 has an invalid length. [ 535.219711][T26565] netlink: 'syz.2.9084': attribute type 2 has an invalid length. [ 535.316468][T26572] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 535.413422][T26576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.417163][T26576] bond0: (slave bond2): Enslaving as an active interface with an up link [ 535.555108][T26594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 535.683876][T26605] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 535.791593][T26612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.794374][T26612] bond0: (slave bond2): Enslaving as an active interface with an up link [ 535.993994][T26628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.441473][T26665] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.569513][T26672] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 536.896493][T26695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 537.527097][T26735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 538.389093][T26790] __nla_validate_parse: 30 callbacks suppressed [ 538.389108][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9181'. [ 538.405143][T26790] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 538.608876][T26806] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9187'. [ 538.618432][T26806] tproxy_tg4_check: 1 callbacks suppressed [ 538.618446][T26806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 538.864067][T26821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9194'. [ 538.875180][T26821] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 539.025318][T26829] device syzkaller0 entered promiscuous mode [ 539.207108][T26841] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9202'. [ 539.225912][T26841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 539.377644][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9208'. [ 539.381910][T26851] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 539.499766][T26861] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.9213'. [ 539.640838][T26870] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9217'. [ 539.666009][T26870] xt_TPROXY: Can be used only with -p tcp or -p udp [ 539.812122][T26882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9222'. [ 540.075557][T26902] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9231'. [ 540.088991][T26902] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.258183][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9235'. [ 540.269848][T26912] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 540.370723][T26894] loop1: detected capacity change from 0 to 32768 [ 540.383302][T26894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9229 (26894) [ 540.389302][T26894] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 540.392017][T26894] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 540.394699][T26894] BTRFS info (device loop1): setting nodatacow, compression disabled [ 540.400092][T26894] BTRFS info (device loop1): setting datacow [ 540.401677][T26894] BTRFS info (device loop1): doing ref verification [ 540.422709][T26894] BTRFS info (device loop1): force clearing of disk cache [ 540.424957][T26894] BTRFS info (device loop1): turning off barriers [ 540.441237][T26894] BTRFS info (device loop1): enabling ssd optimizations [ 540.443187][T26894] BTRFS info (device loop1): using spread ssd allocation scheme [ 540.450558][T26894] BTRFS info (device loop1): not using ssd optimizations [ 540.452613][T26894] BTRFS info (device loop1): not using spread ssd allocation scheme [ 540.454832][T26894] BTRFS info (device loop1): using free space tree [ 540.608767][T26943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.692014][T26894] BTRFS info (device loop1): rebuilding free space tree [ 540.844392][T26962] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 540.859029][T12747] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 541.154643][T26992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 541.330252][T27005] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 541.675434][T27033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.300536][ T4235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.314960][ T4235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.326468][ T4235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.329241][T27062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.329308][ T4235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.332029][T27062] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 552.335479][ T4235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.337898][T27062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.339983][ T4248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.343145][ T4248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.346774][T27062] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 552.348879][ T4248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.423309][ T4248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 552.429992][ T4246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 552.430016][ T4248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 552.432628][ T4246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 552.438623][ T4248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 552.438917][ T4246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 552.442642][ T4246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 552.450093][ T4246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 552.452154][ T4246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 552.454324][ T4246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 552.457154][ T4246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 552.459341][ T4246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 554.142666][T27062] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 554.146311][T27062] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 554.156636][T27062] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 554.159254][T27062] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 554.161566][T27062] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 554.163595][T27062] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.405399][T27062] Bluetooth: hci6: command tx timeout [ 554.416056][T27062] Bluetooth: hci2: command tx timeout [ 554.485389][T27062] Bluetooth: hci7: command tx timeout [ 554.495600][T27062] Bluetooth: hci8: command tx timeout [ 556.007110][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.008830][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.245343][T27062] Bluetooth: hci9: command tx timeout [ 556.485374][T27062] Bluetooth: hci2: command tx timeout [ 556.485392][ T4246] Bluetooth: hci6: command tx timeout [ 556.565293][ T4246] Bluetooth: hci8: command tx timeout [ 556.566793][T27062] Bluetooth: hci7: command tx timeout [ 558.325321][ T4246] Bluetooth: hci9: command tx timeout [ 558.565442][ T4246] Bluetooth: hci6: command tx timeout [ 558.565463][ T4241] Bluetooth: hci2: command tx timeout [ 558.645265][ T4241] Bluetooth: hci8: command tx timeout [ 558.645422][T27062] Bluetooth: hci7: command tx timeout [ 560.405477][ T4246] Bluetooth: hci9: command tx timeout [ 560.645378][T27062] Bluetooth: hci2: command tx timeout [ 560.646856][T27062] Bluetooth: hci6: command tx timeout [ 560.725349][ T4246] Bluetooth: hci8: command tx timeout [ 560.726746][ T4246] Bluetooth: hci7: command tx timeout [ 562.485296][T27062] Bluetooth: hci9: command tx timeout [ 578.565331][ T4246] Bluetooth: hci3: command 0x0406 tx timeout [ 612.210087][ T4241] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 612.214641][ T4241] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 612.217591][ T4241] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 612.224867][ T4241] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 612.227697][ T4241] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 612.229900][ T4241] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 612.245519][ T4241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 612.252375][ T4241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 612.265777][ T4241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 612.269141][ T4241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 612.272357][ T4241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 612.274636][ T4241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 613.193301][T27062] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 613.193460][ T4235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 613.201499][ T4235] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 613.204735][ T4235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 613.205655][T27062] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 613.210355][ T4235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 613.212699][T27062] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 613.217625][T27062] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 613.220579][T27062] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 613.222649][T27062] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 613.224684][T27062] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 613.227324][T27062] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 614.325423][ T4246] Bluetooth: hci11: command tx timeout [ 614.325496][ T4241] Bluetooth: hci10: command tx timeout [ 614.607372][ T4235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 614.611212][ T4235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 614.613847][ T4235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 614.616825][ T4235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 614.619171][ T4235] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 614.621450][ T4235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 615.285464][ T4235] Bluetooth: hci12: command tx timeout [ 615.285494][ T4241] Bluetooth: hci13: command tx timeout [ 616.405324][ T4241] Bluetooth: hci10: command tx timeout [ 616.406895][ T4241] Bluetooth: hci11: command tx timeout [ 616.645419][ T4246] Bluetooth: hci14: command tx timeout [ 617.365385][ T4246] Bluetooth: hci13: command tx timeout [ 617.366915][ T4246] Bluetooth: hci12: command tx timeout [ 617.446510][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.448243][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.485371][ T4241] Bluetooth: hci11: command tx timeout [ 618.486882][ T4241] Bluetooth: hci10: command tx timeout [ 618.725357][ T4246] Bluetooth: hci14: command tx timeout [ 619.445505][ T4241] Bluetooth: hci12: command tx timeout [ 619.446996][ T4241] Bluetooth: hci13: command tx timeout [ 620.565370][ T4246] Bluetooth: hci10: command tx timeout [ 620.566839][ T4246] Bluetooth: hci11: command tx timeout [ 620.805321][ T4241] Bluetooth: hci14: command tx timeout [ 621.525534][ T4246] Bluetooth: hci13: command tx timeout [ 621.527006][ T4246] Bluetooth: hci12: command tx timeout [ 622.885269][ T4241] Bluetooth: hci14: command tx timeout [ 640.005428][ T4241] Bluetooth: hci5: command 0x0406 tx timeout [ 672.813855][ T4235] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 672.819140][ T4235] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 672.825138][T27062] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 672.834755][T27062] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 672.837085][T27062] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 672.839134][T27062] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 672.846840][T27062] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 672.855073][ T4246] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 672.859177][ T4246] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 672.867007][ T4246] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 672.869283][ T4246] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 672.872077][ T4246] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 673.825145][T27109] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 673.831754][T27109] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 673.844378][T27112] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 673.862706][T27112] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 673.865981][T27112] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 673.866066][ T4248] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 673.869863][T27112] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 673.871212][ T4248] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 673.872184][T27112] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 673.874079][ T4248] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 673.875985][T27112] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 673.879248][ T4248] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 674.765621][T27112] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 674.770324][T27112] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 674.773587][T27112] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 674.776285][T27112] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 674.779331][T27112] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 674.781477][T27112] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 674.885354][T27112] Bluetooth: hci15: command tx timeout [ 674.887408][T27112] Bluetooth: hci16: command tx timeout [ 675.845368][T27062] Bluetooth: hci6: command 0x0406 tx timeout [ 675.845520][ T4235] Bluetooth: hci7: command 0x0406 tx timeout [ 675.847088][T27062] Bluetooth: hci8: command 0x0406 tx timeout [ 675.848762][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 675.925362][ T4235] Bluetooth: hci17: command tx timeout [ 675.927630][ T4235] Bluetooth: hci18: command tx timeout [ 676.815337][ T4241] Bluetooth: hci19: command tx timeout [ 676.975336][ T4241] Bluetooth: hci16: command tx timeout [ 676.976860][ T4241] Bluetooth: hci15: command tx timeout [ 678.005450][ T4235] Bluetooth: hci18: command tx timeout [ 678.007081][ T4235] Bluetooth: hci17: command tx timeout [ 678.887226][ T4241] Bluetooth: hci19: command tx timeout [ 678.890856][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.892574][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.045320][ T4246] Bluetooth: hci15: command tx timeout [ 679.046858][ T4246] Bluetooth: hci16: command tx timeout [ 680.085397][ T4235] Bluetooth: hci17: command tx timeout [ 680.086963][ T4235] Bluetooth: hci18: command tx timeout [ 680.965422][ T4246] Bluetooth: hci9: command 0x0406 tx timeout [ 680.967197][ T4246] Bluetooth: hci19: command tx timeout [ 681.125374][ T4235] Bluetooth: hci16: command tx timeout [ 681.126907][ T4235] Bluetooth: hci15: command tx timeout [ 682.165500][ T4241] Bluetooth: hci18: command tx timeout [ 682.167004][ T4241] Bluetooth: hci17: command tx timeout [ 683.045471][ T4235] Bluetooth: hci19: command tx timeout [ 687.205477][ T28] INFO: task syz.4.9278:27028 blocked for more than 143 seconds. [ 687.207678][ T28] Not tainted 6.1.94-syzkaller #0 [ 687.209145][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.211476][ T28] task:syz.4.9278 state:D stack:0 pid:27028 ppid:15370 flags:0x00000001 [ 687.213949][ T28] Call trace: [ 687.214843][ T28] __switch_to+0x320/0x754 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 687.240442][ T28] __schedule+0xee4/0x1c98 [ 687.241584][ T28] schedule+0xc4/0x170 [ 687.242729][ T28] schedule_preempt_disabled+0x18/0x2c [ 687.244233][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 687.246202][ T28] mutex_lock_nested+0x38/0x44 [ 687.247476][ T28] rtnl_lock+0x20/0x2c [ 687.248535][ T28] nl80211_pre_doit+0x70/0x764 [ 687.249787][ T28] genl_rcv_msg+0x8fc/0xc2c [ 687.251021][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 687.252282][ T28] genl_rcv+0x38/0x50 [ 687.253321][ T28] netlink_unicast+0x65c/0x898 [ 687.254520][ T28] netlink_sendmsg+0x834/0xb18 [ 687.261374][ T28] ____sys_sendmsg+0x55c/0x848 [ 687.262642][ T28] __sys_sendmsg+0x26c/0x33c [ 687.263774][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 687.265033][ T28] invoke_syscall+0x98/0x2c0 [ 687.267318][ T28] el0_svc_common+0x138/0x258 [ 687.268585][ T28] do_el0_svc+0x64/0x218 [ 687.269659][ T28] el0_svc+0x58/0x168 [ 687.270635][ T28] el0t_64_sync_handler+0x84/0xf0 [ 687.272000][ T28] el0t_64_sync+0x18c/0x190 [ 687.273177][ T28] INFO: task syz.4.9278:27033 blocked for more than 143 seconds.