last executing test programs: 2m58.311741619s ago: executing program 3 (id=3275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000a00)={[{@i_version}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43e, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0) 2m54.663727912s ago: executing program 3 (id=3287): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181102, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x0, 0xfffffb85}, {0x0, 0x4}]}, 0x14, 0x3) 2m54.308350308s ago: executing program 3 (id=3290): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000040)=ANY=[@ANYBLOB='max=0']) 2m53.167766418s ago: executing program 3 (id=3292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0) 2m52.867690163s ago: executing program 3 (id=3296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newchain={0x7f4, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xe}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x3ac, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x42, 0x3, 0x4, 0x4, 0x6, {0x7, 0x1, 0x28a, 0x2, 0x7, 0xec30}, {0x2, 0x0, 0x2, 0xff, 0x9, 0xffff}, 0x2c34, 0x5, 0x3}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x2e6f}, @TCA_FLOW_ACT={0x358, 0x9, 0x0, 0x1, [@m_skbmod={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x21, 0x6, "daa1a91c21924e6d52d53dcd9335291638789f300ff0475bd8cc353454"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x84, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0xb, 0x7}}, @TCA_DEF_DATA={0x7, 0x3, '#! '}, @TCA_DEF_DATA={0x12, 0x3, 'cbc(des3_ede)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x10000000, 0xc873, 0x6b2}}]}, {0xa, 0x6, "3c4128159f21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x14c, 0xe, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xb32}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x4, 0x9, 0x4}, 0x1}}]}, {0xf2, 0x6, "ff08a8c8d53f6f19debfbb1b7cbddde44522a355889b5de012d50db6e9062d59b7e88249298741be19ba0145c87c475c31251dbce6b8341ef439d67dd42ebdafae6d2109ed2e2c1c4ae7ac603bb1f25536ffc55501e073dd6bfe231464912f0df8316a14c7f282cb29caef15f12e207ca338061cffa4566dafc81b7db4051ee0eb054b5e757eee26b8aae01d85cf57a2a6e5e8ddf63ec464a5b8f04ce8b7e077709640e60c70840994c63d33d926717aab542539d91bdbefde6c117c091dd38c8fe8c56556acd40ae4892668bb01ef4b55ae913d5ca4ecd83244c9efaa61025ee603967357509a3037c51b5a13e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xe8, 0x17, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x99, 0x6, "88e0434ddc250c2f1adb536cb2a663aff0ff8da3120ecd0986ebf76b6a4f2b4f5f7022fb5a8a4c869ca80de36a8ff3871b76d368d0d5d72d81c9294adb9c1d0fb0937f7069cd52d2407a8ffcfae702e2610813dfcee41c224b311f779ee075c9f9f2c0b5ef40b3ed597e90b60af7ac6ead4f5aca782b52c22146c2f4e2b7e7d2662c63d1e4d786b5de693e9f0e193595aab914d9a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x40, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x13, 0x6, "f2195a930e135c74933beefccfebf1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x4, 0x2, 0x9, 0x4, 0xa6, 0x7c0, 0x283451f, 0x800, 0x4, 0xbc7e, 0x8, 0x6, 0x3, 0x100, 0x10000, 0x611, 0x7f, 0xffffbca3, 0x13b0f170, 0x8, 0x7, 0x1, 0x7, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7, 0xa, 0x9, 0x1000, 0x6, 0x0, 0xe8b1, 0x3, 0x6, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x5, 0x7, 0x7, 0x81, 0x6, 0x7, 0x8, 0x8, 0xfffffffb, 0x7fff, 0x5, 0xb0f7, 0x6, 0xd6, 0x18000, 0xd09, 0x5, 0x7f1, 0x2, 0x5f3, 0x1, 0x7, 0x9, 0x400, 0x9, 0x0, 0xc, 0x6, 0xff, 0x80000000, 0x200, 0x8, 0xfffffffa, 0x4e4, 0x2, 0x5, 0x1, 0x81, 0x5, 0x7, 0x9, 0x2, 0x4, 0x1109ba77, 0x7, 0x2, 0x1000, 0x5, 0x3, 0x8, 0x7, 0xd, 0x3ff, 0x1, 0x8, 0x1, 0x8, 0xf37, 0x3, 0x66, 0x4, 0x7, 0x2, 0x5, 0x8000, 0x3, 0x423, 0x4, 0x7, 0x6, 0x4, 0xf06a, 0x9, 0x9, 0x3, 0x4, 0xc0e, 0xe7, 0x3, 0x1, 0x4, 0x101, 0x2, 0xb5, 0x1, 0xfffff801, 0x9, 0x7, 0x4, 0x2, 0x6, 0x0, 0x2, 0xffff, 0x2, 0x9, 0x3ff, 0x1, 0x6, 0x1, 0x7f, 0x3ff, 0x3ff, 0x3, 0x6, 0x1, 0x3ff, 0x3, 0xf669, 0x0, 0x47, 0x3, 0x9, 0x24, 0x1b30ed4e, 0x0, 0x8, 0x6, 0x2, 0x1, 0x7, 0x5, 0x4, 0x81, 0x7fff, 0x3, 0x10, 0x1, 0x5, 0xfffffffd, 0x3a40000, 0x7f, 0xbd, 0x800, 0x8, 0x200, 0x8, 0xdc, 0x25cb, 0xea, 0x8, 0x80000001, 0x7, 0x610a, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x1ff, 0x37b4, 0x5, 0x0, 0x1, 0x0, 0x1, 0x200, 0x3, 0x101, 0x2, 0x2, 0x5, 0x3, 0xfff, 0x3, 0xffff, 0x4, 0x7, 0x6, 0x7, 0x5, 0x4, 0xfffffff8, 0x5, 0x3, 0x9, 0x2, 0xfffffc01, 0x1, 0x6, 0x7, 0x4, 0x7ada2535, 0x5, 0x7, 0x5, 0xffff0001, 0x1, 0x12f5, 0x6, 0x4, 0x0, 0xffff, 0x4, 0x7, 0x7f, 0x7, 0x4, 0x5, 0x4, 0x4, 0x6, 0x7, 0x6, 0x5f40, 0x7, 0x7ff, 0x5ba, 0x9, 0xd7]}]}]}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 2m52.756620105s ago: executing program 3 (id=3298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m37.48181683s ago: executing program 32 (id=3298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 37.175645109s ago: executing program 4 (id=3533): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 37.08477554s ago: executing program 4 (id=3535): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newchain={0x7fc, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xe}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x3b4, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x42, 0x3, 0x4, 0x4, 0x6, {0x7, 0x1, 0x28a, 0x2, 0x7, 0xec30}, {0x2, 0x0, 0x2, 0xff, 0x9, 0xffff}, 0x2c34, 0x5, 0x3}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x2e6f}, @TCA_FLOW_ACT={0x360, 0x9, 0x0, 0x1, [@m_skbmod={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x21, 0x6, "daa1a91c21924e6d52d53dcd9335291638789f300ff0475bd8cc353454"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x84, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0xb, 0x7}}, @TCA_DEF_DATA={0x7, 0x3, '#! '}, @TCA_DEF_DATA={0x12, 0x3, 'cbc(des3_ede)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x10000000, 0xc873, 0x6b2}}]}, {0xa, 0x6, "3c4128159f21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x14c, 0xe, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xb32}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x4, 0x9, 0x4}, 0x1}}]}, {0xf2, 0x6, "ff08a8c8d53f6f19debfbb1b7cbddde44522a355889b5de012d50db6e9062d59b7e88249298741be19ba0145c87c475c31251dbce6b8341ef439d67dd42ebdafae6d2109ed2e2c1c4ae7ac603bb1f25536ffc55501e073dd6bfe231464912f0df8316a14c7f282cb29caef15f12e207ca338061cffa4566dafc81b7db4051ee0eb054b5e757eee26b8aae01d85cf57a2a6e5e8ddf63ec464a5b8f04ce8b7e077709640e60c70840994c63d33d926717aab542539d91bdbefde6c117c091dd38c8fe8c56556acd40ae4892668bb01ef4b55ae913d5ca4ecd83244c9efaa61025ee603967357509a3037c51b5a13e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xe0, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x99, 0x6, "88e0434ddc250c2f1adb536cb2a663aff0ff8da3120ecd0986ebf76b6a4f2b4f5f7022fb5a8a4c869ca80de36a8ff3871b76d368d0d5d72d81c9294adb9c1d0fb0937f7069cd52d2407a8ffcfae702e2610813dfcee41c224b311f779ee075c9f9f2c0b5ef40b3ed597e90b60af7ac6ead4f5aca782b52c22146c2f4e2b7e7d2662c63d1e4d786b5de693e9f0e193595aab914d9a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x50, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "f2195a930e135c74933beefccfebf1af1947a458d74950e21d1c892636"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x4, 0x2, 0x9, 0x4, 0xa6, 0x7c0, 0x283451f, 0x800, 0x4, 0xbc7e, 0x8, 0x6, 0x3, 0x100, 0x10000, 0x611, 0x7f, 0xffffbca3, 0x13b0f170, 0x8, 0x7, 0x1, 0x7, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7, 0xa, 0x9, 0x1000, 0x6, 0x0, 0xe8b1, 0x3, 0x6, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x5, 0x7, 0x7, 0x81, 0x6, 0x7, 0x8, 0x8, 0xfffffffb, 0x7fff, 0x5, 0xb0f7, 0x6, 0xd6, 0x18000, 0xd09, 0x5, 0x7f1, 0x2, 0x5f3, 0x1, 0x7, 0x9, 0x400, 0x9, 0x0, 0xc, 0x6, 0xff, 0x80000000, 0x200, 0x8, 0xfffffffa, 0x4e4, 0x2, 0x5, 0x1, 0x81, 0x5, 0x7, 0x9, 0x2, 0x4, 0x1109ba77, 0x7, 0x2, 0x1000, 0x5, 0x3, 0x8, 0x7, 0xd, 0x3ff, 0x1, 0x8, 0x1, 0x8, 0xf37, 0x3, 0x66, 0x4, 0x7, 0x2, 0x5, 0x8000, 0x3, 0x423, 0x4, 0x7, 0x6, 0x4, 0xf06a, 0x9, 0x9, 0x3, 0x4, 0xc0e, 0xe7, 0x3, 0x1, 0x4, 0x101, 0x2, 0xb5, 0x1, 0xfffff801, 0x9, 0x7, 0x4, 0x2, 0x6, 0x0, 0x2, 0xffff, 0x2, 0x9, 0x3ff, 0x1, 0x6, 0x1, 0x7f, 0x3ff, 0x3ff, 0x3, 0x6, 0x1, 0x3ff, 0x3, 0xf669, 0x0, 0x47, 0x3, 0x9, 0x24, 0x1b30ed4e, 0x0, 0x8, 0x6, 0x2, 0x1, 0x7, 0x5, 0x4, 0x81, 0x7fff, 0x3, 0x10, 0x1, 0x5, 0xfffffffd, 0x3a40000, 0x7f, 0xbd, 0x800, 0x8, 0x200, 0x8, 0xdc, 0x25cb, 0xea, 0x8, 0x80000001, 0x7, 0x610a, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x1ff, 0x37b4, 0x5, 0x0, 0x1, 0x0, 0x1, 0x200, 0x3, 0x101, 0x2, 0x2, 0x5, 0x3, 0xfff, 0x3, 0xffff, 0x4, 0x7, 0x6, 0x7, 0x5, 0x4, 0xfffffff8, 0x5, 0x3, 0x9, 0x2, 0xfffffc01, 0x1, 0x6, 0x7, 0x4, 0x7ada2535, 0x5, 0x7, 0x5, 0xffff0001, 0x1, 0x12f5, 0x6, 0x4, 0x0, 0xffff, 0x4, 0x7, 0x7f, 0x7, 0x4, 0x5, 0x4, 0x4, 0x6, 0x7, 0x6, 0x5f40, 0x7, 0x7ff, 0x5ba, 0x9, 0xd7]}]}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 36.885173524s ago: executing program 4 (id=3536): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{}, 0x0, &(0x7f0000002580)}, 0x20) openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 35.262898404s ago: executing program 4 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 33.771965452s ago: executing program 0 (id=3545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newchain={0x7fc, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xe}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x3b4, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x42, 0x3, 0x4, 0x4, 0x6, {0x7, 0x1, 0x28a, 0x2, 0x7, 0xec30}, {0x2, 0x0, 0x2, 0xff, 0x9, 0xffff}, 0x2c34, 0x5, 0x3}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x2e6f}, @TCA_FLOW_ACT={0x360, 0x9, 0x0, 0x1, [@m_skbmod={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x21, 0x6, "daa1a91c21924e6d52d53dcd9335291638789f300ff0475bd8cc353454"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x84, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0xb, 0x7}}, @TCA_DEF_DATA={0x7, 0x3, '#! '}, @TCA_DEF_DATA={0x12, 0x3, 'cbc(des3_ede)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x10000000, 0xc873, 0x6b2}}]}, {0xa, 0x6, "3c4128159f21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x14c, 0xe, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xb32}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x4, 0x9, 0x4}, 0x1}}]}, {0xf2, 0x6, "ff08a8c8d53f6f19debfbb1b7cbddde44522a355889b5de012d50db6e9062d59b7e88249298741be19ba0145c87c475c31251dbce6b8341ef439d67dd42ebdafae6d2109ed2e2c1c4ae7ac603bb1f25536ffc55501e073dd6bfe231464912f0df8316a14c7f282cb29caef15f12e207ca338061cffa4566dafc81b7db4051ee0eb054b5e757eee26b8aae01d85cf57a2a6e5e8ddf63ec464a5b8f04ce8b7e077709640e60c70840994c63d33d926717aab542539d91bdbefde6c117c091dd38c8fe8c56556acd40ae4892668bb01ef4b55ae913d5ca4ecd83244c9efaa61025ee603967357509a3037c51b5a13e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xe0, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x99, 0x6, "88e0434ddc250c2f1adb536cb2a663aff0ff8da3120ecd0986ebf76b6a4f2b4f5f7022fb5a8a4c869ca80de36a8ff3871b76d368d0d5d72d81c9294adb9c1d0fb0937f7069cd52d2407a8ffcfae702e2610813dfcee41c224b311f779ee075c9f9f2c0b5ef40b3ed597e90b60af7ac6ead4f5aca782b52c22146c2f4e2b7e7d2662c63d1e4d786b5de693e9f0e193595aab914d9a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x50, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "f2195a930e135c74933beefccfebf1af1947a458d74950e21d1c892636"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x4, 0x2, 0x9, 0x4, 0xa6, 0x7c0, 0x283451f, 0x800, 0x4, 0xbc7e, 0x8, 0x6, 0x3, 0x100, 0x10000, 0x611, 0x7f, 0xffffbca3, 0x13b0f170, 0x8, 0x7, 0x1, 0x7, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7, 0xa, 0x9, 0x1000, 0x6, 0x0, 0xe8b1, 0x3, 0x6, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x5, 0x7, 0x7, 0x81, 0x6, 0x7, 0x8, 0x8, 0xfffffffb, 0x7fff, 0x5, 0xb0f7, 0x6, 0xd6, 0x18000, 0xd09, 0x5, 0x7f1, 0x2, 0x5f3, 0x1, 0x7, 0x9, 0x400, 0x9, 0x0, 0xc, 0x6, 0xff, 0x80000000, 0x200, 0x8, 0xfffffffa, 0x4e4, 0x2, 0x5, 0x1, 0x81, 0x5, 0x7, 0x9, 0x2, 0x4, 0x1109ba77, 0x7, 0x2, 0x1000, 0x5, 0x3, 0x8, 0x7, 0xd, 0x3ff, 0x1, 0x8, 0x1, 0x8, 0xf37, 0x3, 0x66, 0x4, 0x7, 0x2, 0x5, 0x8000, 0x3, 0x423, 0x4, 0x7, 0x6, 0x4, 0xf06a, 0x9, 0x9, 0x3, 0x4, 0xc0e, 0xe7, 0x3, 0x1, 0x4, 0x101, 0x2, 0xb5, 0x1, 0xfffff801, 0x9, 0x7, 0x4, 0x2, 0x6, 0x0, 0x2, 0xffff, 0x2, 0x9, 0x3ff, 0x1, 0x6, 0x1, 0x7f, 0x3ff, 0x3ff, 0x3, 0x6, 0x1, 0x3ff, 0x3, 0xf669, 0x0, 0x47, 0x3, 0x9, 0x24, 0x1b30ed4e, 0x0, 0x8, 0x6, 0x2, 0x1, 0x7, 0x5, 0x4, 0x81, 0x7fff, 0x3, 0x10, 0x1, 0x5, 0xfffffffd, 0x3a40000, 0x7f, 0xbd, 0x800, 0x8, 0x200, 0x8, 0xdc, 0x25cb, 0xea, 0x8, 0x80000001, 0x7, 0x610a, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x1ff, 0x37b4, 0x5, 0x0, 0x1, 0x0, 0x1, 0x200, 0x3, 0x101, 0x2, 0x2, 0x5, 0x3, 0xfff, 0x3, 0xffff, 0x4, 0x7, 0x6, 0x7, 0x5, 0x4, 0xfffffff8, 0x5, 0x3, 0x9, 0x2, 0xfffffc01, 0x1, 0x6, 0x7, 0x4, 0x7ada2535, 0x5, 0x7, 0x5, 0xffff0001, 0x1, 0x12f5, 0x6, 0x4, 0x0, 0xffff, 0x4, 0x7, 0x7f, 0x7, 0x4, 0x5, 0x4, 0x4, 0x6, 0x7, 0x6, 0x5f40, 0x7, 0x7ff, 0x5ba, 0x9, 0xd7]}]}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 33.663246064s ago: executing program 0 (id=3547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 21.748434736s ago: executing program 4 (id=3552): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x200000100000011, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x20048000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) 21.727058756s ago: executing program 0 (id=3553): timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000d80)={[{@dioread_lock}, {@auto_da_alloc}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) 20.249285214s ago: executing program 0 (id=3561): r0 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff}]) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockname$packet(r0, 0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40020) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 18.673420063s ago: executing program 0 (id=3563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 18.585662654s ago: executing program 4 (id=3564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8a, {0x2, 0x100004000000, 0x100000007, 0x0, 0x0, 0x3881fffc, {0x8005, 0xfffffffffffffffc, 0x47fffd, 0x80, 0x8000000000000000, 0x4, 0xa, 0x0, 0x4, 0x8000, 0x80000004, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}, {0x2, 0x8}], {0x4, 0x4}, [{0x8, 0x3}, {}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x1, 0xee00}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x0, r3}, {0x8, 0x0, r4}], {0x10, 0x2}, {0x20, 0x6}}, 0x8c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000600000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x82100, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}, {&(0x7f0000000180)="d5", 0x1}], 0x3) 16.706406169s ago: executing program 0 (id=3566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$inet_mreqn(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='veth0_vlan\x00', 0x100, 0x6, 0xaff5}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xf306, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) 16.67635459s ago: executing program 2 (id=3567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newchain={0x76c, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xe}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x324, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x42, 0x3, 0x4, 0x4, 0x6, {0x7, 0x1, 0x28a, 0x2, 0x7, 0xec30}, {0x2, 0x0, 0x2, 0xff, 0x9, 0xffff}, 0x2c34, 0x5, 0x3}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x2e6f}, @TCA_FLOW_ACT={0x2d0, 0x9, 0x0, 0x1, [@m_skbmod={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x21, 0x6, "daa1a91c21924e6d52d53dcd9335291638789f300ff0475bd8cc353454"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x84, 0x9, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0xb, 0x7}}, @TCA_DEF_DATA={0x7, 0x3, '#! '}, @TCA_DEF_DATA={0x12, 0x3, 'cbc(des3_ede)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x10000000, 0xc873, 0x6b2}}]}, {0xa, 0x6, "3c4128159f21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x14c, 0xe, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xb32}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x4, 0x9, 0x4}, 0x1}}]}, {0xf2, 0x6, "ff08a8c8d53f6f19debfbb1b7cbddde44522a355889b5de012d50db6e9062d59b7e88249298741be19ba0145c87c475c31251dbce6b8341ef439d67dd42ebdafae6d2109ed2e2c1c4ae7ac603bb1f25536ffc55501e073dd6bfe231464912f0df8316a14c7f282cb29caef15f12e207ca338061cffa4566dafc81b7db4051ee0eb054b5e757eee26b8aae01d85cf57a2a6e5e8ddf63ec464a5b8f04ce8b7e077709640e60c70840994c63d33d926717aab542539d91bdbefde6c117c091dd38c8fe8c56556acd40ae4892668bb01ef4b55ae913d5ca4ecd83244c9efaa61025ee603967357509a3037c51b5a13e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x50, 0x17, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x50, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "f2195a930e135c74933beefccfebf1af1947a458d74950e21d1c892636"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x4, 0x2, 0x9, 0x4, 0xa6, 0x7c0, 0x283451f, 0x800, 0x4, 0xbc7e, 0x8, 0x6, 0x3, 0x100, 0x10000, 0x611, 0x7f, 0xffffbca3, 0x13b0f170, 0x8, 0x7, 0x1, 0x7, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7, 0xa, 0x9, 0x1000, 0x6, 0x0, 0xe8b1, 0x3, 0x6, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x5, 0x7, 0x7, 0x81, 0x6, 0x7, 0x8, 0x8, 0xfffffffb, 0x7fff, 0x5, 0xb0f7, 0x6, 0xd6, 0x18000, 0xd09, 0x5, 0x7f1, 0x2, 0x5f3, 0x1, 0x7, 0x9, 0x400, 0x9, 0x0, 0xc, 0x6, 0xff, 0x80000000, 0x200, 0x8, 0xfffffffa, 0x4e4, 0x2, 0x5, 0x1, 0x81, 0x5, 0x7, 0x9, 0x2, 0x4, 0x1109ba77, 0x7, 0x2, 0x1000, 0x5, 0x3, 0x8, 0x7, 0xd, 0x3ff, 0x1, 0x8, 0x1, 0x8, 0xf37, 0x3, 0x66, 0x4, 0x7, 0x2, 0x5, 0x8000, 0x3, 0x423, 0x4, 0x7, 0x6, 0x4, 0xf06a, 0x9, 0x9, 0x3, 0x4, 0xc0e, 0xe7, 0x3, 0x1, 0x4, 0x101, 0x2, 0xb5, 0x1, 0xfffff801, 0x9, 0x7, 0x4, 0x2, 0x6, 0x0, 0x2, 0xffff, 0x2, 0x9, 0x3ff, 0x1, 0x6, 0x1, 0x7f, 0x3ff, 0x3ff, 0x3, 0x6, 0x1, 0x3ff, 0x3, 0xf669, 0x0, 0x47, 0x3, 0x9, 0x24, 0x1b30ed4e, 0x0, 0x8, 0x6, 0x2, 0x1, 0x7, 0x5, 0x4, 0x81, 0x7fff, 0x3, 0x10, 0x1, 0x5, 0xfffffffd, 0x3a40000, 0x7f, 0xbd, 0x800, 0x8, 0x200, 0x8, 0xdc, 0x25cb, 0xea, 0x8, 0x80000001, 0x7, 0x610a, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x1ff, 0x37b4, 0x5, 0x0, 0x1, 0x0, 0x1, 0x200, 0x3, 0x101, 0x2, 0x2, 0x5, 0x3, 0xfff, 0x3, 0xffff, 0x4, 0x7, 0x6, 0x7, 0x5, 0x4, 0xfffffff8, 0x5, 0x3, 0x9, 0x2, 0xfffffc01, 0x1, 0x6, 0x7, 0x4, 0x7ada2535, 0x5, 0x7, 0x5, 0xffff0001, 0x1, 0x12f5, 0x6, 0x4, 0x0, 0xffff, 0x4, 0x7, 0x7f, 0x7, 0x4, 0x5, 0x4, 0x4, 0x6, 0x7, 0x6, 0x5f40, 0x7, 0x7ff, 0x5ba, 0x9, 0xd7]}]}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 16.608382321s ago: executing program 2 (id=3568): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 16.195657329s ago: executing program 2 (id=3569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x21, 0x0, @private1, @private1}}}}}}}, 0x0) 15.687138109s ago: executing program 1 (id=3570): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1527, &(0x7f00000002c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 13.969226821s ago: executing program 2 (id=3571): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x4, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1527, &(0x7f00000002c0)="$eJzs3Au4TtX2MPAx5pyLbefyJrmvMcfiTS6TJMklSS5JkoQj9yQJSZIkscktCUnIdSe5h9zTTtv9fsk9SY4kSUJCwvyeXfo7dTpf53/+/T/nO3v8nmc9e4611hzvWHvs913vfPez99ddhlZrWL1yPWaGf4X+ZYA/f0kCgAQAGAAA2QAgAIDS2UtnTzueSWPSv/Qg4n9J/elXuwJxNUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYzz7Wypd9NPv///5z6n0yW+/9/HsS/3/WPzpX+/6fR/62zpf/pRobf2yn9Ty9+/xYg/U/fpP/pWXC1CxBXmTz/0zfpvxDp2p/+mfL6c1f7M+1/ZpuS8erX8G+xCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c81cYAPhlfLXrEkIIIYQQQgghxJ/Hv3u1KxBCCCGEEEIIIcT/PgQFGgwEkAEyQgJkgkS4BjJDFsgK2SAG10J2uA5ywPWQE3JBbsgDeSEf5IcQCCwwRFAACkIcboBCcCMUhiJQFIqBg+JQAm6CknAzlIJboDTcCmXgNigL5aA8VIDboSLcAZXgTqgMd0EVqArVoDrcDTXgHqgJ90ItuA9qw/1QBx6AuvAg1IP60AD+Ag3hIWgEjaEJNIVm0Bxa/MH85Gy/N/956A4vQA/oCUnQC3rDi9AH+kI/6A8D4CUYCC/DIHgFBsMQGAqvwjB4DYbD6zACRsIoeANGwxgYC+NgPEyAZHgTJsJbMAnefigLTIGpMA2mwwyYCe/ALJgNc+BdmAvzYD4kZ1oIi2AxvAdL4H1IgQ9gKXwIqbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8BFsg+2wA3bCLtgNe+Bj2AufwD74FPbjZ//N+Wd/PR+6IiCgQoUGDWbADJiACZiIiZgZM2NWzIoxjGF2zI45MAfmxJyYG3NjXsyL+TE/EhIyMhbAAhjHOBbCQlgYC2NRLIoOHZbAElgSb8ZSWApLY2ksg2WwLJbDclgBK2BFrIiVsBJWxspYBatgNayGd+PdeA/WxJpYC2thbayNdbAO1sW6WA/rYQNsgA2xITbCRtgEm2AzbIYtsAW2xJbYCltha2yNbbANtsW22B7bYwfsgB2xI3bCTtgZO2MX7IJd8Tl8Dp/H5/EFfAF7YhXVC3tjb+yDfbAf9sf++BIOxJfxZXwFB+MQHIqv4qv4Gg7HMzgCR+IoHIUV1Rgci+OQ1QRMxmTMCBNxEk7CyTgFp+A0nI4zcCbOxFk4G2fjuzgX5+E8XIALcBEuxsW4BN/HFEzBpXgWU3EZLscVuBJX4Upcg2txDa7HDbgeN+Em3IJb8CP8CLfjdtyJO3E37saP8WP8BD/Bwbgf9+MBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5ADiP5/ECXsBLeCntya/SGGVUBpVBJagElagSVWaVWWVVWVVMxVR2lV3lUDlUTpVT5Va5VV6VV+VX+RUpUqwiVUAVUHEVV4VUIVVYFVZFVVHllFMlVAlVUpVUpVQpVVrdqsqo21RZVU496iqoCqqiau0qqTtVZVVZVVFVVTVVXVVXNVQNVVPVVLVULVVb1VZ11AOqruqF/bC+SutMQzUEG6mh2EQ1Vc1Uc/UaPqxaquHYSj2qWqvH1EgcgW1VS9dePaE6qLHYUT2lxuHTqrOagF3Us6qrek51U8+r7qqV66F6qsnYS/VW07CP6qv6qf5qFlZVaR2rpl5Rg9UQNVS9qhbha2q4el2NUCPVKPWGGq3GqLFqnBqvJqhk9aaaqN5Sk9TbarKaoqaqaWq6mqFmqnfULDVbzVHvqrlqnpqvFqiFapFarN5TS9T7KkV9oJaqD1WqWqaWqxVqpVqlVqs1aq1ap9arDWqj2qQ2qy1qq/pIbVPb1Q61U+1Su9Ue9bHaqz5R+9Snar/6TB1Qf1UH1efqkPpCHVZfqiPqK3VUfa2OqW/UcfWtOqFOqlPqO3Vafa/OqLPqnPpBnVc/qgvqorqkvAKNWmmtjQ50Bp1RJ+hMOlFfozPrLDqrzqZj+lqdXV+nc+jrdU6dS+c2eXRenU/n16EmbTXrSBfQBXVc36AL6Rt1YV1EF9XFtNPFdQl9ky6pb9al9C26tL5Vl9G36bK6nC7vQd+uK+o7dCV9p66s79JVdFVdTVfXd+sa+h5dU9+ra+n7dG19v66jH9B19YO6nq6vG+gMl+9ZjXUT3VQ30811C/2wbqkf0a30o7q1fky30Y9Dkm6n2+sndAf9pO6on9Kd9NO6s35Gd9HP6q76Od1NX9SXtNc9dE+dpHvp3vpF3Uf31f10fz1Av6QH6pf1IP2KHqyH6KH6VT1Mv6aH69f1CD1Sj9Jv6NF6jB6rx+nxeoJO1m/qifotPUm/rSfrKXqqnqan6xm63+VMc/6J+W/9zvxBPz36Fr1Vf6S36e16h96pd+ndeo/eo/fqvXqf3qf36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+vj+oQ+qX/Q3+nT+nt9Rp/VZ/UP+rw+ry9c/h6AQaOMNsYEJoPJaBJMJpNorjGZTRaT1WQzMXOtyW6uMznM9SanyWVymzwmr8ln8pvQkLGGTWQKmIImbm4whcyNprApYoqaYsaZ4qaEuel/PP+P6mthWpiWpqVpZVqZ1qa1aWPamLamrWlv2psOpoPpaDqaTqaT6Ww6my6mi+lquppuppvpbrqbHqaHSTJJprd50fQxfU0/098MMC+ZgWagGWQGmcFmsBlqhpphZpgZboabEWaEGWVGmdFmtBlrxprxZrxJ9tnMRDPRTDKTzGQz2UwdkM1MN9PNTDPTzDKzzBwzx8w1c818M98sNAvNYrPYLDFLTIpJMUvNUpNqlpllZoVZYVaZVWaNWWPWmXVmg9lgNplNJtVsNVvNNrPN7DA7zC6zy+wxe8xes9fsM/vMfrPfHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHlz3lwwF8wlcyntbV+gAhWYwAQZggxBQpAQJAaJQeYgc5A1yBrEgliQPcge5AiuD3IGuYLcQZ4gb5AvyB+EAQU24CAKCgQFg3hwQ1AouDEoHBQJigbFAhcUD0oENwUlg5uDUsEtQeng1qBMcFtQNigXlA8qBLcHFYM7gkrBnUHl4K6gSlA1qBZUD+4OagT3BDWDe4NawX1B7eD+oE7wQFA3eDCoF9QPGgR/CRoGDwWNgsZBk6Bp0CxoHrT4U/N7fybXI65H2DNMCnuFvcMXwz5h37Bf2D8cEL4UDgxfDgeFr4SDwyHh0PDVcFj4Wjg8fD0cEY4MR4VvhKPDMeHYcFw4PpwQJodvhhPDt8JJ4dvh5HBKODWYFk4PZ4Qzw3fCWeHscE74bjg3nBfODxeEC8NFIeLPr2wp4Qfh0vDDMDVcFi4PV4Qrw1Xh6nBNuDZcF64PN4Qbw02lB/58argt3B7uCHeGu8Ld4Z7w43Bv+Em4L/w03B9+Fh4I/xoeDD8PD4VfhIfDL8Mj4Vfh0fDr8Fj4TXg8/DY8EZ7MBOF34enw+/BMeDY8F/4Qng9/DC+EF8NLoU97c592eydDhjJQBkqgBEqkRMpMmSkrZaUYxSg7ZacclINyUk7KTbkpL+Wl/JSf0jAxFaACFKc4FaJCVJgKU1EqSo4claASVJJKUikqRaWpNJWhMlSWLJWn8nQ73U530B10J91Jd9FdVJWqUnWqTog1qCbVpFpUi2pTbapDdagu1aV6VI8aUANqSA2pETWiJtSEmlEzakEtqCW1pFbUilpTa2pDbagttaX21J46UAfqSB2pE3WiztSZulAX6kpdqRt1o+7UnXpQD0qiJOpNvakP9aF+1I8G0AAaSANpEA2iwTSYhtJQGkbDaDgNpxE0kkbRGzSaxtBYGkfjaQIlUzJNpIk0iSbRZJpMU2kqTafpNJNm0iyaRXNoDs2luTSf5tNCWkiLaTEtoSWUQim0lJZSKqXSclpOK2klrabVtJbW0npaTxtpI22mzbSVttI22kY7aAftol20h/bQXtpL+2gf7af9dIAO0EE6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7QKTpFp+k0naEzdI7O0Xn6kS7QRbpEnhJsJptor7GZbRab1Wazv41z2zw2r81n89vQ5rS5fhWTtbawLWKL2mLW2eK2hL3p7+KytpwtbyvY221Fe4etZMvaTPC3cQ17j61p77W17H22ur37V3Fte7+tYx+ydW1jW882tQ1sc9vQPmQb2ca2iW1qm9nmto193La17Wx7+4TtYJ/8u3iJfd+utevservB7rWf2HP2B3vUfm3P2x9tD9vTDrAv2YH2ZTvIvmIH2yG/jgHsKPuGHW3H2LF2nB1vJ/xdPNVOs9PtDDD2HTvLzv4ltjMvx4vte3auTbHz7QK70C76KU6rKcV+YJfaD22qXWaX2xV2pV1lV9s1/1XrCrvJbrZb7B77sd1mt9sddqfdZXf/FKddxz77qd1vP7NH7Ff2oP3cHrLH7GH75U9x2vUds9/Y4/Zbe8KetKfsd/a0/d6esWd/uv60a//OXrSXrLfAyIo1Gw44A2fkBM7EiXwNZ+YsnJWzcYyv5ex8Hefg6zkn5+LcnIfzcj7OzyETW2aOuAAX5DjfwIX4Ri7MRbgoF2PHxbkE38Ql+WYuxbdwab6Vy/BtXJbLcXmuwLdzRb6DK/GdXJnv4ipclatxdb6ba/A9XJPv5Vp8H9fm+7kOP8B1+UGux/W5Af+FG/JD3IgbcxNuys24OQM/zC35EW7Fj3Jrfozb8OPclttxe36CO/CT3JGf4k78NHfmZ7gLP8td+Tnuxs9zd36Be3BPTuJe3Jtf5D7cl/txfx7AL/FAfpkH8Ss8mIfwUH6Vh/FrPJxf5xE8kkfxGzyax/BYHsfjeQIn85s8kd/iSfw2T+YpPJWn8XSewTP5HZ7Fs3kOv8tzeR7P5wW8kBfxYn6Pl/D7nMIf8FL+kFN5GS/nFbySV/FqXsNreR2v5w28kTfxZt7CW/kj3sbbeQfv5F28m/fwx7yXP+F9/Cnv58/4AP+VD/LnfIi/4MP8JR/hr/gof83H+Bs+zt/yCT7Jp/g7Ps3f8xk+y+f4Bz7PP/IFvsiX2DNEGKlIRyYKogxRxighyhQlRtdEmaMsUdYoWxSLro2yR9dFOaLro5xRrih3lCfKG+WL8kdhRJGNOIqiAlHBKB7dEBWKbowKR0WiolGxyEXFoxLRTVHJ6OaoVHRLVDq6NSoT3RaVjcpF5aMK0e1RxeiOqFJ0Z1Q5uiuqElWNqkXVo7ujGtE9Uc3o3qhWdF9UKro/qhM9ENWNHozqRfWjBtFfoobRQ1GjqHHUJGoaNYuaRy2ih6OW0SNRAgC0jh6L2kSPR22jdlH76ImoQ/Tkfx1vVST4+W76m+NJUa9IX15t3KsXxhfFF8ffiy+Jvx9PiX8QXxr/MJ4aXxZfHl8RXxlfFV8dXxNfG18XXx/fEN8Y3xTfHN8S9756RnCYthAG4wKXwWV0CS6TS3TXuMwui8vqsrmYu9Zld9e5HO56l9PlcrldHpfX5XP5XejIXa4MCrq4u8EVcje6wq6IK+qKOeeKuxKuuWvhWriW7hHXyj3qWrvH3GPucfe4a+fauSdcB/ek6+iecp3c066ze8Y94551Xd1zrpt73nV3L7gerqdLckmut+vt+rg+rp/r5wa4AW6gG+gGuUFusBvshrqhbpgb5oa74W6EG+FGuVFutBvtxrqxbrwb75JdspvoJrpJbpKb7Ca7qW6qm+6mu5luppvlZrk5bo6b6+a6+W6+W+gWusVusVvilrgUl+KWuqUu1aW65W65W+lWutVutVvr1rr1br3b6Da6zW6z2+q2um1um9vhdrhdbpfb4/a4vW6v2+f2uf1uvzvgDriD7qA75L5wh92X7oj7yh11X7tj7ht33H3rTriT7pT7zp1237sz7qw7535w592P7oK76C4575Jjb8Ymxt6KTYq9HZscmxKbGpsWmx6bEZsZeyc2KzY7Nif2bmxubF5sfmxBbGFsUWxx7L3Yktj7sZTYB7GlsQ9jqbFlseWxFbGVsVUx7/Nti3wBX9DH/Q2+kL/RF/ZFfFFfzDtf3JfwN/mS/mZfyt/iS/tbfRl/my/ry/nyvrFv4pv6Zr65b+Ef9i39I76Vf9S39o/5Nv5x39a38+39E76Df9J39E/5Tv5p39k/47v4Z+dd/vHw3f0Lvofv6ZN8L9/bv+j7+L6+n+/vB/iX/ED/sh/kX/GD/RA/1L/qh/nX/HD/uh/hR/pR/g0/2o/xY/04P95P8Mn+TT/Rv+Un+bf9ZD/FT/XT/HQ/w8/07/hZfraf49/1c/08P98v8Av9Ir/Yv+eX+Pd9iv/AL/Uf+lS/zC/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWnxG2+e1+h9/pd/ndfo//2O/1n/h9/lO/33/mD/i/+oP+c3/If+EP+y/9Ef+VP+q/9sf8N/64/9af8Cf9Kf+dP+2/92f8WX/O/+DP+x/9BX/RX5K/WRNCCCGE+KfoPzje63f2qcubAYDeAJBle57Dv825MefP475qb4cYADzRs0v9X7b69ZOSki6fm2ogKLgAAGJX5v/0W57L8TJoDY9De3gUSv5ufX1VeeTf5A/+5niqhiB+K0AiQKZf9qWtCRPht/lv/gf5G7/32/y/qj8t/wKAwgWvzEl7oF/iK/lL/YP8u9v8Qf5MnycDtPqbOZnhSnwlfwl4BJ6E9r86UwghhBBCCCGE+Flfdb7rH61v09bnec2VORnhSvxH6/M/UOnPuAYhhBBCCCGEEEL83z39XLd2D7dv/2in/8iBAoDnurXL+O9Sz1UfIAD8G5Qhg3//wdV+ZRJCCCGEEEL82a686b/alQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnXv/4fwtQ/ffLVvkYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiavs/AQAA//9vy0hN") 13.339833422s ago: executing program 1 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4044800) madvise(&(0x7f00004ca000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 12.443554619s ago: executing program 1 (id=3573): r0 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff}]) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockname$packet(r0, 0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40020) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 11.368179419s ago: executing program 1 (id=3574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 10.77966898s ago: executing program 2 (id=3575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3.377980268s ago: executing program 33 (id=3564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8a, {0x2, 0x100004000000, 0x100000007, 0x0, 0x0, 0x3881fffc, {0x8005, 0xfffffffffffffffc, 0x47fffd, 0x80, 0x8000000000000000, 0x4, 0xa, 0x0, 0x4, 0x8000, 0x80000004, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}, {0x2, 0x8}], {0x4, 0x4}, [{0x8, 0x3}, {}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x1, 0xee00}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x0, r3}, {0x8, 0x0, r4}], {0x10, 0x2}, {0x20, 0x6}}, 0x8c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000600000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x82100, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec90806fbe863cac50580cd", 0x16}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad", 0x14}, {&(0x7f0000000180)="d5", 0x1}], 0x3) 1.384220945s ago: executing program 34 (id=3566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$inet_mreqn(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='veth0_vlan\x00', 0x100, 0x6, 0xaff5}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xf306, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) 1.151290569s ago: executing program 1 (id=3578): socket(0x200000100000011, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a090000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 967.907932ms ago: executing program 2 (id=3579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xc0001f320d7d6700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)=ANY=[], 0xb4}}, 0x890) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050) 0s ago: executing program 1 (id=3580): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x7da5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.671591][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.674508][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.676601][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.685463][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.701599][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.721728][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.723864][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.746803][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.772275][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.786274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.824092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.844233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.864721][T12581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.867874][T12581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.881490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.884432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.887940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.935180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.947578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.993326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.011157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.019255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.039776][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2920'. [ 349.239605][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 349.494073][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.496500][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.522914][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.618401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.623022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.641666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.646732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.667585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.679932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.700822][T12581] device veth0_vlan entered promiscuous mode [ 349.707457][T12581] device veth1_vlan entered promiscuous mode [ 349.786775][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.795774][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.804257][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.819215][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.830377][T12581] device veth0_macvtap entered promiscuous mode [ 349.835460][T12581] device veth1_macvtap entered promiscuous mode [ 349.965470][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.974013][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.985229][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.995007][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.004604][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.016700][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.032890][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.050303][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.053371][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.056162][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.067096][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.084044][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.087065][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.101654][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.118419][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.126987][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.136777][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.148443][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.161172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.164444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.177018][T12581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.186710][T12581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.196089][T12581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.206649][T12581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.235800][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2931'. [ 350.258330][ T4303] Bluetooth: hci5: command 0x041b tx timeout [ 350.437225][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.445243][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.470886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.510866][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.513466][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.520109][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.157682][ T4312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.164192][ T4312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.167176][ T4312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.188626][ T4312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.192353][ T4312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 351.194603][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.071033][ T4467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.181545][ T4467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.328263][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 352.361157][ T4467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.418582][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2942'. [ 352.747863][T12795] chnl_net:caif_netlink_parms(): no params data found [ 352.930140][T12795] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.932380][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.935432][T12795] device bridge_slave_0 entered promiscuous mode [ 352.982960][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.985109][T12795] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.987893][T12795] device bridge_slave_1 entered promiscuous mode [ 353.114069][T12795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.177454][T12795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.202475][ T4467] tipc: Left network mode [ 353.218136][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 353.322791][T12795] team0: Port device team_slave_0 added [ 353.354110][T12795] team0: Port device team_slave_1 added [ 353.507432][T12795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.521384][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.564153][T12795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.642589][T12795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.644926][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.664745][T12795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.931422][T12904] netlink: 'syz.0.2953': attribute type 11 has an invalid length. [ 353.971634][T12795] device hsr_slave_0 entered promiscuous mode [ 354.008926][T12795] device hsr_slave_1 entered promiscuous mode [ 354.055968][T12795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.059736][T12795] Cannot create hsr debugfs directory [ 354.132062][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 354.410768][ T4303] Bluetooth: hci5: command 0x0419 tx timeout [ 354.675880][T12942] input: syz1 as /devices/virtual/input/input7 [ 354.778642][T12936] Cannot find del_set index 0 as target [ 354.824107][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.835438][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.172836][T12961] device vlan3 entered promiscuous mode [ 355.174655][T12961] device bridge0 entered promiscuous mode [ 355.288277][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 355.813596][ T4467] device hsr_slave_0 left promiscuous mode [ 355.856357][ T4467] device hsr_slave_1 left promiscuous mode [ 355.938926][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.941254][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.943983][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.946377][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.974603][ T4467] device bridge_slave_1 left promiscuous mode [ 355.976435][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.024959][ T4467] device bridge_slave_0 left promiscuous mode [ 356.026969][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.799037][ T4467] device veth1_macvtap left promiscuous mode [ 356.800863][ T4467] device veth0_macvtap left promiscuous mode [ 356.802692][ T4467] device veth1_vlan left promiscuous mode [ 356.804389][ T4467] device veth0_vlan left promiscuous mode [ 357.368102][ T4303] Bluetooth: hci0: command 0x040f tx timeout [ 359.452303][ T4312] Bluetooth: hci0: command 0x0419 tx timeout [ 360.513577][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 360.736461][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 360.939082][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.978535][ T4467] device bond_slave_1 left promiscuous mode [ 361.160971][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.198776][ T4467] device bond_slave_0 left promiscuous mode [ 363.831281][ T4467] bond0 (unregistering): Released all slaves [ 364.352291][T12795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.400036][T12795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.445847][T12795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.500014][T12795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.774071][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.786029][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.797063][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.812641][T12795] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.824927][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.836067][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.844414][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.846626][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.880098][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.907840][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.923972][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.926789][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.928825][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.931293][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.934334][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.940531][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.944232][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.948733][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.978984][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.983258][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.021986][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.024884][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.054341][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.057656][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.069801][T12795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.361871][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2983'. [ 365.563747][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.566037][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.595876][T12795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.170017][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.198520][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.278715][T13115] random: crng reseeded on system resumption [ 366.840419][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.866664][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.909867][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.912942][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.915915][T13122] device veth0_vlan left promiscuous mode [ 366.918887][T13122] device veth0_vlan entered promiscuous mode [ 367.025450][T12795] device veth0_vlan entered promiscuous mode [ 367.031634][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.034601][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.079259][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.086480][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.100846][T12795] device veth1_vlan entered promiscuous mode [ 367.156428][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.159923][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.162828][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.175723][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.186639][T12795] device veth0_macvtap entered promiscuous mode [ 367.200778][T12795] device veth1_macvtap entered promiscuous mode [ 367.233603][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.242006][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.249206][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.254502][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.258162][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.264701][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.275170][T12795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.284855][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.287805][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.291551][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.298835][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.307677][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.311128][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.315303][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.320593][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.331483][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.335362][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.340174][T12795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.342554][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.345802][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.352507][T12795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.355298][T12795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.357840][T12795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.369261][T12795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.477979][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.481610][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.503649][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.526408][ T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.533179][ T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.539336][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.843371][T13160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2999'. [ 368.070717][ T4312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.075170][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.080610][ T4314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.091093][ T4314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.093692][ T4314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 368.095898][ T4314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.935573][T13171] chnl_net:caif_netlink_parms(): no params data found [ 369.086167][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.096323][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.112405][T13171] device bridge_slave_0 entered promiscuous mode [ 369.135552][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.149465][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.164881][T13171] device bridge_slave_1 entered promiscuous mode [ 369.203604][T13198] netlink: 'syz.4.3007': attribute type 9 has an invalid length. [ 369.205941][T13198] netlink: 'syz.4.3007': attribute type 6 has an invalid length. [ 369.208764][T13198] netlink: 'syz.4.3007': attribute type 7 has an invalid length. [ 369.211001][T13198] netlink: 'syz.4.3007': attribute type 8 has an invalid length. [ 369.213171][T13198] netlink: 'syz.4.3007': attribute type 13 has an invalid length. [ 369.280388][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.297397][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.350009][T13171] team0: Port device team_slave_0 added [ 369.362920][T13171] team0: Port device team_slave_1 added [ 369.391249][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.393175][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.401323][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.405719][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.407677][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.415173][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.510280][T13171] device hsr_slave_0 entered promiscuous mode [ 369.548466][T13171] device hsr_slave_1 entered promiscuous mode [ 369.588317][T13171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.590731][T13171] Cannot create hsr debugfs directory [ 370.168871][ T4314] Bluetooth: hci1: command 0x0409 tx timeout [ 371.342006][ T27] kauditd_printk_skb: 1550 callbacks suppressed [ 371.342019][ T27] audit: type=1326 audit(371.320:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9175a7a8 code=0x7ffc0000 [ 371.353596][ T27] audit: type=1326 audit(371.330:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9175a7a8 code=0x7ffc0000 [ 371.369207][ T27] audit: type=1326 audit(371.330:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffff9175a7a8 code=0x7ffc0000 [ 371.385369][ T27] audit: type=1326 audit(371.330:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9175a7a8 code=0x7ffc0000 [ 371.391952][ T27] audit: type=1326 audit(371.330:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9175a7a8 code=0x7ffc0000 [ 372.248180][ T4314] Bluetooth: hci1: command 0x041b tx timeout [ 373.168472][ T4529] bond0: (slave erspan0): Releasing backup interface [ 373.271121][T13171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.392569][T13171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.561342][T13171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.651794][T13171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.668599][ T4529] IPVS: stopping master sync thread 6748 ... [ 374.328077][ T4303] Bluetooth: hci1: command 0x040f tx timeout [ 374.666283][ T27] audit: type=1326 audit(374.570:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a7a8 code=0x7ffc0000 [ 374.676490][ T27] audit: type=1326 audit(374.650:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b42b81c code=0x7ffc0000 [ 374.708071][ T27] audit: type=1326 audit(374.660:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b42b81c code=0x7ffc0000 [ 374.718496][T13171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.738771][ T27] audit: type=1326 audit(374.660:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b42b81c code=0x7ffc0000 [ 374.774898][ T27] audit: type=1326 audit(374.660:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.3028" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b42b81c code=0x7ffc0000 [ 374.906023][ T4529] device hsr_slave_0 left promiscuous mode [ 375.031763][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.038694][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.042040][ T4529] device bridge_slave_1 left promiscuous mode [ 375.043938][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.099441][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.718446][ T4529] device veth0_vlan left promiscuous mode [ 376.408270][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 376.418986][ T4529] bond1 (unregistering): (slave geneve3): Releasing active interface [ 376.809786][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.811631][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.120642][ T4529] bond1 (unregistering): Released all slaves [ 379.242679][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 379.421069][ T4529] team0 (unregistering): Port device team_slave_0 removed [ 379.618867][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.838931][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.393627][ T4529] bond0 (unregistering): Released all slaves [ 382.725878][T13395] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3043'. [ 382.738975][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3044'. [ 382.758220][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.761119][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.771386][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.799407][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.802376][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.805274][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.807249][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.830974][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.833904][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.836420][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.838441][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.911551][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.914247][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.917642][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.934665][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.944545][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.947886][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.953441][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.966256][T13171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.973021][T13171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.977395][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.983951][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.990818][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.009154][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.027599][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.044989][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.047461][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 383.292217][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 383.576552][T13171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.603582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.605895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.647555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.692469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.711364][T13171] device veth0_vlan entered promiscuous mode [ 383.742380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.745292][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.751679][T13171] device veth1_vlan entered promiscuous mode [ 383.763086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.765947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.799915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.860620][ T4303] Bluetooth: hci3: link tx timeout [ 383.862233][ T4303] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 383.864373][ T4303] Bluetooth: hci3: link tx timeout [ 383.865732][ T4303] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.922672][T13171] device veth0_macvtap entered promiscuous mode [ 383.925410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.933067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.936718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.946452][T13171] device veth1_macvtap entered promiscuous mode [ 383.988596][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.991623][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.994354][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.997219][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.027919][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.031986][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.066279][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.078999][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.109068][T13171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.128403][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 384.131145][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.133970][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.150832][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.153857][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.156587][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.178837][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.181594][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.199213][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.202017][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.213196][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.222075][T13171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.237667][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.243113][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.262269][T13171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.264725][T13171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.267080][T13171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.286742][T13171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.429613][ T4759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.442286][ T4759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.463882][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.496333][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.508603][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.515366][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.885008][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 384.887965][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 384.899095][T13477] netlink: 'syz.1.3057': attribute type 12 has an invalid length. [ 384.909391][T13477] netlink: 'syz.1.3057': attribute type 13 has an invalid length. [ 385.218213][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.243704][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.570931][T13495] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 386.532286][T13511] syz.4.3069 (13511): /proc/13510/oom_adj is deprecated, please use /proc/13510/oom_score_adj instead. [ 386.586952][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 386.596331][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 386.622872][T13513] netlink: 'syz.2.3070': attribute type 12 has an invalid length. [ 386.625081][T13513] netlink: 'syz.2.3070': attribute type 13 has an invalid length. [ 386.774067][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.776764][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.206450][T13546] sctp: [Deprecated]: syz.3.3085 (pid 13546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.206450][T13546] Use struct sctp_sack_info instead [ 387.490184][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 387.492692][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3088'. [ 388.377648][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 388.380607][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3100'. [ 389.535119][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'. [ 389.551206][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3113'. [ 390.070280][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.074473][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.086275][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.091869][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.347593][T13642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.356931][T13642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.436283][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.441474][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.364946][T13677] netlink: 'syz.1.3133': attribute type 10 has an invalid length. [ 391.387093][T13677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3133'. [ 391.428304][T13677] batman_adv: batadv0: Adding interface: virt_wifi0 [ 391.438792][T13677] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.486216][T13677] batman_adv: batadv0: Interface activated: virt_wifi0 [ 391.601034][T13692] usb usb8: usbfs: process 13692 (syz.3.3143) did not claim interface 0 before use [ 392.681029][T13733] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3156'. [ 392.686829][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3159'. [ 392.700056][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3159'. [ 393.701767][T13760] loop6: detected capacity change from 0 to 7 [ 393.707108][T13760] Dev loop6: unable to read RDB block 7 [ 393.712286][T13760] loop6: unable to read partition table [ 393.716361][T13760] loop6: partition table beyond EOD, truncated [ 393.725226][T13760] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 393.788554][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 393.791366][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3170'. [ 394.219752][T13784] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 394.328948][T13786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.363510][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3181'. [ 394.374811][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3181'. [ 395.250765][ T4314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.255913][T13823] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.256310][ T4314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.261606][ T4314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.264456][ T4314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.269094][ T4314] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.271601][ T4314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.727873][T13821] chnl_net:caif_netlink_parms(): no params data found [ 395.907015][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.909929][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.913481][T13821] device bridge_slave_0 entered promiscuous mode [ 395.919591][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.921573][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.924345][T13821] device bridge_slave_1 entered promiscuous mode [ 396.100761][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.118877][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.216553][T13821] team0: Port device team_slave_0 added [ 396.224695][T13821] team0: Port device team_slave_1 added [ 396.290782][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.292831][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.306089][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.344945][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.346975][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.387451][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.509891][T13821] device hsr_slave_0 entered promiscuous mode [ 396.548442][T13821] device hsr_slave_1 entered promiscuous mode [ 396.588178][T13821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.590290][T13821] Cannot create hsr debugfs directory [ 397.173250][T13821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.298103][ T4314] Bluetooth: hci4: command 0x0409 tx timeout [ 397.332355][T13821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.368238][ T4314] Bluetooth: hci4: command 0x041b tx timeout [ 399.962682][T13821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.085362][T13957] loop1: detected capacity change from 0 to 1024 [ 400.154624][T13961] loop2: detected capacity change from 0 to 256 [ 400.178567][T13957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 400.363158][T13821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.448116][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 401.543860][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 401.781484][T13988] loop4: detected capacity change from 0 to 512 [ 401.896385][T13988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.990935][T12581] EXT4-fs (loop1): unmounting filesystem. [ 403.016903][T13988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 403.231805][T13988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3228: bg 0: block 248: padding at end of block bitmap is not set [ 403.256297][T13988] __quota_error: 1227 callbacks suppressed [ 403.258117][T13988] Quota error (device loop4): write_blk: dquota write failed [ 403.261754][T13988] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 403.264690][T13988] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.3228: Failed to acquire dquot type 1 [ 403.343425][T13996] xt_socket: unknown flags 0xc [ 403.390548][T13996] loop2: detected capacity change from 0 to 16 [ 403.402334][T13996] erofs: Unknown parameter 'h' [ 403.582824][ T4314] Bluetooth: hci4: command 0x0419 tx timeout [ 403.810922][T13988] EXT4-fs (loop4): 1 truncate cleaned up [ 406.662827][T13988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 406.722410][T13451] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.728490][T12795] EXT4-fs (loop4): unmounting filesystem. [ 406.920312][T13821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.975114][T13821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.053040][T13821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.123931][T14020] loop2: detected capacity change from 0 to 128 [ 407.130865][T13821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.156128][T14020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.717382][ T5595] EXT4-fs (loop2): unmounting filesystem. [ 409.002595][T14037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 409.175527][T14042] loop2: detected capacity change from 0 to 256 [ 409.298874][T14042] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 409.501035][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.563693][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.566530][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.620737][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.673893][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.676853][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.680025][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.682039][T13997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.707905][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.735618][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.757204][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.779480][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.781720][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.796257][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.809667][T14050] binfmt_misc: register: failed to install interpreter file ./file0 [ 409.851787][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.871019][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.904985][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.925221][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.969289][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.023369][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.026267][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.053480][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.063783][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.097377][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.114088][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.122274][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3242'. [ 410.258368][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.271923][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.472224][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.474500][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.476717][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.477529][T14067] loop3: detected capacity change from 0 to 512 [ 410.530160][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.533084][T13833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.537116][T14067] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 410.554058][T14067] EXT2-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 410.564004][T14067] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 410.608683][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.611596][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.619157][T13821] device veth0_vlan entered promiscuous mode [ 410.643402][T13821] device veth1_vlan entered promiscuous mode [ 410.711829][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.714637][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.717223][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.738824][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.785116][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.790594][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.802613][T13821] device veth0_macvtap entered promiscuous mode [ 411.203123][T13821] device veth1_macvtap entered promiscuous mode [ 411.449217][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.482010][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.511308][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.514137][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.516840][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.519853][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.522567][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.530066][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.532693][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.535553][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.539854][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.554667][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.557470][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.595377][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.608813][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.630366][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.633405][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.636088][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.660366][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.663159][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.666099][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.711712][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.714658][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.717291][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.748062][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.780411][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.788738][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.791785][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.801717][T13821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.804391][T13821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.806757][T13821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.837730][T13821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.859161][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.868619][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.984936][T13997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.987654][T13997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.994714][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.076125][T13833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.082623][T13833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.117720][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.185955][T14096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3251'. [ 412.263776][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 412.266342][T14102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3194'. [ 412.618366][T14113] loop4: detected capacity change from 0 to 512 [ 413.022282][T14113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.141881][T14113] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.3253: corrupted inode contents [ 413.153771][T14113] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.3253: mark_inode_dirty error [ 413.163000][T14113] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.3253: corrupted inode contents [ 413.170676][T14113] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3253: mark_inode_dirty error [ 413.758244][T14112] loop0: detected capacity change from 0 to 2048 [ 413.925298][T14112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.809894][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 414.841753][T13821] EXT4-fs (loop0): unmounting filesystem. [ 414.967691][T12795] EXT4-fs (loop4): unmounting filesystem. [ 415.080165][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3264'. [ 415.107164][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 415.110807][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3265'. [ 415.330761][T14157] loop4: detected capacity change from 0 to 512 [ 415.450723][T14157] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 415.690989][T14157] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.3267: corrupted inode contents [ 415.703267][T14157] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.3267: mark_inode_dirty error [ 415.715108][T14157] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.3267: corrupted inode contents [ 415.721170][T14157] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.3267: mark_inode_dirty error [ 415.739543][T14157] Quota error (device loop4): write_blk: dquota write failed [ 415.742103][T14157] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 415.745068][T14157] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.3267: Failed to acquire dquot type 0 [ 415.793350][T14157] EXT4-fs (loop4): 1 orphan inode deleted [ 415.795078][T14157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 415.849361][ T569] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 415.853369][ T569] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1 [ 416.100532][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.103095][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.555632][T14173] loop0: detected capacity change from 0 to 512 [ 416.607061][T14173] EXT4-fs (loop0): 1 orphan inode deleted [ 416.617549][T14173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 416.620882][ T569] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 416.623876][ T569] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1 [ 417.611234][T14179] loop3: detected capacity change from 0 to 512 [ 417.613684][T14179] EXT4-fs: Ignoring removed i_version option [ 417.615385][T14179] ext4: Unknown parameter 'seclabel' [ 417.753953][T13821] EXT4-fs (loop0): unmounting filesystem. [ 417.802389][T12795] EXT4-fs (loop4): unmounting filesystem. [ 417.867125][T14038] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.929114][T14190] loop2: detected capacity change from 0 to 128 [ 418.963415][T14190] EXT4-fs (loop2): Test dummy encryption mode enabled [ 419.001985][T14190] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 419.052526][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 419.054911][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3281'. [ 419.164183][ T5595] EXT4-fs (loop2): unmounting filesystem. [ 419.360358][T14204] loop1: detected capacity change from 0 to 128 [ 419.390069][T14204] EXT4-fs (loop1): Test dummy encryption mode enabled [ 419.417707][T14204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 419.728464][T14211] loop0: detected capacity change from 0 to 512 [ 420.106749][T14211] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 420.175454][T14211] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.3286: corrupted inode contents [ 420.185084][T14211] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.3286: mark_inode_dirty error [ 420.201429][T14211] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.3286: corrupted inode contents [ 420.207919][T14211] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3286: mark_inode_dirty error [ 420.469393][T14204] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 420.791534][T14218] loop2: detected capacity change from 0 to 256 [ 420.793912][T14218] exfat: Deprecated parameter 'utf8' [ 420.795374][T14218] exfat: Deprecated parameter 'utf8' [ 420.835177][T12581] EXT4-fs (loop1): unmounting filesystem. [ 420.867182][T14218] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 421.834912][T14224] 9pnet_fd: Insufficient options for proto=fd [ 422.246040][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'. [ 422.257195][T13821] EXT4-fs (loop0): unmounting filesystem. [ 422.268339][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3293'. [ 422.498074][T14241] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI¸¥Šte [ 422.616268][T14247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.628773][T14247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.636711][T14244] device syzkaller0 entered promiscuous mode [ 425.209279][T14251] loop4: detected capacity change from 0 to 131072 [ 425.233410][T14251] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 425.236507][T14251] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 425.279510][T14251] F2FS-fs (loop4): invalid crc value [ 425.336527][T14251] F2FS-fs (loop4): Found nat_bits in checkpoint [ 425.457458][T14251] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 425.480499][T14251] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 425.632803][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.658688][ T4303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.677511][ T4303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.680583][ T4303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.683127][ T4303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 425.685359][ T4303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.902552][T14279] xt_bpf: check failed: parse error [ 426.524949][T14291] loop4: detected capacity change from 0 to 16 [ 426.854389][T14291] erofs: (device loop4): erofs_read_inode: unsupported i_format 264 of nid 36 [ 427.768214][ T4312] Bluetooth: hci3: command 0x0409 tx timeout [ 429.848232][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 431.674857][T14316] loop0: detected capacity change from 0 to 2048 [ 431.832346][T14316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 431.930144][ T4314] Bluetooth: hci3: command 0x040f tx timeout [ 433.674832][T13821] EXT4-fs (loop0): unmounting filesystem. [ 434.008209][ T4314] Bluetooth: hci3: command 0x0419 tx timeout [ 437.868238][ T4314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.872599][ T4314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.875495][ T4314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.884219][ T4314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.889603][ T4314] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 437.892368][ T4314] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.258851][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.260627][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.413974][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 438.416508][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3305'. [ 438.474580][T14336] loop1: detected capacity change from 0 to 256 [ 438.500893][T14336] exfat: Deprecated parameter 'utf8' [ 438.502407][T14336] exfat: Deprecated parameter 'utf8' [ 438.530208][T14336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 439.276171][T14341] 9pnet_fd: Insufficient options for proto=fd [ 439.802830][T14349] loop4: detected capacity change from 0 to 512 [ 439.933666][ T4312] Bluetooth: hci2: command 0x0409 tx timeout [ 440.022213][T14349] EXT4-fs (loop4): 1 orphan inode deleted [ 440.023940][T14349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 440.039861][T13997] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 440.042716][T13997] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:3: Failed to release dquot type 1 [ 440.443069][T14292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.454068][T14272] chnl_net:caif_netlink_parms(): no params data found [ 440.465063][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 440.467697][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3335'. [ 440.557836][T14292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.732846][T12795] EXT4-fs (loop4): unmounting filesystem. [ 440.751436][T14292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.793277][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.796792][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.913620][T14386] loop0: detected capacity change from 0 to 512 [ 440.916122][T14386] EXT4-fs: inline encryption not supported [ 440.920764][T14386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.942382][T14272] device bridge_slave_0 entered promiscuous mode [ 441.077982][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.082545][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.185204][T14272] device bridge_slave_1 entered promiscuous mode [ 442.009295][ T4312] Bluetooth: hci2: command 0x041b tx timeout [ 442.598914][T14386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 442.613335][T14386] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 442.616303][T14386] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 442.620701][T14386] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.3337: Failed to acquire dquot type 1 [ 442.631918][T14386] EXT4-fs (loop0): 1 truncate cleaned up [ 442.644518][T14386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 443.411247][T14393] loop4: detected capacity change from 0 to 2048 [ 443.478594][T14393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 443.627290][T14272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.632392][T14272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.860712][T14397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3340: bg 0: block 234: padding at end of block bitmap is not set [ 443.876415][T14397] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1466 with error 28 [ 443.883192][T14397] EXT4-fs (loop4): This should not happen!! Data will be lost [ 443.883192][T14397] [ 443.885884][T14397] EXT4-fs (loop4): Total free blocks count 0 [ 443.887693][T14397] EXT4-fs (loop4): Free/Dirty block details [ 443.889929][T14397] EXT4-fs (loop4): free_blocks=0 [ 443.891354][T14397] EXT4-fs (loop4): dirty_blocks=1472 [ 443.892974][T14397] EXT4-fs (loop4): Block reservation details [ 443.902368][T14397] EXT4-fs (loop4): i_reserved_data_blocks=92 [ 444.005480][T14272] team0: Port device team_slave_0 added [ 444.020270][T14272] team0: Port device team_slave_1 added [ 444.051841][T12795] EXT4-fs (loop4): unmounting filesystem. [ 444.078311][T14272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.080306][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.087374][T14272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.088230][ T4312] Bluetooth: hci2: command 0x040f tx timeout [ 444.120858][T14272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.123054][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.131550][T14272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.240699][T14272] device hsr_slave_0 entered promiscuous mode [ 444.259715][T14272] device hsr_slave_1 entered promiscuous mode [ 444.301948][T14272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.304095][T14272] Cannot create hsr debugfs directory [ 444.320491][T14330] chnl_net:caif_netlink_parms(): no params data found [ 444.324149][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 444.326635][T14421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3344'. [ 444.719367][T14330] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.726002][T14330] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.738234][T14330] device bridge_slave_0 entered promiscuous mode [ 444.811425][T14330] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.813468][T14330] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.816109][T14330] device bridge_slave_1 entered promiscuous mode [ 444.884043][T14441] loop4: detected capacity change from 0 to 2048 [ 444.969165][T14441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.261042][T14330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.333422][T14330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.589632][T14330] team0: Port device team_slave_0 added [ 445.710481][T14449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3346: bg 0: block 234: padding at end of block bitmap is not set [ 445.725739][T14449] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 445.733513][T13821] EXT4-fs (loop0): unmounting filesystem. [ 445.760356][T14330] team0: Port device team_slave_1 added [ 445.765330][T14449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 445.765330][T14449] [ 445.788186][T14449] EXT4-fs (loop4): Total free blocks count 0 [ 445.789938][T14449] EXT4-fs (loop4): Free/Dirty block details [ 445.791515][T14449] EXT4-fs (loop4): free_blocks=0 [ 445.792899][T14449] EXT4-fs (loop4): dirty_blocks=2784 [ 445.794386][T14449] EXT4-fs (loop4): Block reservation details [ 445.797522][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3348'. [ 445.806226][T14449] EXT4-fs (loop4): i_reserved_data_blocks=174 [ 445.912424][T14330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.914620][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.932984][T13997] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 726 with error 28 [ 445.938667][T14330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.050892][T14330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.052846][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.079541][T14330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.104189][T14488] loop4: detected capacity change from 0 to 2048 [ 446.136309][T14488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 446.168441][ T4312] Bluetooth: hci2: command 0x0419 tx timeout [ 446.339097][T14330] device hsr_slave_0 entered promiscuous mode [ 446.373123][T14330] device hsr_slave_1 entered promiscuous mode [ 446.418303][T14330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.420586][T14330] Cannot create hsr debugfs directory [ 447.081484][T14272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.094071][T12795] EXT4-fs (loop4): unmounting filesystem. [ 447.152726][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 447.155717][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'. [ 447.253658][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3357'. [ 447.257991][T14530] loop1: detected capacity change from 0 to 128 [ 447.399055][T14530] syz.1.3356: attempt to access beyond end of device [ 447.399055][T14530] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 447.436894][T14272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.442460][T14530] syz.1.3356: attempt to access beyond end of device [ 447.442460][T14530] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 447.447638][T14530] syz.1.3356: attempt to access beyond end of device [ 447.447638][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.452276][T14530] syz.1.3356: attempt to access beyond end of device [ 447.452276][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.456159][T14530] syz.1.3356: attempt to access beyond end of device [ 447.456159][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.460353][T14530] syz.1.3356: attempt to access beyond end of device [ 447.460353][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.464192][T14530] syz.1.3356: attempt to access beyond end of device [ 447.464192][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.467987][T14530] syz.1.3356: attempt to access beyond end of device [ 447.467987][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.472426][T14530] syz.1.3356: attempt to access beyond end of device [ 447.472426][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.476351][T14530] syz.1.3356: attempt to access beyond end of device [ 447.476351][T14530] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 447.490499][T14272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.648477][T14292] device hsr_slave_0 left promiscuous mode [ 447.669397][T14292] device hsr_slave_1 left promiscuous mode [ 447.764839][T14292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.767094][T14292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.775438][T14292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.777612][T14292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.802690][T14292] device bridge_slave_1 left promiscuous mode [ 447.804631][T14292] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.862565][T14292] device bridge_slave_0 left promiscuous mode [ 447.864455][T14292] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.348955][T14558] loop1: detected capacity change from 0 to 512 [ 448.351412][T14558] EXT4-fs: inline encryption not supported [ 448.359401][T14558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 448.499020][T14558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 448.507545][T14558] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 448.510614][T14558] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 448.513351][T14558] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.3358: Failed to acquire dquot type 1 [ 448.535879][T14558] EXT4-fs (loop1): 1 truncate cleaned up [ 448.543887][T14558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.163296][T14292] device veth1_macvtap left promiscuous mode [ 450.165339][T14292] device veth0_macvtap left promiscuous mode [ 450.167375][T14292] device veth1_vlan left promiscuous mode [ 450.175913][T14292] device veth0_vlan left promiscuous mode [ 451.199329][T14292] bond1 (unregistering): Released all slaves [ 454.349198][T14292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.589099][T14292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.643588][T14292] bond0 (unregistering): Released all slaves [ 456.973824][T14272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.102755][T12581] EXT4-fs (loop1): unmounting filesystem. [ 457.343132][T14330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.535691][T14330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.280247][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 458.282835][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 458.314816][T14330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.539182][T14330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.726786][T14272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.780811][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.783855][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.820287][T14607] device syzkaller0 entered promiscuous mode [ 470.025627][T14272] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.132606][T14330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.134997][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.138889][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.153952][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.155973][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.166583][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.179316][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.182179][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.184192][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.186794][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.236702][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.931054][T14634] loop4: detected capacity change from 0 to 512 [ 470.951276][T14634] EXT4-fs: inline encryption not supported [ 471.118781][ T4314] Bluetooth: hci5: command 0x0406 tx timeout [ 471.146437][T14634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 471.288500][T14634] EXT4-fs (loop4): orphan cleanup on readonly fs [ 471.302056][T14634] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 471.305250][T14634] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 471.308056][T14634] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.3375: Failed to acquire dquot type 1 [ 471.319411][T14634] EXT4-fs (loop4): 1 truncate cleaned up [ 471.322554][T14634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 471.594740][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 471.597651][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'. [ 471.607989][T14629] netlink: 'syz.1.3376': attribute type 12 has an invalid length. [ 472.051924][T14633] tipc: Started in network mode [ 472.053367][T14633] tipc: Node identity 7f000001, cluster identity 4711 [ 472.056292][T14633] tipc: Enabled bearer , priority 10 [ 472.577758][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 473.127573][T14272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.130774][T14272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.176290][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.181557][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.206076][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.235421][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.259113][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.279839][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.299418][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.320101][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.338881][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.366004][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.388836][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.676834][T14272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.770104][T14272] device veth0_vlan entered promiscuous mode [ 473.794359][T14272] device veth1_vlan entered promiscuous mode [ 473.868221][T14272] device veth0_macvtap entered promiscuous mode [ 473.875023][T14272] device veth1_macvtap entered promiscuous mode [ 473.914126][T12795] EXT4-fs (loop4): unmounting filesystem. [ 473.918907][T13454] tipc: Node number set to 2130706433 [ 473.949282][T14646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 473.952191][T14646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 473.960103][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.962465][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.964879][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.967851][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.012201][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.059741][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.062797][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.066674][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.071215][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.074242][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.078686][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.081513][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.084274][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.087441][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 474.111220][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.113969][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.122565][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.125544][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.129745][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.133508][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.136338][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.149866][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.152821][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.167357][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.258549][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.263404][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.275465][T14272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.316516][T14330] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.327255][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.341003][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.120636][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.123673][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.126244][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.128246][T14292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.171076][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.174179][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.177022][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.192843][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.195739][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.201376][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.204135][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.207627][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.215499][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.218921][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.224023][T14272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.424540][T14683] loop0: detected capacity change from 0 to 512 [ 475.461859][T14683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 475.580311][T14683] EXT4-fs (loop0): orphan cleanup on readonly fs [ 475.595192][T14683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3386: bg 0: block 248: padding at end of block bitmap is not set [ 475.603901][T14683] Quota error (device loop0): write_blk: dquota write failed [ 475.606365][T14683] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 475.609388][T14683] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.3386: Failed to acquire dquot type 1 [ 475.623109][T14683] EXT4-fs (loop0): 1 truncate cleaned up [ 475.627865][T14683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 476.398348][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 476.581449][ T242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.197287][ T242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.567652][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.570750][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.573613][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.585970][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.589280][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.592112][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.594334][T14292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.597302][T14683] netlink: 46 bytes leftover after parsing attributes in process `syz.0.3386'. [ 477.609244][T14272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.611805][T14272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.625156][T14272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.631444][T14272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.742000][T14694] loop1: detected capacity change from 0 to 256 [ 477.744661][T14694] exfat: Deprecated parameter 'namecase' [ 477.750280][ T242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.757439][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.790239][T14683] EXT4-fs (loop0): unmounting filesystem. [ 477.807709][T14694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 477.824371][T14692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3387'. [ 477.912645][ T242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.951162][T14330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.954193][T14330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.963560][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.966821][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.974135][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.977246][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.982005][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.985272][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.988433][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.991448][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.994288][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.997231][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.001001][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.014858][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.017370][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.023476][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.061555][T13997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.064016][T13997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.071072][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.196534][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 478.218133][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 478.226597][T14705] netlink: 'syz.4.3399': attribute type 12 has an invalid length. [ 478.256066][T14707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3397'. [ 478.562227][T14330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.729930][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.743059][T13997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.285876][T14704] Can't find ip_set type has [ 480.869643][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.873295][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.190179][T14755] loop2: detected capacity change from 0 to 512 [ 481.192747][T14755] EXT4-fs: inline encryption not supported [ 481.204002][T14755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.276702][T14755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 481.284656][T14755] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 481.287740][T14755] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 481.290736][T14755] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.3389: Failed to acquire dquot type 1 [ 481.304787][T14755] EXT4-fs (loop2): 1 truncate cleaned up [ 481.308200][T14755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 483.473991][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 483.790104][T14763] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 483.793051][T14763] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 483.801818][T14272] EXT4-fs (loop2): unmounting filesystem. [ 483.816305][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.820100][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.833746][T14330] device veth0_vlan entered promiscuous mode [ 483.846421][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.888703][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.458946][T14775] loop0: detected capacity change from 0 to 16 [ 484.478066][T14775] erofs: Unknown parameter 'h' [ 485.113319][T14330] device veth1_vlan entered promiscuous mode [ 485.274547][T14784] loop1: detected capacity change from 0 to 512 [ 485.309985][T14784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 486.150677][T14786] tipc: Started in network mode [ 486.152117][T14786] tipc: Node identity 7f000001, cluster identity 4711 [ 486.154487][T14786] tipc: Enabled bearer , priority 10 [ 486.565477][T14330] device veth0_macvtap entered promiscuous mode [ 487.166222][T14784] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 487.178275][T14696] tipc: Node number set to 2130706433 [ 487.180526][T14784] EXT4-fs (loop1): 1 truncate cleaned up [ 487.182279][T14784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 489.248791][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 489.251757][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 489.287858][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.310223][T14330] device veth1_macvtap entered promiscuous mode [ 489.408724][T12581] EXT4-fs (loop1): unmounting filesystem. [ 489.564489][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.567637][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.573531][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.585353][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.597293][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.607390][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.620898][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.633011][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.644067][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.656190][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.664309][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.689252][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.709171][T14330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.717550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.721042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.817271][T14824] loop2: detected capacity change from 0 to 256 [ 489.850015][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.853077][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.855773][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.872702][T14824] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 489.896893][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.904036][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.906968][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.956413][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.975593][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.988691][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.009871][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.012625][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.168517][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.401364][T14330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.768697][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 490.773118][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 490.937607][T14330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.940731][T14330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.943200][T14330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.945690][T14330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.990418][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3412'. [ 492.083484][T14722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.086149][T14722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.145667][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.196655][T14722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.226762][T14722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.262376][T14684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 492.489364][T14854] loop2: detected capacity change from 0 to 1024 [ 493.047579][T14854] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 493.050848][T14854] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 493.058849][T14854] JBD2: no valid journal superblock found [ 493.060505][T14854] EXT4-fs (loop2): error loading journal [ 493.278161][T14649] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 493.384409][T14866] loop0: detected capacity change from 0 to 512 [ 493.406297][T14866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 493.653607][T14869] loop4: detected capacity change from 0 to 512 [ 495.144629][T14869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 496.213263][T14866] EXT4-fs (loop0): 1 truncate cleaned up [ 496.214999][T14866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 496.290692][T14869] EXT4-fs (loop4): 1 truncate cleaned up [ 496.292347][T14869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 496.673819][T12795] EXT4-fs (loop4): unmounting filesystem. [ 498.308717][T13821] EXT4-fs (loop0): unmounting filesystem. [ 498.514555][ T4312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.519655][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.523461][ T4312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.526161][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.528750][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.530911][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.567186][T14911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3423'. [ 499.690515][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.692464][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.852252][ T242] device hsr_slave_0 left promiscuous mode [ 499.974394][ T242] device hsr_slave_1 left promiscuous mode [ 500.250814][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.256339][ T242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.597949][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.768563][ T242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.793526][ T242] device bridge_slave_1 left promiscuous mode [ 500.795820][ T242] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.815942][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 500.868888][ T242] device bridge_slave_0 left promiscuous mode [ 500.878334][ T242] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.244242][T14955] loop2: detected capacity change from 0 to 512 [ 502.255120][T14955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 502.557172][T14955] EXT4-fs (loop2): 1 truncate cleaned up [ 502.558962][T14955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 502.888468][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 503.261736][T14966] loop4: detected capacity change from 0 to 256 [ 503.303247][T14966] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 503.328433][T14966] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 504.147038][T14272] EXT4-fs (loop2): unmounting filesystem. [ 504.149852][ T242] device veth1_macvtap left promiscuous mode [ 504.151659][ T242] device veth0_macvtap left promiscuous mode [ 504.155871][ T242] device veth1_vlan left promiscuous mode [ 504.169680][ T242] device veth0_vlan left promiscuous mode [ 504.494877][T14989] loop2: detected capacity change from 0 to 2048 [ 504.512986][T14989] EXT4-fs: inline encryption not supported [ 504.523950][T14989] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.530661][T14989] ext4: Unknown parameter 'audit' [ 505.618531][ T4314] Bluetooth: hci1: command 0x040f tx timeout [ 506.627707][T15001] loop4: detected capacity change from 0 to 128 [ 506.635131][T15001] EXT4-fs (loop4): Test dummy encryption mode enabled [ 506.640151][T15001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 506.680388][T15001] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 506.727953][T12795] EXT4-fs (loop4): unmounting filesystem. [ 507.706582][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 507.927386][T15009] Cannot find add_set index 0 as target [ 508.726047][T15014] loop4: detected capacity change from 0 to 128 [ 508.806023][ T4759] bio_check_eod: 9513 callbacks suppressed [ 508.806040][ T4759] kworker/u4:14: attempt to access beyond end of device [ 508.806040][ T4759] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 509.982719][ T242] team0 (unregistering): Port device team_slave_1 removed [ 510.193158][ T242] team0 (unregistering): Port device team_slave_0 removed [ 510.389837][ T242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.649141][ T242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.441559][ T242] bond0 (unregistering): Released all slaves [ 513.728248][T14982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3439'. [ 514.093255][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 514.120769][T15041] loop1: detected capacity change from 0 to 256 [ 514.123232][T15041] exfat: Deprecated parameter 'utf8' [ 514.124737][T15041] exfat: Deprecated parameter 'utf8' [ 514.184698][T15041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 514.202863][T14899] chnl_net:caif_netlink_parms(): no params data found [ 514.347433][T15048] 9pnet_fd: Insufficient options for proto=fd [ 514.593187][T15053] loop4: detected capacity change from 0 to 512 [ 514.932304][T15053] EXT4-fs (loop4): 1 orphan inode deleted [ 514.934201][T15053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 515.698719][T14719] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 515.707591][T14719] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:18: Failed to release dquot type 1 [ 517.208845][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.233256][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.305500][T14899] device bridge_slave_0 entered promiscuous mode [ 517.373973][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.376162][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.382411][T14899] device bridge_slave_1 entered promiscuous mode [ 517.483112][T12795] EXT4-fs (loop4): unmounting filesystem. [ 517.796405][T15096] Cannot find add_set index 0 as target [ 518.478866][T15072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3461'. [ 518.531776][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.536861][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.704995][T14899] team0: Port device team_slave_0 added [ 518.725053][T15107] loop1: detected capacity change from 0 to 512 [ 518.731022][T14899] team0: Port device team_slave_1 added [ 518.747496][T15107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.773357][T15107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 518.818553][T15107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3467: bg 0: block 248: padding at end of block bitmap is not set [ 518.832846][T15107] Quota error (device loop1): write_blk: dquota write failed [ 518.839577][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.847526][T15107] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 518.854914][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.866978][T15107] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.3467: Failed to acquire dquot type 1 [ 518.915280][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.920574][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.925681][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.938565][T15107] EXT4-fs (loop1): 1 truncate cleaned up [ 518.943754][T15107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 518.964061][T15113] loop4: detected capacity change from 0 to 128 [ 518.972676][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.094231][T15121] loop2: detected capacity change from 0 to 512 [ 519.096833][T15121] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.112058][T15121] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.132893][T15121] EXT4-fs (loop2): Test dummy encryption mode enabled [ 519.137726][T15113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 519.147219][T15121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 519.153369][T14899] device hsr_slave_0 entered promiscuous mode [ 519.723596][T14899] device hsr_slave_1 entered promiscuous mode [ 519.893263][T15121] EXT4-fs (loop2): 1 truncate cleaned up [ 519.894908][T15121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 519.963839][T15121] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 519.991256][T14899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.993586][T14899] Cannot create hsr debugfs directory [ 519.999106][T12795] EXT4-fs (loop4): unmounting filesystem. [ 520.197084][T12581] EXT4-fs (loop1): unmounting filesystem. [ 520.221204][T14272] EXT4-fs (loop2): unmounting filesystem. [ 521.871108][T15145] loop1: detected capacity change from 0 to 40427 [ 521.899930][T15145] F2FS-fs (loop1): invalid crc value [ 521.953509][T15145] F2FS-fs (loop1): Found nat_bits in checkpoint [ 521.964632][T15143] loop4: detected capacity change from 0 to 40427 [ 521.990529][T15143] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 522.000511][T15143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 522.006051][T15145] F2FS-fs (loop1): Start checkpoint disabled! [ 522.028752][T15143] F2FS-fs (loop4): invalid crc value [ 522.049725][T15143] F2FS-fs (loop4): Found nat_bits in checkpoint [ 522.079280][T15145] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 522.161591][T15143] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 522.163594][T15143] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 522.254559][ T242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.255841][ T4312] Bluetooth: hci4: command 0x0406 tx timeout [ 522.306908][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3476'. [ 522.325665][ T4496] kworker/u4:8: attempt to access beyond end of device [ 522.325665][ T4496] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 522.471681][ T242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.610310][ T242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.610240][T15173] device wg2 entered promiscuous mode [ 523.717137][ T242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.051366][T15207] loop2: detected capacity change from 0 to 512 [ 526.700207][T15210] loop1: detected capacity change from 0 to 256 [ 526.714455][T15210] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 526.717492][T15210] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 526.749380][T15207] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 527.042513][T15210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 527.536371][T15217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3489'. [ 527.630854][T14272] EXT4-fs (loop2): unmounting filesystem. [ 527.631518][T15224] loop1: detected capacity change from 0 to 512 [ 527.647827][T15224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.673152][T15224] EXT4-fs (loop1): Test dummy encryption mode enabled [ 527.687802][T15224] EXT4-fs (loop1): 1 truncate cleaned up [ 527.697306][T15224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 527.892514][T12581] EXT4-fs (loop1): unmounting filesystem. [ 528.682211][T15237] loop1: detected capacity change from 0 to 128 [ 528.913561][T15237] syz.1.3494: attempt to access beyond end of device [ 528.913561][T15237] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 529.032692][T15249] Cannot find add_set index 0 as target [ 529.702645][T15237] syz.1.3494: attempt to access beyond end of device [ 529.702645][T15237] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 529.743809][T15237] syz.1.3494: attempt to access beyond end of device [ 529.743809][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.753505][T15237] syz.1.3494: attempt to access beyond end of device [ 529.753505][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.757699][T15237] syz.1.3494: attempt to access beyond end of device [ 529.757699][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.768624][T15237] syz.1.3494: attempt to access beyond end of device [ 529.768624][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.778574][T15237] syz.1.3494: attempt to access beyond end of device [ 529.778574][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.799179][T15237] syz.1.3494: attempt to access beyond end of device [ 529.799179][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.808513][T15237] syz.1.3494: attempt to access beyond end of device [ 529.808513][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.819875][T15237] syz.1.3494: attempt to access beyond end of device [ 529.819875][T15237] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 529.952407][T15258] device syzkaller0 entered promiscuous mode [ 530.031160][T15263] loop1: detected capacity change from 0 to 256 [ 530.089547][T15263] FAT-fs (loop1): Directory bread(block 64) failed [ 530.091655][T15263] FAT-fs (loop1): Directory bread(block 65) failed [ 530.093515][T15263] FAT-fs (loop1): Directory bread(block 66) failed [ 530.095290][T15263] FAT-fs (loop1): Directory bread(block 67) failed [ 530.097166][T15263] FAT-fs (loop1): Directory bread(block 68) failed [ 530.117028][T15263] FAT-fs (loop1): Directory bread(block 69) failed [ 530.129995][T15263] FAT-fs (loop1): Directory bread(block 70) failed [ 530.131952][T15263] FAT-fs (loop1): Directory bread(block 71) failed [ 530.133805][T15263] FAT-fs (loop1): Directory bread(block 72) failed [ 530.135628][T15263] FAT-fs (loop1): Directory bread(block 73) failed [ 530.342810][T15279] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 530.454763][T15281] loop1: detected capacity change from 0 to 512 [ 530.505999][T15281] EXT4-fs (loop1): 1 orphan inode deleted [ 530.507957][T15281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 530.531519][ T569] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 530.535362][ T569] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1 [ 530.719628][T15288] loop4: detected capacity change from 0 to 512 [ 530.726664][T15288] EXT4-fs: Ignoring removed i_version option [ 531.636918][T15288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 531.703074][T15288] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 533.215980][T12795] EXT4-fs (loop4): unmounting filesystem. [ 533.371996][T15307] loop4: detected capacity change from 0 to 512 [ 533.374359][T15307] ext4: Unknown parameter 'noacl' [ 543.777909][T12581] EXT4-fs (loop1): unmounting filesystem. [ 543.861802][T14899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.927673][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.932938][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.965090][T14899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 545.008787][T14899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.063224][T14899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 545.193662][T15337] loop2: detected capacity change from 0 to 512 [ 545.196048][T15337] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.206272][T15337] EXT4-fs: Conflicting test_dummy_encryption options [ 545.345826][T15227] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.395264][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3516'. [ 546.301557][T15347] loop4: detected capacity change from 0 to 128 [ 546.304398][T15347] EXT4-fs (loop4): Test dummy encryption mode enabled [ 546.398731][T15347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 546.415473][T15347] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 547.337814][T14899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.354377][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.357243][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.370103][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.374650][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.391863][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.394535][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.396625][T14292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.538658][T15360] loop0: detected capacity change from 0 to 256 [ 547.547850][T15360] exfat: Deprecated parameter 'namecase' [ 547.579279][T15360] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 547.868088][ T4312] Bluetooth: hci3: command 0x0406 tx timeout [ 547.888998][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.891825][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.895978][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.915048][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.917208][T14292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.930488][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.934604][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.948996][T14899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.951993][T14899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.732726][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.736931][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.769450][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.791438][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.794549][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.804726][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.818924][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.821935][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.835189][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.843862][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 549.265861][ T242] device hsr_slave_0 left promiscuous mode [ 549.329183][ T242] device hsr_slave_1 left promiscuous mode [ 549.388217][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.390342][ T242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.393145][ T242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.397132][ T242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.410782][ T242] device bridge_slave_1 left promiscuous mode [ 549.414934][ T242] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.430512][T12795] EXT4-fs (loop4): unmounting filesystem. [ 549.471348][ T242] device bridge_slave_0 left promiscuous mode [ 549.473302][ T242] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.658388][ T242] device veth1_macvtap left promiscuous mode [ 549.660225][ T242] device veth0_macvtap left promiscuous mode [ 549.661892][ T242] device veth1_vlan left promiscuous mode [ 549.663544][ T242] device veth0_vlan left promiscuous mode [ 553.922961][ T242] team0 (unregistering): Port device team_slave_1 removed [ 554.160243][ T242] team0 (unregistering): Port device team_slave_0 removed [ 554.379799][ T242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.619034][ T242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.455968][ T242] bond0 (unregistering): Released all slaves [ 557.729416][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3530'. [ 557.742491][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.745041][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.747340][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.976545][T15416] loop1: detected capacity change from 0 to 256 [ 558.026814][T15414] xt_socket: unknown flags 0xc [ 558.585519][T15440] loop2: detected capacity change from 0 to 2048 [ 558.651489][T15440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 558.663049][T15440] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3 [ 558.821821][T14272] EXT4-fs (loop2): unmounting filesystem. [ 558.850792][ T4312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.855756][ T4312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.897297][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.906625][ T4303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.910759][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 558.914122][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.547171][T15435] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 559.558272][T15435] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 559.682144][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3540'. [ 560.989747][ T4314] Bluetooth: hci2: command 0x0409 tx timeout [ 561.138518][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.141835][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.060900][ T4314] Bluetooth: hci2: command 0x041b tx timeout [ 565.128204][ T4314] Bluetooth: hci2: command 0x040f tx timeout [ 567.208233][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 573.447443][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3541'. [ 573.470116][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3547'. [ 573.681286][T15534] loop0: detected capacity change from 0 to 2048 [ 573.713443][T15539] loop2: detected capacity change from 0 to 1024 [ 573.730678][T15448] chnl_net:caif_netlink_parms(): no params data found [ 573.759487][T15539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 573.765822][T15534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 574.773474][T15548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3553: bg 0: block 234: padding at end of block bitmap is not set [ 574.790875][T15548] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 986 with error 28 [ 574.794425][T15548] EXT4-fs (loop0): This should not happen!! Data will be lost [ 574.794425][T15548] [ 574.799008][T14272] EXT4-fs (loop2): unmounting filesystem. [ 574.845873][T15548] EXT4-fs (loop0): Total free blocks count 0 [ 574.847746][T15548] EXT4-fs (loop0): Free/Dirty block details [ 574.904326][T15548] EXT4-fs (loop0): free_blocks=0 [ 574.905897][T15548] EXT4-fs (loop0): dirty_blocks=992 [ 574.907569][T15548] EXT4-fs (loop0): Block reservation details [ 574.913740][T15548] EXT4-fs (loop0): i_reserved_data_blocks=62 [ 575.001069][T13821] EXT4-fs (loop0): unmounting filesystem. [ 575.723367][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 576.458268][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3559'. [ 576.507725][T15448] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.516692][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.526865][T15448] device bridge_slave_0 entered promiscuous mode [ 576.535057][T15448] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.586003][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.589028][T15448] device bridge_slave_1 entered promiscuous mode [ 576.664664][T15569] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.667468][T15569] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 576.677695][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 576.835353][T15581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'. [ 576.890204][T15448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.895054][T15448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.735766][T15596] loop2: detected capacity change from 0 to 512 [ 578.747940][T15596] EXT4-fs (loop2): Test dummy encryption mode enabled [ 578.764359][T15596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3568: inode #1: comm syz.2.3568: iget: illegal inode # [ 578.804244][T15596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3568: error while reading EA inode 1 err=-117 [ 578.914803][T15596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3568: inode #1: comm syz.2.3568: iget: illegal inode # [ 578.933760][T15596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3568: error while reading EA inode 1 err=-117 [ 578.942976][T15596] EXT4-fs (loop2): 1 orphan inode deleted [ 578.945114][T15596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 579.028787][T14272] EXT4-fs (loop2): unmounting filesystem. [ 579.933655][T15608] loop1: detected capacity change from 0 to 256 [ 580.106963][T15608] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 580.112116][T15608] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 581.988853][T15613] loop2: detected capacity change from 0 to 256 [ 582.229579][T15613] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 582.234891][T15613] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 582.652291][T15618] loop1: detected capacity change from 0 to 128 [ 582.824896][T14343] bio_check_eod: 263 callbacks suppressed [ 582.824910][T14343] kworker/u4:12: attempt to access beyond end of device [ 582.824910][T14343] loop1: rw=1, sector=145, nr_sectors = 856 limit=128 [ 591.973188][ T4314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.989626][ T4314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.993738][ T4314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.996464][ T4314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 592.000502][ T4314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 592.002827][ T4314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.041054][ T4303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 594.046843][ T4303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 594.051985][ T4303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 594.054770][ T4303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 594.058514][ T4303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 594.060818][ T4303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 594.088194][ T4314] Bluetooth: hci1: command 0x0409 tx timeout [ 594.100867][T15630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3575'. [ 594.116567][T15448] team0: Port device team_slave_0 added [ 594.164743][T15448] team0: Port device team_slave_1 added [ 594.214847][T15448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.219201][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.295491][T15448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.416688][T15448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.422583][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.739050][T15448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.562534][T15448] device hsr_slave_0 entered promiscuous mode [ 595.620680][T15448] device hsr_slave_1 entered promiscuous mode [ 595.645388][T15448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.647516][T15448] Cannot create hsr debugfs directory [ 596.102769][ C1] ------------[ cut here ]------------ [ 596.104745][ C1] refcount_t: addition on 0; use-after-free. [ 596.106669][ C1] WARNING: CPU: 1 PID: 21 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 596.109147][ C1] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 596.110240][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.141-syzkaller #0 [ 596.112518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.115365][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 596.117560][ C1] pc : refcount_warn_saturate+0x134/0x1f8 [ 596.119078][ C1] lr : refcount_warn_saturate+0x134/0x1f8 [ 596.120713][ C1] sp : ffff80001c8e7680 [ 596.121895][ C1] x29: ffff80001c8e7680 x28: ffff0000f3cdcc00 x27: ffff0000fada1c08 [ 596.124071][ C1] x26: ffff0000d5110370 x25: dfff800000000000 x24: 1fffe0001f5b4381 [ 596.126255][ C1] x23: ffff0000f3775c00 x22: ffff0000d0d08154 x21: ffff0000dc059880 [ 596.128479][ C1] x20: ffff0000d0d08154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 596.130663][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 596.132876][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 596.135118][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : ccec0c8c9efa6900 [ 596.137357][ C1] x8 : ccec0c8c9efa6900 x7 : 0000000000000001 x6 : 0000000000000001 [ 596.139555][ C1] x5 : ffff80001c8e7118 x4 : ffff800015154700 x3 : ffff80000852da40 [ 596.141738][ C1] x2 : 0000000000000001 x1 : 0000000100000100 x0 : 0000000000000000 [ 596.143983][ C1] Call trace: [ 596.144855][ C1] refcount_warn_saturate+0x134/0x1f8 [ 596.146348][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 596.147772][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 596.149197][ C1] tipc_disc_timeout+0x4c8/0x608 [ 596.150573][ C1] call_timer_fn+0x1b8/0x964 [ 596.151879][ C1] __run_timers+0x460/0x6bc [ 596.153131][ C1] run_timer_softirq+0x7c/0x114 [ 596.154489][ C1] handle_softirqs+0x318/0xc6c [ 596.155900][ C1] run_ksoftirqd+0x7c/0x2a0 [ 596.157119][ C1] smpboot_thread_fn+0x4b0/0x964 [ 596.158456][ C1] kthread+0x250/0x2d8 [ 596.159577][ C1] ret_from_fork+0x10/0x20 [ 596.160738][ C1] irq event stamp: 2483813 [ 596.162000][ C1] hardirqs last enabled at (2483812): [] __up_console_sem+0xb4/0x100 [ 596.164749][ C1] hardirqs last disabled at (2483813): [] el1_dbg+0x24/0x80 [ 596.167210][ C1] softirqs last enabled at (2483744): [] handle_softirqs+0xaf8/0xc6c [ 596.169900][ C1] softirqs last disabled at (2483749): [] run_ksoftirqd+0x7c/0x2a0 [ 596.172605][ C1] ---[ end trace 0000000000000000 ]--- [ 596.174307][ C1] ------------[ cut here ]------------ [ 596.175788][ C1] refcount_t: underflow; use-after-free. [ 596.177574][ C1] WARNING: CPU: 1 PID: 21 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 596.180134][ C1] Modules linked in: [ 596.181194][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W 6.1.141-syzkaller #0 [ 596.183772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.186527][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 596.188642][ C1] pc : refcount_warn_saturate+0x154/0x1f8 [ 596.190202][ C1] lr : refcount_warn_saturate+0x154/0x1f8 [ 596.191783][ C1] sp : ffff80001c8e7680 [ 596.192913][ C1] x29: ffff80001c8e7680 x28: ffff0000f3cdcc00 x27: 0000000000000000 [ 596.195107][ C1] x26: ffff0000d5110370 x25: dfff800000000000 x24: 1fffe0001aa22078 [ 596.197296][ C1] x23: 1fffe0001814a379 x22: ffff0000fada1c00 x21: 00000000c0000000 [ 596.199463][ C1] x20: ffff0000d0d08154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 596.201661][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 596.203939][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 596.206229][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : ccec0c8c9efa6900 [ 596.208506][ C1] x8 : ccec0c8c9efa6900 x7 : 0000000000000001 x6 : 0000000000000001 [ 596.210683][ C1] x5 : ffff80001c8e7118 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 596.212904][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 596.215151][ C1] Call trace: [ 596.216062][ C1] refcount_warn_saturate+0x154/0x1f8 [ 596.217516][ C1] tipc_crypto_xmit+0x1664/0x2014 [ 596.218874][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 596.220322][ C1] tipc_disc_timeout+0x4c8/0x608 [ 596.221697][ C1] call_timer_fn+0x1b8/0x964 [ 596.222996][ C1] __run_timers+0x460/0x6bc [ 596.224327][ C1] run_timer_softirq+0x7c/0x114 [ 596.225677][ C1] handle_softirqs+0x318/0xc6c [ 596.226990][ C1] run_ksoftirqd+0x7c/0x2a0 [ 596.228224][ C1] smpboot_thread_fn+0x4b0/0x964 [ 596.229593][ C1] kthread+0x250/0x2d8 [ 596.230728][ C1] ret_from_fork+0x10/0x20 [ 596.231987][ C1] irq event stamp: 2483849 [ 596.233160][ C1] hardirqs last enabled at (2483848): [] __up_console_sem+0xb4/0x100 [ 596.235853][ C1] hardirqs last disabled at (2483849): [] el1_dbg+0x24/0x80 [ 596.238276][ C1] softirqs last enabled at (2483744): [] handle_softirqs+0xaf8/0xc6c [ 596.241022][ C1] softirqs last disabled at (2483749): [] run_ksoftirqd+0x7c/0x2a0 [ 596.243601][ C1] ---[ end trace 0000000000000000 ]--- [ 596.245597][ T4303] Bluetooth: hci6: command 0x0409 tx timeout [ 596.249464][ T4314] Bluetooth: hci1: command 0x041b tx timeout [ 597.132036][ C1] ------------[ cut here ]------------ [ 597.133746][ C1] refcount_t: saturated; leaking memory. [ 597.135692][ C1] WARNING: CPU: 1 PID: 15448 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 597.138447][ C1] Modules linked in: [ 597.139554][ C1] CPU: 1 PID: 15448 Comm: syz-executor Tainted: G W 6.1.141-syzkaller #0 [ 597.142289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.145218][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 597.147399][ C1] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 597.148957][ C1] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 597.150583][ C1] sp : ffff8000080178c0 [ 597.151701][ C1] x29: ffff8000080178c0 x28: ffff0000d5767000 x27: ffff0000fada1c08 [ 597.153934][ C1] x26: ffff0000d5110370 x25: dfff800000000000 x24: 1fffe0001f5b4381 [ 597.156135][ C1] x23: ffff0000f3775c00 x22: ffff0000d0d08154 x21: 000000007ffffffe [ 597.158433][ C1] x20: ffff0000d0d08154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 597.160611][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 597.162802][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 597.164954][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : b46cdcae462c6c00 [ 597.167163][ C1] x8 : b46cdcae462c6c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 597.169371][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 597.171506][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 597.173666][ C1] Call trace: [ 597.174526][ C1] refcount_warn_saturate+0x1b4/0x1f8 [ 597.175979][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 597.177299][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 597.178753][ C1] tipc_disc_timeout+0x4c8/0x608 [ 597.180060][ C1] call_timer_fn+0x1b8/0x964 [ 597.181378][ C1] __run_timers+0x460/0x6bc [ 597.182572][ C1] run_timer_softirq+0x7c/0x114 [ 597.183915][ C1] handle_softirqs+0x318/0xc6c [ 597.185217][ C1] __do_softirq+0x14/0x20 [ 597.186397][ C1] ____do_softirq+0x14/0x20 [ 597.187606][ C1] call_on_irq_stack+0x24/0x4c [ 597.188896][ C1] do_softirq_own_stack+0x20/0x2c [ 597.190227][ C1] __irq_exit_rcu+0x23c/0x43c [ 597.191488][ C1] irq_exit_rcu+0x14/0x84 [ 597.192676][ C1] el1_interrupt+0x38/0x54 [ 597.193881][ C1] el1h_64_irq_handler+0x18/0x24 [ 597.195211][ C1] el1h_64_irq+0x64/0x68 [ 597.196302][ C1] lockdep_unregister_key+0x390/0x438 [ 597.197797][ C1] __qdisc_destroy+0x13c/0x500 [ 597.199113][ C1] dev_shutdown+0x35c/0x47c [ 597.200368][ C1] unregister_netdevice_many+0x944/0x1740 [ 597.201888][ C1] unregister_netdevice_queue+0x2ac/0x2f8 [ 597.203480][ C1] __tun_detach+0xb04/0x122c [ 597.204722][ C1] tun_chr_close+0x118/0x1f8 [ 597.205978][ C1] __fput+0x1bc/0x7c0 [ 597.207075][ C1] ____fput+0x20/0x30 [ 597.208173][ C1] task_work_run+0x1ec/0x270 [ 597.209398][ C1] do_exit+0x544/0x19a8 [ 597.210580][ C1] do_group_exit+0x194/0x22c [ 597.211823][ C1] get_signal+0x11d0/0x1310 [ 597.213083][ C1] do_notify_resume+0x340/0x2b0c [ 597.214439][ C1] el0_svc+0x98/0x138 [ 597.215539][ C1] el0t_64_sync_handler+0x84/0xf0 [ 597.216958][ C1] el0t_64_sync+0x18c/0x190 [ 597.218153][ C1] irq event stamp: 107681 [ 597.219385][ C1] hardirqs last enabled at (107680): [] __up_console_sem+0xb4/0x100 [ 597.222020][ C1] hardirqs last disabled at (107681): [] el1_dbg+0x24/0x80 [ 597.224373][ C1] softirqs last enabled at (107610): [] fib6_run_gc+0x198/0x250 [ 597.226909][ C1] softirqs last disabled at (107653): [] __do_softirq+0x14/0x20 [ 597.229468][ C1] ---[ end trace 0000000000000000 ]--- [ 597.876165][ T242] device hsr_slave_0 left promiscuous mode [ 597.938398][ T242] device hsr_slave_1 left promiscuous mode [ 597.988300][ T242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.991045][ T242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.993909][ T242] device bridge_slave_1 left promiscuous mode [ 597.995789][ T242] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.049119][ T242] device bridge_slave_0 left promiscuous mode [ 598.050998][ T242] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.338412][ T4303] Bluetooth: hci1: command 0x040f tx timeout [ 598.894491][ T242] team0 (unregistering): Port device team_slave_1 removed [ 599.120244][ T242] team0 (unregistering): Port device team_slave_0 removed [ 599.349932][ T242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.619732][ T242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.408269][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 602.312173][ T242] bond0 (unregistering): Released all slaves [ 604.803007][ T242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.910630][ T242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.009945][ T242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.112832][ T242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.403404][ T242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.520317][ T242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.661584][ T242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.750691][ T242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.957181][ T242] ------------[ cut here ]------------ [ 605.959128][ T242] refcount_t: saturated; leaking memory. [ 605.969683][ T242] WARNING: CPU: 0 PID: 242 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 605.972514][ T242] Modules linked in: [ 605.973601][ T242] CPU: 0 PID: 242 Comm: kworker/u4:4 Tainted: G W 6.1.141-syzkaller #0 [ 605.976348][ T242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.979178][ T242] Workqueue: netns cleanup_net [ 605.980533][ T242] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 605.982793][ T242] pc : refcount_warn_saturate+0x174/0x1f8 [ 605.984312][ T242] lr : refcount_warn_saturate+0x174/0x1f8 [ 605.985957][ T242] sp : ffff800020c07280 [ 605.987140][ T242] x29: ffff800020c07280 x28: 1ffff00004180e58 x27: dfff800000000000 [ 605.989490][ T242] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000f964d614 [ 605.991718][ T242] x23: 0000000000000046 x22: 0000000000000cc0 x21: 000000007ffffffe [ 605.993957][ T242] x20: ffff0000f964d614 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 605.996184][ T242] x17: 1fffe00033ee2f76 x16: ffff8000082d1c00 x15: ffff80001506d000 [ 605.998499][ T242] x14: 0000000000000100 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 606.000730][ T242] x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 06659b24c1a39200 [ 606.002941][ T242] x8 : 06659b24c1a39200 x7 : ffff8000082516dc x6 : 0000000000000000 [ 606.005149][ T242] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 606.007381][ T242] x2 : 0000000000000006 x1 : ffff800011a7d7e0 x0 : ffff80018a752000 [ 606.009624][ T242] Call trace: [ 606.010521][ T242] refcount_warn_saturate+0x174/0x1f8 [ 606.012006][ T242] nf_nat_masq_schedule+0x478/0x54c [ 606.013433][ T242] masq_device_event+0x9c/0xe0 [ 606.014793][ T242] raw_notifier_call_chain+0xd4/0x164 [ 606.016297][ T242] dev_close_many+0x2cc/0x440 [ 606.017606][ T242] unregister_netdevice_many+0x3c4/0x1740 [ 606.019222][ T242] unregister_netdevice_queue+0x2ac/0x2f8 [ 606.020829][ T242] nsim_destroy+0x58/0x164 [ 606.022067][ T242] __nsim_dev_port_del+0x144/0x1a4 [ 606.023486][ T242] nsim_dev_reload_destroy+0x240/0x43c [ 606.024974][ T242] nsim_dev_reload_down+0x9c/0xd4 [ 606.026368][ T242] devlink_reload+0x1b4/0x570 [ 606.027701][ T242] devlink_pernet_pre_exit+0x118/0x2a8 [ 606.029206][ T242] cleanup_net+0x470/0xa74 [ 606.030439][ T242] process_one_work+0x7f4/0x13a8 [ 606.031807][ T242] worker_thread+0x8c8/0xfbc [ 606.033106][ T242] kthread+0x250/0x2d8 [ 606.034244][ T242] ret_from_fork+0x10/0x20 [ 606.035499][ T242] irq event stamp: 16891244 [ 606.036720][ T242] hardirqs last enabled at (16891243): [] finish_lock_switch+0xb0/0x1c4 [ 606.039608][ T242] hardirqs last disabled at (16891244): [] el1_dbg+0x24/0x80 [ 606.042158][ T242] softirqs last enabled at (16891226): [] handle_softirqs+0xaf8/0xc6c [ 606.044991][ T242] softirqs last disabled at (16891201): [] __do_softirq+0x14/0x20 [ 606.047682][ T242] ---[ end trace 0000000000000000 ]--- [ 606.052995][ T242] ------------[ cut here ]------------ [ 606.054580][ T242] WARNING: CPU: 0 PID: 242 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc [ 606.057044][ T242] Modules linked in: [ 606.058067][ T242] CPU: 0 PID: 242 Comm: kworker/u4:4 Tainted: G W 6.1.141-syzkaller #0 [ 606.060760][ T242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.063632][ T242] Workqueue: netns cleanup_net [ 606.065020][ T242] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 606.067206][ T242] pc : ref_tracker_alloc+0x230/0x3cc [ 606.068710][ T242] lr : ref_tracker_alloc+0x230/0x3cc [ 606.070191][ T242] sp : ffff800020c07160 [ 606.071543][ T242] x29: ffff800020c07240 x28: 1ffff00004180e58 x27: dfff800000000000 [ 606.073920][ T242] x26: dfff800000000000 x25: ffff700004180e2c x24: ffff000100ef3c08 [ 606.076178][ T242] x23: ffff800020c07160 x22: ffff0000f964d664 x21: ffff000100ef3c50 [ 606.078474][ T242] x20: 0000000000000cc0 x19: ffff0000f964d618 x18: ffff800011a7bce0 [ 606.080699][ T242] x17: 1fffe00033ee2f76 x16: ffff8000082d1c00 x15: ffff80001506d000 [ 606.082973][ T242] x14: 00000000ffff8000 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 606.085289][ T242] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44 [ 606.087525][ T242] x8 : ffff0000c9c65340 x7 : 0000000000000000 x6 : 000000000000003f [ 606.089771][ T242] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 606.092041][ T242] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800020c07180 [ 606.094278][ T242] Call trace: [ 606.095239][ T242] ref_tracker_alloc+0x230/0x3cc [ 606.096626][ T242] nf_nat_masq_schedule+0x328/0x54c [ 606.098127][ T242] masq_device_event+0x9c/0xe0 [ 606.099481][ T242] raw_notifier_call_chain+0xd4/0x164 [ 606.101038][ T242] dev_close_many+0x2cc/0x440 [ 606.102300][ T242] unregister_netdevice_many+0x3c4/0x1740 [ 606.103942][ T242] unregister_netdevice_queue+0x2ac/0x2f8 [ 606.105588][ T242] nsim_destroy+0x58/0x164 [ 606.106877][ T242] __nsim_dev_port_del+0x144/0x1a4 [ 606.108243][ T242] nsim_dev_reload_destroy+0x240/0x43c [ 606.109747][ T242] nsim_dev_reload_down+0x9c/0xd4