last executing test programs: 41.165984238s ago: executing program 1 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000015000103000000000000000005"], 0x14}}, 0x0) 40.924313411s ago: executing program 2 (id=977): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@ng, 0x2, 0x0) mount$overlay(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 40.253143135s ago: executing program 1 (id=979): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socket$phonet(0x23, 0x2, 0x1) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0000000000004a000000003900000004000d"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71af0ef2355a69d2dd510d0ca89bd043"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac14140ce000000d62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x10, 0xa2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8020, 0x544, 0xfffffffe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0x0, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x0, 0x2, [{0x2, 0x5}]}]}, 0x68}}, 0x0) r11 = socket(0x40000000015, 0x3, 0x3fe) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0900010073797a300000000028097600030a01010000000000000000010000000900010073797a300000000008000b4000000000140000001000010000000000000000000000000a00"/112], 0x70}}, 0x0) 40.165828521s ago: executing program 2 (id=980): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x80789440, &(0x7f0000000000)={0x1, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.327500471s ago: executing program 1 (id=982): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="5100330080040000080211000000080211000001a5fcc8639e9800000000000000000000640000000006020202020202010004060000000000000602000025030084003c04000000007206030303030303000000cbba661fcc57de60bec77e86ac057ac5c08af5afbb81f602d28f9a033ca50f2c31cf8ce054524e265c380e47d43196afab699c2c25d660aeec27bbb75416a25002ad0806a139a3cf4464e5b24dfe3be8bb76ba3707e2a3f04f34b27b945b55c4ee975bf19afbeea88302aaa616ba0ee9ed9c90502a5e6c3983a134c5ac050e036e10a68815"], 0x70}}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240), 0x3af4701e) sendfile(r10, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[], 0x60}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0xe2, &(0x7f0000001600)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xab, 0x1, '-', "b77a41", 0x0, "f13ae9b1e679ab28c21f57db2fc9bfc1212f27f8bb599ca7bbe1eb8edcecbbf7f10ce5ebc6f6e44c59c7beadf9d767dd26263fafd626719ca9c5528faaa373a068ef212c465b402815270bf8fcbf0cc18ecb9b04a459617978697b2dc5e06ac041223a04e191d7cb02ffc2e44a3a0f4f2b68e01ae6efbd6d49dfb5d65ec3dab2d8fa9ec4ae027f55458239a01aaca224fdf7aaf5f62e5b30ba085a648d572898e925721b36ecad9faa5b99e7fc6711f46115a9bf3b08851101285439459358a9b74a34afb5c2436015a25133"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x21}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 39.071275652s ago: executing program 2 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'sit0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 38.817076172s ago: executing program 1 (id=987): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xff) 38.816688762s ago: executing program 2 (id=988): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2, 0x10001}}}}}, 0x0) 38.675636607s ago: executing program 2 (id=990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socket$phonet(0x23, 0x2, 0x1) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0000000000004a000000003900000004000d"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71af0ef2355a69d2dd510d0ca89bd043"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x10, 0xa2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8020, 0x544, 0xfffffffe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0x0, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x0, 0x2, [{0x2, 0x5}]}]}, 0x68}}, 0x0) r11 = socket(0x40000000015, 0x3, 0x3fe) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0900010073797a300000000028097600030a01010000000000000000010000000900010073797a300000000008000b4000000000140000001000010000000000000000000000000a00"/112], 0x70}}, 0x0) 38.555864236s ago: executing program 1 (id=991): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 38.432893441s ago: executing program 1 (id=992): unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008027648d15aadda379511000001ffffffffffff"], 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000340)={'L-', 0xa3}, 0x16, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="c8", 0x1}], 0x1}}], 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) 20.760872353s ago: executing program 3 (id=1023): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8000c62) 20.127490398s ago: executing program 3 (id=1024): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x0, 0x10001}}}}}, 0x0) 16.711526968s ago: executing program 3 (id=1026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x20) 16.584456505s ago: executing program 3 (id=1029): unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008027648d15aadda379511000001ffffffffffff"], 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000340)={'L-', 0xa3}, 0x16, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="c8", 0x1}], 0x1}}], 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) 15.132358155s ago: executing program 3 (id=1035): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000b0a000000000000000000000000000014000000e803010000000000000000000000000a1785db81b548ecd2a643adb242d9c3e083e72fad228889eed6e61d66a5bf3f36223bc144db417851053a770f48f2ff851d3af2f74af25e151db0c75a8c5d35"], 0x3c}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWSET={0x56c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4ae}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xde6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x49c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ec8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57c8902e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ac9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f4f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8d1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93da}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x708}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x35}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30aa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x716}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d2e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x1b0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa999}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ce498a3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29298382}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x651a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40d0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff554}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x154}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8668}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10}]}]}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x6a8}, 0x1, 0x0, 0x0, 0x20000804}, 0x80) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x6}], 0x300) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x20ec2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 14.241414935s ago: executing program 3 (id=1041): socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{}, {}, @device_b}, @random="d2e19a5c24a934"}, 0x1f) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0xaa}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3c) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x42000000) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(r3, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bind$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)="e4", 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.209545792s ago: executing program 0 (id=1054): unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008027648d15aadda379511000001ffffffffffff"], 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000340)={'L-', 0xa3}, 0x16, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="c8", 0x1}], 0x1}}], 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) 1.595383386s ago: executing program 4 (id=1060): socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{}, {}, @device_b}, @random="d2e19a5c24a934"}, 0x1f) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0xaa}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3c) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x42000000) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(r3, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bind$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)="e4", 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.537777326s ago: executing program 0 (id=1061): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136cc72a730a26bc}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.51279268s ago: executing program 0 (id=1062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socket$phonet(0x23, 0x2, 0x1) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0000000000004a000000003900000004000d"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71af0ef2355a69d2dd510d0ca89bd043"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x10, 0xa2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8020, 0x544, 0xfffffffe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0x0, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x0, 0x2, [{0x2, 0x5}]}]}, 0x68}}, 0x0) r11 = socket(0x40000000015, 0x3, 0x3fe) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0900010073797a300000000028097600030a01010000000000000000010000000900010073797a300000000008000b4000000000140000001000010000000000000000000000000a00"/112], 0x70}}, 0x0) 1.27191011s ago: executing program 0 (id=1063): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000b0a000000000000000000000000000014000000e803010000000000000000000000000a1785db81b548ecd2a643adb242d9c3e083e72fad228889eed6e61d66a5bf3f36223bc144db417851053a770f48f2ff851d3af2f74af25e151db0c75a8c5d35"], 0x3c}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWSET={0x56c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4ae}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xde6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x49c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ec8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57c8902e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ac9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f4f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8d1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93da}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x708}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x35}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30aa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x716}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d2e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x1b0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa999}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ce498a3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29298382}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x651a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40d0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff554}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x154}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8668}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10}]}]}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x6a8}, 0x1, 0x0, 0x0, 0x20000804}, 0x80) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x6}], 0x300) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x20ec2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x6, @local}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 1.078384964s ago: executing program 2 (id=995): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000001c0), &(0x7f0000000700)='./file0\x00', 0x3010400, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32], 0x1, 0x5bc4, &(0x7f0000001f40)="$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") 388.943327ms ago: executing program 4 (id=1064): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x140, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xa0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x64, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x140}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x57}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x52}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x350}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 352.82745ms ago: executing program 0 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 236.022064ms ago: executing program 4 (id=1066): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe5a}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x20) 136.834792ms ago: executing program 4 (id=1067): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="18", 0x1, 0x4c851, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000600), &(0x7f00000004c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "dca68d1e5324", @long="9c487c76d3df5768f36e2daec67caf34"}}}}]}, 0x54}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000041000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000000e016275eec6468c00a54608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x204080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x8040) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000140)="1ad6c668d79bf6d96134e0b9871704d590febf9590bd9585c8845670414e5845d58e243a7f0442711ca0eefa674026874fee190753a825c5c419821534000d90c580066c7af7ea3c6e933141852f7e9d3d8720c569424127d59ba3362ca81199ddaddc1ee88f76c887a4391cf0022e0e9754abf3", 0x74, 0x4004040, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10) 135.101378ms ago: executing program 0 (id=1068): unshare(0x20000400) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008027648d15aadda379511000001ffffffffffff"], 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000340)={'L-', 0xa3}, 0x16, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="c8", 0x1}], 0x1}}], 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) 74.62446ms ago: executing program 4 (id=1069): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136cc72a730a26bc}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 4 (id=1070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socket$phonet(0x23, 0x2, 0x1) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0000000000004a000000003900000004000d"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71af0ef2355a69d2dd510d0ca89bd043"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x10, 0xa2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8020, 0x544, 0xfffffffe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0x0, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x0, 0x2, [{0x2, 0x5}]}]}, 0x68}}, 0x0) r11 = socket(0x40000000015, 0x3, 0x3fe) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0900010073797a300000000028097600030a01010000000000000000010000000900010073797a300000000008000b4000000000140000001000010000000000000000000000000a00"/112], 0x70}}, 0x0) kernel console output (not intermixed with test programs): 755989][T11164] XFS (loop0): Quotacheck: Done. [ 468.781197][T10818] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 468.879961][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.904016][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.905918][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.973604][ T1740] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.975656][ T1740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.002821][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.043555][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.045656][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.056396][T11053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.059175][T11053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.062384][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.190972][T11050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.207338][T11050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.209458][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.212608][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.266670][T11050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.271238][T11050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.481045][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.662621][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.784454][T11193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.881499][T11053] veth0_vlan: entered promiscuous mode [ 469.976870][T11050] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.996523][T11053] veth1_vlan: entered promiscuous mode [ 470.184381][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.186377][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.203700][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.205678][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.227832][T11234] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 470.548734][T11236] loop0: detected capacity change from 0 to 32768 [ 470.559265][T11236] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 470.589108][T11236] XFS (loop0): Ending clean mount [ 470.602753][T11236] XFS (loop0): Quotacheck needed: Please wait. [ 470.632232][T11236] XFS (loop0): Quotacheck: Done. [ 470.663881][T10818] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 470.960141][T11053] veth0_macvtap: entered promiscuous mode [ 470.985168][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 470.994362][T11053] veth1_macvtap: entered promiscuous mode [ 471.153429][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.156522][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.163871][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.166895][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.169723][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.172915][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.177203][T11270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.180613][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.184045][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.186841][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.189792][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.192651][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.196824][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.200999][T11053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.220080][T11270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.229863][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.237909][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.247914][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.256466][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.266452][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.272678][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.277795][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.284026][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.288993][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.296646][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.303316][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.307286][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.314664][T11053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.362313][ T4265] hsr_slave_0: left promiscuous mode [ 471.404211][ T4265] hsr_slave_1: left promiscuous mode [ 471.411013][T11269] loop4: detected capacity change from 0 to 32768 [ 471.418746][T11269] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 471.441590][T11269] XFS (loop4): Ending clean mount [ 471.444703][T11269] XFS (loop4): Quotacheck needed: Please wait. [ 471.472395][T11269] XFS (loop4): Quotacheck: Done. [ 471.483426][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.490075][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.494701][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.501116][T10622] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 471.504013][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.512733][ T4265] hsr_slave_0: left promiscuous mode [ 471.560194][ T4265] hsr_slave_1: left promiscuous mode [ 471.669100][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.671253][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.675347][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.677519][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.682386][ T4265] hsr_slave_0: left promiscuous mode [ 471.733331][ T4265] hsr_slave_1: left promiscuous mode [ 471.813485][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.815577][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.818087][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.820350][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.881864][ T4265] veth1_macvtap: left promiscuous mode [ 471.885985][ T4265] veth0_macvtap: left promiscuous mode [ 471.888585][ T4265] veth1_vlan: left promiscuous mode [ 471.890180][ T4265] veth0_vlan: left promiscuous mode [ 471.892497][ T4265] veth1_macvtap: left promiscuous mode [ 471.913170][ T4265] veth0_macvtap: left promiscuous mode [ 471.917275][ T4265] veth1_vlan: left promiscuous mode [ 471.918822][ T4265] veth0_vlan: left promiscuous mode [ 471.921044][ T4265] veth1_macvtap: left promiscuous mode [ 471.922729][ T4265] veth0_macvtap: left promiscuous mode [ 471.928416][ T4265] veth1_vlan: left promiscuous mode [ 471.931083][ T4265] veth0_vlan: left promiscuous mode [ 471.951802][T11266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.068335][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 474.291661][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 478.636845][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 478.839658][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 481.087699][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.092961][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.098022][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.101617][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.104388][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 481.106714][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.118354][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.125981][ T5865] Bluetooth: hci5: command tx timeout [ 483.130143][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.130431][ T6305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 483.137750][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.139963][ T6305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 483.141209][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.144323][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 483.146632][ T5865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 483.149145][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.151807][ T6305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 483.173074][ T52] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 483.175977][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 483.278105][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 483.514770][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 485.203296][ T52] Bluetooth: hci7: command tx timeout [ 485.203385][ T6305] Bluetooth: hci5: command tx timeout [ 485.206873][ T6307] Bluetooth: hci6: command tx timeout [ 485.928217][T11053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.930625][T11053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.932866][T11053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.936158][T11053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.940776][T11292] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 486.737779][T11050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.103334][ T463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.105555][ T463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.172292][T11050] veth0_vlan: entered promiscuous mode [ 487.203327][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.207746][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.218605][T11050] veth1_vlan: entered promiscuous mode [ 487.237053][T11296] chnl_net:caif_netlink_parms(): no params data found [ 487.283341][ T52] Bluetooth: hci6: command tx timeout [ 487.283550][ T6305] Bluetooth: hci5: command tx timeout [ 487.284907][ T6307] Bluetooth: hci7: command tx timeout [ 487.341397][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.353091][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.355229][T11296] bridge_slave_0: entered allmulticast mode [ 487.357351][T11296] bridge_slave_0: entered promiscuous mode [ 487.361373][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.364209][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.366284][T11296] bridge_slave_1: entered allmulticast mode [ 487.368415][T11296] bridge_slave_1: entered promiscuous mode [ 487.410524][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.420124][T11303] chnl_net:caif_netlink_parms(): no params data found [ 487.428248][T11301] chnl_net:caif_netlink_parms(): no params data found [ 487.471319][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.503803][T11050] veth0_macvtap: entered promiscuous mode [ 487.507270][T11050] veth1_macvtap: entered promiscuous mode [ 487.517396][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.520309][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.522952][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.534273][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.536930][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.540599][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.553077][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.556244][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.560749][T11050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.591749][T11329] loop2: detected capacity change from 0 to 32768 [ 487.600196][T11296] team0: Port device team_slave_0 added [ 487.646151][T11329] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.673488][T11329] XFS (loop2): Ending clean mount [ 487.676788][T11329] XFS (loop2): Quotacheck needed: Please wait. [ 487.679884][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.682936][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.693463][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.696272][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.698928][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.701772][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.705395][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.708235][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.710888][T11329] XFS (loop2): Quotacheck: Done. [ 487.711985][T11050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.719312][T11296] team0: Port device team_slave_1 added [ 487.732673][T11053] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.748023][T11050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.750429][T11050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.761192][T11050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.764794][T11050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.772648][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.775552][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.782724][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.829070][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.831107][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.861452][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.952472][T11346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.967025][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.969092][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.971131][T11303] bridge_slave_0: entered allmulticast mode [ 487.974569][T11303] bridge_slave_0: entered promiscuous mode [ 487.977925][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.979890][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.981908][T11303] bridge_slave_1: entered allmulticast mode [ 487.985144][T11303] bridge_slave_1: entered promiscuous mode [ 487.991796][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.994066][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.996160][T11301] bridge_slave_0: entered allmulticast mode [ 487.998446][T11301] bridge_slave_0: entered promiscuous mode [ 488.001718][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.006741][T11346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.009228][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.013293][T11301] bridge_slave_1: entered allmulticast mode [ 488.015594][T11301] bridge_slave_1: entered promiscuous mode [ 488.053889][T11303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.093606][T11303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.155307][T11296] hsr_slave_0: entered promiscuous mode [ 488.205213][T11296] hsr_slave_1: entered promiscuous mode [ 488.243194][T11296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.245160][T11296] Cannot create hsr debugfs directory [ 488.322619][T11301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.415541][T11301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.443664][T11303] team0: Port device team_slave_0 added [ 488.506089][ T2049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.508273][ T2049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.521081][T11301] team0: Port device team_slave_0 added [ 488.529664][T11303] team0: Port device team_slave_1 added [ 488.575338][T11301] team0: Port device team_slave_1 added [ 488.585251][T11303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.587161][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.594571][T11303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.605761][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.608372][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.642020][T11303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.644771][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.651930][T11303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.689843][T11301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.691856][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.702012][T11301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.713675][T11301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.715606][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.722303][T11301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.725796][T11344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.774995][T11303] hsr_slave_0: entered promiscuous mode [ 488.813677][T11303] hsr_slave_1: entered promiscuous mode [ 488.943255][T11303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.945517][T11303] Cannot create hsr debugfs directory [ 489.028153][T11296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.148868][T11296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.235234][T11301] hsr_slave_0: entered promiscuous mode [ 489.291555][T11301] hsr_slave_1: entered promiscuous mode [ 489.333606][T11301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.335789][T11301] Cannot create hsr debugfs directory [ 489.363431][ T6307] Bluetooth: hci5: command tx timeout [ 489.373663][ T6307] Bluetooth: hci7: command tx timeout [ 489.373690][ T6305] Bluetooth: hci6: command tx timeout [ 489.451073][T11296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.704308][T11371] loop2: detected capacity change from 0 to 32768 [ 489.756784][T11371] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 489.782022][T11371] XFS (loop2): Ending clean mount [ 489.785013][T11371] XFS (loop2): Quotacheck needed: Please wait. [ 489.816544][T11371] XFS (loop2): Quotacheck: Done. [ 489.842548][T11053] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 489.993699][T11386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.034892][T11296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.160611][T11391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.191249][T11388] loop2: detected capacity change from 0 to 32768 [ 490.198059][T11388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.874 (11388) [ 490.219430][T11388] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 490.222869][T11388] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 490.226150][T11388] BTRFS info (device loop2): disk space caching is enabled [ 490.286984][T11388] BTRFS info (device loop2): rebuilding free space tree [ 490.302581][T11388] BTRFS info (device loop2): disabling free space tree [ 490.311331][T11388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 490.314894][T11388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 490.383977][T11053] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 490.536088][ T4265] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.776711][T11384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.857685][ T4265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.133118][ T4265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.171993][T11296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.183792][T11296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.233102][T11303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.287778][ T4265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.295863][T11296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.299306][T11296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.372633][T11303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.437518][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.443318][ T6305] Bluetooth: hci6: command tx timeout [ 491.453134][ T6305] Bluetooth: hci7: command tx timeout [ 491.455965][T11422] Zero length message leads to an empty skb [ 491.535094][T11303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.558960][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.597846][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.599825][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.613244][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.615325][ T6343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.708763][T11303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.850902][ T4265] bridge_slave_1: left allmulticast mode [ 491.852519][ T4265] bridge_slave_1: left promiscuous mode [ 491.879564][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.902553][ T4265] bridge_slave_0: left allmulticast mode [ 491.904666][ T4265] bridge_slave_0: left promiscuous mode [ 491.906215][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.923953][T11426] loop3: detected capacity change from 0 to 32768 [ 491.932760][ T4265] bridge_slave_1: left allmulticast mode [ 491.935432][ T4265] bridge_slave_1: left promiscuous mode [ 491.937035][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.958576][T11426] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 491.961431][ T4265] bridge_slave_0: left allmulticast mode [ 491.962900][ T4265] bridge_slave_0: left promiscuous mode [ 491.975047][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.990305][ T4265] bridge_slave_1: left allmulticast mode [ 491.991828][ T4265] bridge_slave_1: left promiscuous mode [ 491.998318][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.015809][ T4265] bridge_slave_0: left allmulticast mode [ 492.017371][ T4265] bridge_slave_0: left promiscuous mode [ 492.018988][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.029708][T11426] XFS (loop3): Ending clean mount [ 492.032084][T11426] XFS (loop3): Quotacheck needed: Please wait. [ 492.103708][T11426] XFS (loop3): Quotacheck: Done. [ 492.285694][T11050] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 492.765713][T11460] 9pnet_fd: Insufficient options for proto=fd [ 494.565097][ T2310] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.568421][ T2310] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.151298][T11475] loop3: detected capacity change from 0 to 32768 [ 495.162539][T11475] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 495.192583][T11475] XFS (loop3): Ending clean mount [ 495.209011][T11475] XFS (loop3): Quotacheck needed: Please wait. [ 495.246064][T11475] XFS (loop3): Quotacheck: Done. [ 495.334437][T11050] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 496.594731][T11501] loop2: detected capacity change from 0 to 32768 [ 496.600471][T11501] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got c5d2b25c should be 484e7e3b [ 496.680774][T11501] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 496.684777][T11501] bcachefs (loop2): recovering from clean shutdown, journal seq 15 [ 496.739755][T11501] bcachefs (loop2): alloc_read... done [ 496.741623][T11501] bcachefs (loop2): stripes_read... done [ 496.743316][T11501] bcachefs (loop2): snapshots_read... done [ 496.755012][T11501] bcachefs (loop2): journal_replay... done [ 496.757239][T11501] bcachefs (loop2): resume_logged_ops... done [ 496.759281][T11501] bcachefs (loop2): going read-write [ 496.768054][T11501] bcachefs (loop2): done starting filesystem [ 496.789746][T11053] bcachefs (loop2): shutting down [ 496.791438][T11053] bcachefs (loop2): going read-only [ 496.793911][T11053] bcachefs (loop2): finished waiting for writes to stop [ 496.845903][T11053] bcachefs (loop2): flushing journal and stopping allocators, journal seq 15 [ 496.848736][T11053] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 496.871238][T11053] bcachefs (loop2): shutdown complete, journal seq 16 [ 496.874065][T11053] bcachefs (loop2): marking filesystem clean [ 496.892784][T11053] bcachefs (loop2): shutdown complete [ 497.080795][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.143505][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.185282][ T4265] bond0 (unregistering): Released all slaves [ 497.496403][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 497.906735][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.946643][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.985921][ T4265] bond0 (unregistering): Released all slaves [ 498.655480][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.695757][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.736186][ T4265] bond0 (unregistering): Released all slaves [ 498.750165][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.845093][T11524] mac80211_hwsim hwsim96 wlan1: entered promiscuous mode [ 498.877013][T11296] veth0_vlan: entered promiscuous mode [ 498.901337][T11296] veth1_vlan: entered promiscuous mode [ 498.939165][T11303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.959825][T11303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.106621][T11303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.110220][T11303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.337639][T11524] loop3: detected capacity change from 0 to 32768 [ 499.372614][T11296] veth0_macvtap: entered promiscuous mode [ 499.395095][T11524] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.538062][T11524] XFS (loop3): Ending clean mount [ 499.550602][T11524] XFS (loop3): Quotacheck needed: Please wait. [ 499.638381][T11524] XFS (loop3): Quotacheck: Done. [ 499.656738][T11296] veth1_macvtap: entered promiscuous mode [ 499.890568][T11523] mac80211_hwsim hwsim96 wlan1: left promiscuous mode [ 499.969754][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.972596][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.996093][T11050] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.996134][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.001879][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.014147][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.016973][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.019614][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.022426][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.043147][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.046207][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.050091][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.302805][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.319604][T11557] loop2: detected capacity change from 0 to 512 [ 500.322778][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.333565][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.336408][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.344031][T11557] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.904: casefold flag without casefold feature [ 500.347582][T11557] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.904: couldn't read orphan inode 15 (err -117) [ 500.350995][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.363380][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.366054][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.368895][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.371654][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.375110][T11557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.402970][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.423574][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.438732][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.457269][T11053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.492449][T11296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.503291][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.505750][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.506674][T11296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.510113][T11296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.523740][T11296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.721233][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.723257][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.735301][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 500.737846][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.769853][T11301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.780764][T11301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.791451][T11301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.810209][T11301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.870682][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.872799][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.878279][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.880208][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.900183][T11303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.903246][T11303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.234319][T11301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.278418][ T1970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.280631][ T1970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.284662][T11303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.309774][T11301] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.466355][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.468516][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.508673][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.510566][ T6354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.523851][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.525740][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.630579][ T4265] hsr_slave_0: left promiscuous mode [ 501.665124][ T4265] hsr_slave_1: left promiscuous mode [ 501.706159][T11631] loop3: detected capacity change from 0 to 40427 [ 501.708730][T11631] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 501.710837][T11631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 501.714504][T11631] F2FS-fs (loop3): invalid crc value [ 501.718907][T11631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.734307][T11631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 501.736197][T11631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 501.743397][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.746457][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.754154][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 501.754520][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.758467][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.787021][ T4265] hsr_slave_0: left promiscuous mode [ 501.814130][ T282] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 501.820116][ T282] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 501.829126][ T4265] hsr_slave_1: left promiscuous mode [ 501.838249][ T282] kworker/u8:5: attempt to access beyond end of device [ 501.838249][ T282] loop3: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 501.878317][T11650] loop2: detected capacity change from 0 to 512 [ 501.886327][T11650] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.915: casefold flag without casefold feature [ 501.894310][T11650] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.915: couldn't read orphan inode 15 (err -117) [ 501.902957][T11650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.913527][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.917185][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.923353][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.925391][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.936867][ T4265] hsr_slave_0: left promiscuous mode [ 501.957771][T11053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.974641][ T4265] hsr_slave_1: left promiscuous mode [ 502.023639][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.025694][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.033814][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.035896][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.170090][ T4265] veth1_macvtap: left promiscuous mode [ 502.171687][ T4265] veth0_macvtap: left promiscuous mode [ 502.173806][ T4265] veth1_vlan: left promiscuous mode [ 502.175385][ T4265] veth0_vlan: left promiscuous mode [ 502.177673][ T4265] veth1_macvtap: left promiscuous mode [ 502.179215][ T4265] veth0_macvtap: left promiscuous mode [ 502.181083][ T4265] veth1_vlan: left promiscuous mode [ 502.184820][ T4265] veth0_vlan: left promiscuous mode [ 502.189183][ T4265] veth1_macvtap: left promiscuous mode [ 502.190958][ T4265] veth0_macvtap: left promiscuous mode [ 502.193270][ T4265] veth1_vlan: left promiscuous mode [ 502.195128][ T4265] veth0_vlan: left promiscuous mode [ 502.760694][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 503.115954][T11663] loop2: detected capacity change from 0 to 32768 [ 503.147161][T11663] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.194623][T11663] XFS (loop2): Ending clean mount [ 503.201316][T11663] XFS (loop2): Quotacheck needed: Please wait. [ 503.233511][T11663] XFS (loop2): Quotacheck: Done. [ 503.269690][T11053] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.469702][ T30] audit: type=1326 audit(759.431:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.2.920" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f41e28 code=0x0 [ 504.787766][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 504.984938][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 509.397230][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 509.617481][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 512.181494][ T6305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.190138][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.193157][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.194296][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.195671][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.199548][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 512.200295][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.201709][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.211471][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.218566][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.220980][ T5865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 512.223094][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.646515][ T6305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.650366][ T6305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.655971][ T6305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.658486][ T6305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.660927][ T6305] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 513.662966][ T6305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.243268][ T6305] Bluetooth: hci0: command tx timeout [ 514.245889][ T5865] Bluetooth: hci1: command tx timeout [ 514.288021][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 514.466884][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 515.683598][ T5865] Bluetooth: hci4: command tx timeout [ 516.324693][ T5865] Bluetooth: hci1: command tx timeout [ 516.326195][ T5865] Bluetooth: hci0: command tx timeout [ 517.092523][T11676] netlink: 830 bytes leftover after parsing attributes in process `syz.2.920'. [ 517.248160][T11303] veth0_vlan: entered promiscuous mode [ 517.280563][T11303] veth1_vlan: entered promiscuous mode [ 517.327878][T11303] veth0_macvtap: entered promiscuous mode [ 517.331284][T11303] veth1_macvtap: entered promiscuous mode [ 517.391220][T11685] chnl_net:caif_netlink_parms(): no params data found [ 517.408797][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.411582][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.416616][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.419353][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.422021][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.428908][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.432668][T11303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.655215][T11680] chnl_net:caif_netlink_parms(): no params data found [ 517.688711][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.691582][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.694662][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.697493][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.700046][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.702757][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.707976][T11303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.712243][T11303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.714714][T11303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.717044][T11303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.719282][T11303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.763850][ T6305] Bluetooth: hci4: command tx timeout [ 517.789849][T11679] chnl_net:caif_netlink_parms(): no params data found [ 517.794014][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.795972][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.798109][T11685] bridge_slave_0: entered allmulticast mode [ 517.800530][T11685] bridge_slave_0: entered promiscuous mode [ 517.806443][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.808479][T11685] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.810587][T11685] bridge_slave_1: entered allmulticast mode [ 517.812729][T11685] bridge_slave_1: entered promiscuous mode [ 517.871388][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.875641][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.877753][T11680] bridge_slave_0: entered allmulticast mode [ 517.879889][T11680] bridge_slave_0: entered promiscuous mode [ 517.885246][T11685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.889708][T11301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.893818][ T1970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.895968][ T1970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.914928][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.916851][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.918907][T11680] bridge_slave_1: entered allmulticast mode [ 517.924529][T11680] bridge_slave_1: entered promiscuous mode [ 517.940343][T11685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.949286][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.955514][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.021714][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.024439][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.038722][T11680] team0: Port device team_slave_0 added [ 518.057085][T11685] team0: Port device team_slave_0 added [ 518.070063][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.071960][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.082512][T11679] bridge_slave_0: entered allmulticast mode [ 518.091772][T11679] bridge_slave_0: entered promiscuous mode [ 518.098063][T11680] team0: Port device team_slave_1 added [ 518.102458][T11685] team0: Port device team_slave_1 added [ 518.109818][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.111985][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.117155][T11679] bridge_slave_1: entered allmulticast mode [ 518.119369][T11679] bridge_slave_1: entered promiscuous mode [ 518.142690][T11680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.144867][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.151807][T11680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.210658][T11301] veth0_vlan: entered promiscuous mode [ 518.221520][T11680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.223623][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.230842][T11680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.233394][T11716] loop4: detected capacity change from 0 to 512 [ 518.234931][T11685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.239698][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.250179][T11716] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.924: casefold flag without casefold feature [ 518.254796][T11716] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.924: couldn't read orphan inode 15 (err -117) [ 518.258758][T11716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.261820][T11685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.266977][T11685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.268790][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.275871][T11685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.292052][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.300320][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.314757][T11303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.316030][T11301] veth1_vlan: entered promiscuous mode [ 518.375183][T11685] hsr_slave_0: entered promiscuous mode [ 518.403234][ T6305] Bluetooth: hci0: command tx timeout [ 518.404659][ T6305] Bluetooth: hci1: command tx timeout [ 518.454146][T11685] hsr_slave_1: entered promiscuous mode [ 518.518730][T11679] team0: Port device team_slave_0 added [ 518.556875][T11679] team0: Port device team_slave_1 added [ 518.608588][T11722] loop4: detected capacity change from 0 to 32768 [ 518.621178][T11680] hsr_slave_0: entered promiscuous mode [ 518.637458][T11722] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 518.661575][T11722] XFS (loop4): Ending clean mount [ 518.663614][T11680] hsr_slave_1: entered promiscuous mode [ 518.668777][T11722] XFS (loop4): Quotacheck needed: Please wait. [ 518.693710][T11680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.695782][T11680] Cannot create hsr debugfs directory [ 518.699079][T11722] XFS (loop4): Quotacheck: Done. [ 518.743355][T11301] veth0_macvtap: entered promiscuous mode [ 518.790358][T11303] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 518.850437][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.852420][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.860379][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.873491][T11301] veth1_macvtap: entered promiscuous mode [ 518.881038][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.891380][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.901294][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.904547][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.907285][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.910070][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.912614][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.916091][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.920009][T11301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.016618][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.018489][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.035922][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.105556][T11679] hsr_slave_0: entered promiscuous mode [ 519.226666][T11679] hsr_slave_1: entered promiscuous mode [ 519.375215][T11679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.395963][T11679] Cannot create hsr debugfs directory [ 519.735948][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.738795][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.741401][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.749595][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.752205][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.755385][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.758168][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.761047][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.768373][T11301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.843320][ T5865] Bluetooth: hci4: command tx timeout [ 519.876601][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.881386][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.897210][T11685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.935636][T11301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.938069][T11301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.940469][T11301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.942806][T11301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.028320][T11685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.156091][T11685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.167458][ T1970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.169674][ T1970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.493135][ T5865] Bluetooth: hci1: command tx timeout [ 520.493200][ T6305] Bluetooth: hci0: command tx timeout [ 520.637814][T11745] loop4: detected capacity change from 0 to 512 [ 520.646056][T11745] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.931: casefold flag without casefold feature [ 520.649812][T11745] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.931: couldn't read orphan inode 15 (err -117) [ 520.658237][T11745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.686278][T11303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.740809][T11685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.744473][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.746930][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.087660][ T4265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.118958][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.121139][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.194920][ T4265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.300839][T11755] loop4: detected capacity change from 0 to 128 [ 521.321300][T11755] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 521.333705][ T4265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.388229][T11680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.451229][T11753] loop0: detected capacity change from 0 to 32768 [ 521.456790][T11753] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 521.483215][T11753] XFS (loop0): Ending clean mount [ 521.485570][T11753] XFS (loop0): Quotacheck needed: Please wait. [ 521.495796][ T4265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.499048][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.935'. [ 521.512342][T11753] XFS (loop0): Quotacheck: Done. [ 521.565784][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.570493][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.571421][T11680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.622237][T11301] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 521.665790][T11680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.764835][T11680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.909669][T11782] loop0: detected capacity change from 0 to 512 [ 521.923319][ T6305] Bluetooth: hci4: command tx timeout [ 521.941814][T11782] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.938: casefold flag without casefold feature [ 521.947053][T11782] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.938: couldn't read orphan inode 15 (err -117) [ 521.951414][T11782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.976051][ T4265] bridge_slave_1: left allmulticast mode [ 521.977582][ T4265] bridge_slave_1: left promiscuous mode [ 521.979159][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.988770][ T4265] bridge_slave_0: left allmulticast mode [ 521.990240][ T4265] bridge_slave_0: left promiscuous mode [ 521.991865][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.997837][ T4265] bridge_slave_1: left allmulticast mode [ 521.999505][ T4265] bridge_slave_1: left promiscuous mode [ 522.003235][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.006534][ T4265] bridge_slave_0: left allmulticast mode [ 522.008074][ T4265] bridge_slave_0: left promiscuous mode [ 522.009652][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.036628][ T4265] bridge_slave_1: left allmulticast mode [ 522.038213][ T4265] bridge_slave_1: left promiscuous mode [ 522.039769][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.043929][T11301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.054619][ T4265] bridge_slave_0: left allmulticast mode [ 522.056112][ T4265] bridge_slave_0: left promiscuous mode [ 522.057802][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.973125][ T27] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 523.154336][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.157428][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.160193][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=021d, bcdDevice= 0.00 [ 523.162629][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.166177][ T27] usb 1-1: config 0 descriptor?? [ 523.354844][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 523.381453][T11804] loop0: detected capacity change from 0 to 1024 [ 523.487162][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 523.491432][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.494493][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.563491][T11811] netlink: 56 bytes leftover after parsing attributes in process `syz.0.943'. [ 525.496283][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.535934][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.575585][ T4265] bond0 (unregistering): Released all slaves [ 526.267347][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.309864][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.355545][ T4265] bond0 (unregistering): Released all slaves [ 527.076281][ T4265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.116171][ T4265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.167079][ T4265] bond0 (unregistering): Released all slaves [ 527.417181][T11815] loop4: detected capacity change from 0 to 32768 [ 527.422318][T11815] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 527.468041][T11815] XFS (loop4): Ending clean mount [ 527.471345][T11815] XFS (loop4): Quotacheck needed: Please wait. [ 527.502287][ T27] usb 1-1: string descriptor 0 read error: -71 [ 527.517314][T11826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.519118][T11815] XFS (loop4): Quotacheck: Done. [ 527.521986][T11826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.522010][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 527.527539][ T27] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 527.541076][ T27] usb 1-1: USB disconnect, device number 9 [ 527.622255][T11303] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 527.773620][T11680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 527.782547][T11680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.921672][T11680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.956687][T11680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 528.982968][T11680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.122191][T11679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.159652][T11679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.562687][T11679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.765693][T11680] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.880317][T11679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.901552][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.903507][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.908843][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.910742][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.073669][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 530.083850][T11685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.088402][T11685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.101388][T11685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.163159][ T6343] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 530.211974][T11685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.346530][ T6343] usb 1-1: Using ep0 maxpacket: 32 [ 530.351046][ T6343] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 530.360746][ T6343] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 530.366828][ T6343] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 530.368970][ T6343] usb 1-1: Product: syz [ 530.371717][ T6343] usb 1-1: Manufacturer: syz [ 530.372907][ T6343] usb 1-1: SerialNumber: syz [ 530.383587][ T6343] usb 1-1: config 0 descriptor?? [ 530.389809][T11879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 530.441261][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.562925][T11685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.588213][ T4265] hsr_slave_0: left promiscuous mode [ 530.599347][ T27] usb 1-1: USB disconnect, device number 10 [ 530.623559][ T4265] hsr_slave_1: left promiscuous mode [ 530.673200][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.675198][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.677659][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.679598][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.685531][ T4265] hsr_slave_0: left promiscuous mode [ 530.743508][ T4265] hsr_slave_1: left promiscuous mode [ 530.853206][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.855630][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.858264][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.860251][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.869902][ T4265] hsr_slave_0: left promiscuous mode [ 530.913594][ T4265] hsr_slave_1: left promiscuous mode [ 531.003183][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.005248][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.007800][ T4265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.009986][ T4265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.046128][ T4265] veth1_macvtap: left promiscuous mode [ 531.047590][ T4265] veth0_macvtap: left promiscuous mode [ 531.049083][ T4265] veth1_vlan: left promiscuous mode [ 531.050746][ T4265] veth0_vlan: left promiscuous mode [ 531.062685][ T4265] veth1_macvtap: left promiscuous mode [ 531.064786][ T4265] veth0_macvtap: left promiscuous mode [ 531.066333][ T4265] veth1_vlan: left promiscuous mode [ 531.067782][ T4265] veth0_vlan: left promiscuous mode [ 531.070101][ T4265] veth1_macvtap: left promiscuous mode [ 531.071695][ T4265] veth0_macvtap: left promiscuous mode [ 531.073680][ T4265] veth1_vlan: left promiscuous mode [ 531.075178][ T4265] veth0_vlan: left promiscuous mode [ 533.187566][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 533.385084][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 537.888554][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 538.105295][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 540.693101][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.698859][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.702481][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.707664][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.710168][ T5865] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 540.712224][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.185620][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.198408][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.201873][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.207366][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.211438][ T5865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 541.213637][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.723144][ T5865] Bluetooth: hci2: command tx timeout [ 542.797954][ T4265] team0 (unregistering): Port device team_slave_1 removed [ 542.976337][ T4265] team0 (unregistering): Port device team_slave_0 removed [ 543.283281][ T5865] Bluetooth: hci3: command tx timeout [ 544.803241][ T5865] Bluetooth: hci2: command tx timeout [ 545.358574][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.363302][ T5865] Bluetooth: hci3: command tx timeout [ 545.376739][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.378687][ T6354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.457360][T11679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.460247][T11679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.486584][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.488519][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.524683][T11685] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.534470][T11680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.537144][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.539094][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.542017][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.544060][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.664384][T11685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.801000][T11680] veth0_vlan: entered promiscuous mode [ 545.813969][T11680] veth1_vlan: entered promiscuous mode [ 545.844681][T11939] chnl_net:caif_netlink_parms(): no params data found [ 545.862409][T11680] veth0_macvtap: entered promiscuous mode [ 545.874980][T11945] chnl_net:caif_netlink_parms(): no params data found [ 545.881635][T11680] veth1_macvtap: entered promiscuous mode [ 545.890480][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.893564][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.896139][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.898866][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.902686][T11680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.906999][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.910324][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.912915][T11680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.920657][T11680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.925259][T11680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.950224][T11680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.952635][T11680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.955349][T11680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.957780][T11680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.008263][T11685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.022584][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.025190][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.027690][T11939] bridge_slave_0: entered allmulticast mode [ 546.030461][T11939] bridge_slave_0: entered promiscuous mode [ 546.034022][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.036014][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.038071][T11939] bridge_slave_1: entered allmulticast mode [ 546.040211][T11939] bridge_slave_1: entered promiscuous mode [ 546.064495][T11939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.077261][T11939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.114979][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.135115][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.137302][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.139362][T11945] bridge_slave_0: entered allmulticast mode [ 546.141490][T11945] bridge_slave_0: entered promiscuous mode [ 546.148667][T11685] veth0_vlan: entered promiscuous mode [ 546.185754][T11939] team0: Port device team_slave_0 added [ 546.187735][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.189643][T11945] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.191599][T11945] bridge_slave_1: entered allmulticast mode [ 546.194569][T11945] bridge_slave_1: entered promiscuous mode [ 546.200050][T11685] veth1_vlan: entered promiscuous mode [ 546.212338][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.215101][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.235777][T11939] team0: Port device team_slave_1 added [ 546.268307][T11679] veth0_vlan: entered promiscuous mode [ 546.276012][T11939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.278015][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.290199][T11939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.307341][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.311657][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.315822][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.318032][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.330001][T11679] veth1_vlan: entered promiscuous mode [ 546.341423][T11939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.343342][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.350206][T11939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.405056][T11939] hsr_slave_0: entered promiscuous mode [ 546.443596][T11939] hsr_slave_1: entered promiscuous mode [ 546.503227][T11939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.505261][T11939] Cannot create hsr debugfs directory [ 546.522546][T11945] team0: Port device team_slave_0 added [ 546.532477][T11945] team0: Port device team_slave_1 added [ 546.564846][T11685] veth0_macvtap: entered promiscuous mode [ 546.581500][T11685] veth1_macvtap: entered promiscuous mode [ 546.585152][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.587029][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.601936][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.608899][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.610776][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.626400][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.656790][T11679] veth0_macvtap: entered promiscuous mode [ 546.665729][T11679] veth1_macvtap: entered promiscuous mode [ 546.727623][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.730498][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.743221][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.746061][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.748756][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.751502][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.756545][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.759453][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.762326][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.772766][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.776174][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.778885][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.781698][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.785372][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.788093][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.791725][T11685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.836736][T11945] hsr_slave_0: entered promiscuous mode [ 546.859805][T11974] loop3: detected capacity change from 0 to 32768 [ 546.862551][T11974] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.922 (11974) [ 546.870240][T11974] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 546.872930][T11974] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 546.877173][T11974] BTRFS info (device loop3): using free-space-tree [ 546.883177][ T5865] Bluetooth: hci2: command tx timeout [ 546.885639][T11945] hsr_slave_1: entered promiscuous mode [ 546.912347][T11680] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 546.925988][T11945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.949285][T11945] Cannot create hsr debugfs directory [ 546.985505][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.988390][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.991063][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.999605][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.002398][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.006672][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.012113][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.044692][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.047634][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.050268][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.058168][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.061278][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.064769][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.067596][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.070439][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.074819][T11685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.266236][T11679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.271767][T11679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.274808][T11679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.277093][T11679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.354348][T11939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.381633][T11685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.384919][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 547.391569][T11685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.394139][T11685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.396432][T11685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.443357][ T5865] Bluetooth: hci3: command tx timeout [ 547.525291][T11939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.626491][T11939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.712676][ T282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.720664][ T282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.784884][T11939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.667475][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.669824][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.757527][ T1970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.781564][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.785839][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.810688][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.823274][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.010345][ T1970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.032632][ T5865] Bluetooth: hci2: command tx timeout [ 549.501234][ T1970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.613971][ T5865] Bluetooth: hci3: command tx timeout [ 549.747349][ T30] audit: type=1800 audit(805.721:3): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.968" name="/newroot/2/file0" dev="tmpfs" ino=27 res=0 errno=0 [ 549.754351][T12023] overlayfs: workdir and upperdir must be separate subtrees [ 549.784705][ T1970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.811022][T12016] loop2: detected capacity change from 0 to 32768 [ 549.820575][T12016] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.966 (12016) [ 549.845571][T12016] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 549.848321][T12016] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 549.858850][T12016] BTRFS info (device loop2): using free-space-tree [ 549.862505][T11939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.867796][T11939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.877985][T11939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.916395][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 549.919492][T11939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 550.091914][T11939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.107661][T11685] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 550.193856][ T1970] bridge_slave_1: left allmulticast mode [ 550.195519][ T1970] bridge_slave_1: left promiscuous mode [ 550.197136][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.234902][ T1970] bridge_slave_0: left allmulticast mode [ 550.236538][ T1970] bridge_slave_0: left promiscuous mode [ 550.238149][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.242744][ T1970] bridge_slave_1: left allmulticast mode [ 550.249775][ T1970] bridge_slave_1: left promiscuous mode [ 550.251402][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.276495][ T1970] bridge_slave_0: left allmulticast mode [ 550.278082][ T1970] bridge_slave_0: left promiscuous mode [ 550.279693][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.430433][T12054] loop2: detected capacity change from 0 to 4096 [ 550.447013][T12054] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 550.623383][T12054] ntfs3: loop2: Failed to load $Extend (-22). [ 550.625178][T12054] ntfs3: loop2: Failed to initialize $Extend. [ 551.041147][T12060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.119394][T12060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.196741][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.236479][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.276379][ T1970] bond0 (unregistering): Released all slaves [ 553.997408][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.046770][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.097065][ T1970] bond0 (unregistering): Released all slaves [ 554.192498][T11939] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.295074][T12067] loop3: detected capacity change from 0 to 512 [ 554.328117][T12067] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.976: casefold flag without casefold feature [ 554.334415][T12067] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.976: couldn't read orphan inode 15 (err -117) [ 554.338939][ T2218] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.340960][ T2218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.353367][T12067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.354425][ T2218] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.358570][ T2218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.994054][T11680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.037729][T12084] overlayfs: workdir and upperdir must be separate subtrees [ 555.049346][ T30] audit: type=1800 audit(811.011:4): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.2.977" name="/newroot/3/file0" dev="tmpfs" ino=34 res=0 errno=0 [ 555.867812][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 555.918007][T11945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 555.927340][T11945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.005094][ T2310] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.007240][ T2310] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.047787][T11945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.062187][T12097] loop2: detected capacity change from 0 to 32768 [ 556.071093][T12097] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.980 (12097) [ 556.075492][T11945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.093899][T11939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.133551][T12097] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 556.136295][T12097] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 556.138632][T12097] BTRFS info (device loop2): using free-space-tree [ 556.267871][T11685] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 556.342534][T12139] loop3: detected capacity change from 0 to 512 [ 556.429403][T12139] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.986: casefold flag without casefold feature [ 556.443789][T12139] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.986: couldn't read orphan inode 15 (err -117) [ 556.466289][T12139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.614831][T11680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.632879][ T6305] Bluetooth: hci5: sending frame failed (-49) [ 556.636671][ T5865] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 556.652045][T12162] Bluetooth: hci5: Frame reassembly failed (-84) [ 556.657868][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.724791][T11945] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.741649][T11945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.745172][T11945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.093223][ T1970] hsr_slave_0: left promiscuous mode [ 557.253499][ T1970] hsr_slave_1: left promiscuous mode [ 557.382585][T12178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.407429][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.452495][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.459125][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 557.462313][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.464818][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.470740][ T1970] hsr_slave_0: left promiscuous mode [ 557.529076][ T1970] hsr_slave_1: left promiscuous mode [ 557.578389][T12181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.614146][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.616150][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.618601][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.620648][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.661670][ T1970] veth1_macvtap: left promiscuous mode [ 557.663481][ T1970] veth0_macvtap: left promiscuous mode [ 557.665234][ T1970] veth1_vlan: left promiscuous mode [ 557.666700][ T1970] veth0_vlan: left promiscuous mode [ 557.682546][ T1970] veth1_macvtap: left promiscuous mode [ 557.684480][ T1970] veth0_macvtap: left promiscuous mode [ 557.688909][ T1970] veth1_vlan: left promiscuous mode [ 557.690545][ T1970] veth0_vlan: left promiscuous mode [ 557.820184][T12173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.853096][T12183] loop3: detected capacity change from 0 to 32768 [ 557.856787][T12183] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.993 (12183) [ 557.872264][T12183] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 557.877767][T12183] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 557.880254][T12183] BTRFS info (device loop3): using free-space-tree [ 557.937596][T11680] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 559.570363][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 559.765549][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 564.312435][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 564.495652][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 566.722917][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.726969][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.731082][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.742499][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.745090][ T5865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 566.747328][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.135337][T11939] veth0_vlan: entered promiscuous mode [ 567.140968][T11939] veth1_vlan: entered promiscuous mode [ 567.145033][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.147004][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.149963][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.151884][ T6343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.275018][T11939] veth0_macvtap: entered promiscuous mode [ 567.285840][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.296771][T12215] loop3: detected capacity change from 0 to 512 [ 567.316923][T11939] veth1_macvtap: entered promiscuous mode [ 567.364602][T11945] veth0_vlan: entered promiscuous mode [ 567.369640][T11945] veth1_vlan: entered promiscuous mode [ 567.374115][T12215] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.997: casefold flag without casefold feature [ 567.377886][T12215] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.997: couldn't read orphan inode 15 (err -117) [ 567.378694][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.381634][T12215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.384675][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.390006][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.392766][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.399932][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.402774][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.407429][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 567.408163][T11939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.412602][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 567.413128][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.417224][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.419705][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.422501][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.425362][T11939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.425378][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 567.428051][T11939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.442856][T11939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.445205][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 567.450904][ T5865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 567.453448][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 567.467116][T11945] veth0_macvtap: entered promiscuous mode [ 567.470652][T11945] veth1_macvtap: entered promiscuous mode [ 567.480557][T11939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.482956][T11939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.489533][T11939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.491892][T11939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.498746][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.501695][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.502592][T11680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.505069][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.509759][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.512513][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.515680][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.518282][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.521026][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.526276][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.558560][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.561430][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.573085][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.575956][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.578540][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.581572][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.594531][T11945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.597352][T11945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.600857][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.605613][T11945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.607995][T11945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.610225][T11945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.612492][T11945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.641757][T12208] chnl_net:caif_netlink_parms(): no params data found [ 567.948910][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.951058][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.994135][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.996070][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.998102][T12208] bridge_slave_0: entered allmulticast mode [ 568.000652][T12208] bridge_slave_0: entered promiscuous mode [ 568.061218][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.064990][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.067041][T12208] bridge_slave_1: entered allmulticast mode [ 568.069207][T12208] bridge_slave_1: entered promiscuous mode [ 568.105821][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.111312][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.127542][T12208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.148700][T12239] loop3: detected capacity change from 0 to 32768 [ 568.149957][T12208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.165468][T12239] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1002 (12239) [ 568.186329][T12239] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 568.189164][T12239] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 568.191431][T12239] BTRFS info (device loop3): using free-space-tree [ 568.208860][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.212495][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.353734][T11680] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 568.448541][T12208] team0: Port device team_slave_0 added [ 568.463493][T12219] chnl_net:caif_netlink_parms(): no params data found [ 568.470062][T12208] team0: Port device team_slave_1 added [ 568.816642][ T5865] Bluetooth: hci5: command tx timeout [ 569.059855][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.066808][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.091838][T12208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.094147][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.101045][T12208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.152041][T12208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.155852][T12269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.160766][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.168840][T12208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.191509][T12272] loop4: detected capacity change from 0 to 512 [ 569.211961][T12269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.223043][T12272] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1004: casefold flag without casefold feature [ 569.226798][T12272] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1004: couldn't read orphan inode 15 (err -117) [ 569.232295][T12272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.258648][T12208] hsr_slave_0: entered promiscuous mode [ 569.275435][T12277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.286533][T11939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.292367][T12277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.301429][T12208] hsr_slave_1: entered promiscuous mode [ 569.333111][T12208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.335154][T12208] Cannot create hsr debugfs directory [ 569.347300][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.350299][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.357962][T12219] bridge_slave_0: entered allmulticast mode [ 569.360228][T12219] bridge_slave_0: entered promiscuous mode [ 569.385605][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.387578][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.389578][T12219] bridge_slave_1: entered allmulticast mode [ 569.391630][T12219] bridge_slave_1: entered promiscuous mode [ 569.424261][T12219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.603171][ T5865] Bluetooth: hci6: command tx timeout [ 569.907896][T12264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.186967][T12219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.893355][ T5865] Bluetooth: hci5: command tx timeout [ 571.095073][T12219] team0: Port device team_slave_0 added [ 571.200690][ T1970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.332802][T12219] team0: Port device team_slave_1 added [ 571.465611][ T1970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.485356][T12296] loop3: detected capacity change from 0 to 32768 [ 571.488205][T12296] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1010 (12296) [ 571.499510][T12219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.501347][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.515405][T12219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.521061][T12219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.522873][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.540682][T12219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.618128][T12296] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 571.621032][T12296] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 571.624349][T12296] BTRFS info (device loop3): using free-space-tree [ 571.647365][T12208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.684580][ T5865] Bluetooth: hci6: command tx timeout [ 572.237031][T11680] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 572.310656][ T1970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.367427][T12322] loop3: detected capacity change from 0 to 512 [ 572.405649][T12322] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1013: casefold flag without casefold feature [ 572.410811][T12322] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1013: couldn't read orphan inode 15 (err -117) [ 572.416784][T12322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.456050][T11680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.458243][T12208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.568826][ T1970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.685041][T12208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.872298][T12219] hsr_slave_0: entered promiscuous mode [ 573.006970][ T5865] Bluetooth: hci5: command tx timeout [ 573.009518][T12219] hsr_slave_1: entered promiscuous mode [ 573.063565][T12335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.115293][T12219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.137732][T12219] Cannot create hsr debugfs directory [ 573.324976][T12208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.332444][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.549301][T12332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.653850][ T1970] bridge_slave_1: left allmulticast mode [ 573.655403][ T1970] bridge_slave_1: left promiscuous mode [ 573.662768][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.666377][ T1970] bridge_slave_0: left allmulticast mode [ 573.697430][ T1970] bridge_slave_0: left promiscuous mode [ 573.707824][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.769494][ T5865] Bluetooth: hci6: command tx timeout [ 573.827037][ T1970] bridge_slave_1: left allmulticast mode [ 573.855004][ T1970] bridge_slave_1: left promiscuous mode [ 573.890993][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.010680][ T1970] bridge_slave_0: left allmulticast mode [ 574.044841][ T1970] bridge_slave_0: left promiscuous mode [ 574.087439][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.600560][T12376] loop3: detected capacity change from 0 to 512 [ 574.607300][T12376] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1023: casefold flag without casefold feature [ 574.614670][T12376] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1023: couldn't read orphan inode 15 (err -117) [ 574.617288][T12369] loop4: detected capacity change from 0 to 32768 [ 574.618596][T12376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.620519][T12369] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1021 (12369) [ 575.051803][ T5865] Bluetooth: hci5: command tx timeout [ 575.185917][T12369] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 575.192533][T12369] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 575.196191][T12369] BTRFS info (device loop4): using free-space-tree [ 575.212259][T11680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.251966][T11939] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 575.923128][ T5865] Bluetooth: hci6: command tx timeout [ 577.705811][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.745958][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.785472][ T1970] bond0 (unregistering): Released all slaves [ 578.445581][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.495879][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.566326][ T1970] bond0 (unregistering): Released all slaves [ 578.713455][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.719322][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.771395][T12208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.815505][T12414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.831669][T12414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.857815][T12208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.477401][T12208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.592362][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.661062][T12208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 580.011465][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.017076][T12448] loop4: detected capacity change from 0 to 512 [ 580.030759][T12448] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1033: casefold flag without casefold feature [ 580.037435][T12448] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1033: couldn't read orphan inode 15 (err -117) [ 580.045032][T12448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.087724][T12208] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.094851][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.096877][ T6351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.107179][T11939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.117247][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.119312][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.189826][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.198563][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.237231][T12476] loop4: detected capacity change from 0 to 512 [ 581.241858][T12476] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1042: casefold flag without casefold feature [ 581.245850][T12476] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1042: couldn't read orphan inode 15 (err -117) [ 581.249733][T12476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.776203][T11939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.949101][T12483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.958914][T12483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.965644][ T1970] hsr_slave_0: left promiscuous mode [ 582.103220][ T1970] hsr_slave_1: left promiscuous mode [ 582.203167][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.207018][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.209617][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.211873][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.226106][ T1970] hsr_slave_0: left promiscuous mode [ 582.273428][ T1970] hsr_slave_1: left promiscuous mode [ 582.383197][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.385350][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.388591][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.390867][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.418444][ T1970] veth1_macvtap: left promiscuous mode [ 582.420155][ T1970] veth0_macvtap: left promiscuous mode [ 582.421798][ T1970] veth1_vlan: left promiscuous mode [ 582.423898][ T1970] veth0_vlan: left promiscuous mode [ 582.426103][ T1970] veth1_macvtap: left promiscuous mode [ 582.427680][ T1970] veth0_macvtap: left promiscuous mode [ 582.429263][ T1970] veth1_vlan: left promiscuous mode [ 582.430846][ T1970] veth0_vlan: left promiscuous mode [ 582.727392][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.273715][T12498] loop4: detected capacity change from 0 to 16 [ 583.282375][T12498] erofs: (device loop4): mounted with root inode @ nid 36. [ 583.365842][T12500] x_tables: duplicate underflow at hook 2 [ 584.828052][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 584.997200][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 589.317638][ T1970] team0 (unregistering): Port device team_slave_1 removed [ 589.527370][ T1970] team0 (unregistering): Port device team_slave_0 removed [ 591.465639][ T6305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.468672][ T6305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.472572][ T6305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.482078][ T6305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.484634][ T6305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 591.486880][ T6305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.049111][T12219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 592.065605][T12219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 592.077255][T12219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 592.079906][T12517] loop0: detected capacity change from 0 to 256 [ 592.252590][T12219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 592.265703][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 592.300072][T12208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.372273][T12537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.378163][T12537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.578044][T12208] veth0_vlan: entered promiscuous mode [ 592.583328][T12208] veth1_vlan: entered promiscuous mode [ 592.601152][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.644177][T12509] chnl_net:caif_netlink_parms(): no params data found [ 592.691662][T12208] veth0_macvtap: entered promiscuous mode [ 592.698357][T12208] veth1_macvtap: entered promiscuous mode [ 592.715621][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.718446][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.721031][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.732392][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.735754][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.743125][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.755897][T12208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.759412][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.762215][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.773270][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.780606][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.792012][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.800878][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.812057][T12208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.840411][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.857731][T12208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.860270][T12208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.862778][T12208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.907867][T12208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.120937][T12532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.532570][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.533111][ T5865] Bluetooth: hci0: command tx timeout [ 593.548844][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.550993][T12509] bridge_slave_0: entered allmulticast mode [ 593.558461][T12509] bridge_slave_0: entered promiscuous mode [ 593.563338][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.565234][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.568379][T12509] bridge_slave_1: entered allmulticast mode [ 593.570651][T12509] bridge_slave_1: entered promiscuous mode [ 593.582537][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.584601][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.597752][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.599777][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.710270][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.779928][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.797275][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.890298][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.964710][T12509] team0: Port device team_slave_0 added [ 593.969833][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 593.991162][T12509] team0: Port device team_slave_1 added [ 594.003124][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.008864][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.022913][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.027765][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.034958][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.039807][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.041658][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.052090][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.097616][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.112474][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.117938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.144883][T12509] hsr_slave_0: entered promiscuous mode [ 594.206151][T12509] hsr_slave_1: entered promiscuous mode [ 595.054451][T12265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.089593][T12219] veth0_vlan: entered promiscuous mode [ 595.092541][T12604] loop2: detected capacity change from 0 to 32768 [ 595.128661][T12219] veth1_vlan: entered promiscuous mode [ 595.176518][T12265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.220957][T12219] veth0_macvtap: entered promiscuous mode [ 595.228071][T12219] veth1_macvtap: entered promiscuous mode [ 595.239527][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.242491][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.245240][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.248048][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.250713][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.257218][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.260315][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.263288][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.267294][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.280166][T12604] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 595.284759][T12604] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 595.287082][T12604] bcachefs (loop2): Version upgrade required: [ 595.287082][T12604] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 595.287082][T12604] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap [ 595.287082][T12604] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_subvolume_structure,check_directory_structure,check_nlinks,delete_dead_inodes,set_fs_needs_rebalance [ 595.320257][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.332049][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.355868][T12265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.374827][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.377740][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.380478][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.384341][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.392168][T12604] bcachefs (loop2): alloc_read... done [ 595.394230][T12604] bcachefs (loop2): stripes_read... done [ 595.395794][T12604] bcachefs (loop2): snapshots_read... done [ 595.397422][T12604] bcachefs (loop2): check_allocations... [ 595.399169][T12604] [ 595.401416][T12604] ====================================================== [ 595.403477][T12604] WARNING: possible circular locking dependency detected [ 595.405496][T12604] 6.10.0-rc6-syzkaller-gfdd6064ff31c #0 Not tainted [ 595.407253][T12604] ------------------------------------------------------ [ 595.409332][T12604] syz.2.995/12604 is trying to acquire lock: [ 595.410996][T12604] ffff0000e0b80988 (&c->sb_lock){+.+.}-{3:3}, at: bch2_gc_mark_key+0x894/0xb3c [ 595.413401][T12604] [ 595.413401][T12604] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 595.415473][T12604] ffff0000e0b81a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_check_allocations+0x1c64/0x80d8 [ 595.418311][T12604] [ 595.418311][T12604] which lock already depends on the new lock. [ 595.418311][T12604] [ 595.421228][T12604] [ 595.421228][T12604] the existing dependency chain (in reverse order) is: [ 595.423680][T12604] [ 595.423680][T12604] -> #1 (&c->btree_root_lock){+.+.}-{3:3}: [ 595.426031][T12604] __mutex_lock_common+0x190/0x21a0 [ 595.427644][T12604] mutex_lock_nested+0x2c/0x38 [ 595.429118][T12604] bch2_btree_roots_to_journal_entries+0xb8/0x4c0 [ 595.431003][T12604] bch2_fs_mark_clean+0x288/0x5e8 [ 595.432537][T12604] bch2_fs_read_only+0xd88/0xf0c [ 595.434086][T12604] __bch2_fs_stop+0x100/0x510 [ 595.435549][T12604] bch2_put_super+0x40/0x50 [ 595.436961][T12604] generic_shutdown_super+0x128/0x2b8 [ 595.438547][T12604] bch2_kill_sb+0x40/0x58 [ 595.439904][T12604] deactivate_locked_super+0xc4/0x12c [ 595.441475][T12604] deactivate_super+0xe0/0x100 [ 595.442876][T12604] cleanup_mnt+0x34c/0x3dc [ 595.444421][T12604] __cleanup_mnt+0x20/0x30 [ 595.445785][T12604] task_work_run+0x230/0x2e0 [ 595.447292][T12604] do_notify_resume+0x178/0x1f4 [ 595.448786][T12604] el0_svc+0xac/0x168 [ 595.450094][T12604] el0t_64_sync_handler+0x84/0xfc [ 595.451707][T12604] el0t_64_sync+0x190/0x194 [ 595.453109][T12604] [ 595.453109][T12604] -> #0 (&c->sb_lock){+.+.}-{3:3}: [ 595.455091][T12604] __lock_acquire+0x3384/0x763c [ 595.456587][T12604] lock_acquire+0x240/0x728 [ 595.458092][T12604] __mutex_lock_common+0x190/0x21a0 [ 595.459715][T12604] mutex_lock_nested+0x2c/0x38 [ 595.461207][T12604] bch2_gc_mark_key+0x894/0xb3c [ 595.462909][T12604] bch2_check_allocations+0x2680/0x80d8 [ 595.464630][T12604] bch2_run_recovery_pass+0xe4/0x1d4 [ 595.466272][T12604] bch2_run_recovery_passes+0x258/0x6e0 [ 595.468007][T12604] bch2_fs_recovery+0x31f0/0x5488 [ 595.469590][T12604] bch2_fs_start+0x30c/0x53c [ 595.470935][T12604] bch2_fs_open+0x8b4/0xb64 [ 595.472398][T12604] bch2_mount+0x4fc/0xe68 [ 595.473719][T12604] legacy_get_tree+0xd4/0x16c [ 595.475287][T12604] vfs_get_tree+0x90/0x288 [ 595.476660][T12604] do_new_mount+0x278/0x900 [ 595.478164][T12604] path_mount+0x590/0xe04 [ 595.479532][T12604] __arm64_sys_mount+0x45c/0x594 [ 595.481089][T12604] invoke_syscall+0x98/0x2b8 [ 595.482584][T12604] el0_svc_common+0x130/0x23c [ 595.483983][T12604] do_el0_svc+0x48/0x58 [ 595.485242][T12604] el0_svc+0x54/0x168 [ 595.486537][T12604] el0t_64_sync_handler+0x84/0xfc [ 595.488193][T12604] el0t_64_sync+0x190/0x194 [ 595.489615][T12604] [ 595.489615][T12604] other info that might help us debug this: [ 595.489615][T12604] [ 595.492485][T12604] Possible unsafe locking scenario: [ 595.492485][T12604] [ 595.494577][T12604] CPU0 CPU1 [ 595.496097][T12604] ---- ---- [ 595.497626][T12604] lock(&c->btree_root_lock); [ 595.498990][T12604] lock(&c->sb_lock); [ 595.500794][T12604] lock(&c->btree_root_lock); [ 595.502924][T12604] lock(&c->sb_lock); [ 595.504030][T12604] [ 595.504030][T12604] *** DEADLOCK *** [ 595.504030][T12604] [ 595.506267][T12604] 4 locks held by syz.2.995/12604: [ 595.507718][T12604] #0: ffff0000e0b80278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_start+0x50/0x53c [ 595.510286][T12604] #1: ffff0000e0ba6750 (&c->gc_lock){++++}-{3:3}, at: bch2_check_allocations+0x1fc/0x80d8 [ 595.513014][T12604] #2: ffff0000e0b842d8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 [ 595.516002][T12604] #3: ffff0000e0b81a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_check_allocations+0x1c64/0x80d8 [ 595.519028][T12604] [ 595.519028][T12604] stack backtrace: [ 595.520685][T12604] CPU: 1 PID: 12604 Comm: syz.2.995 Not tainted 6.10.0-rc6-syzkaller-gfdd6064ff31c #0 [ 595.523420][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 595.526316][T12604] Call trace: [ 595.527263][T12604] dump_backtrace+0x1b8/0x1e4 [ 595.528556][T12604] show_stack+0x2c/0x3c [ 595.529788][T12604] dump_stack_lvl+0xe4/0x150 [ 595.531091][T12604] dump_stack+0x1c/0x28 [ 595.532293][T12604] print_circular_bug+0x150/0x1b8 [ 595.533686][T12604] check_noncircular+0x310/0x404 [ 595.534985][T12604] __lock_acquire+0x3384/0x763c [ 595.536387][T12604] lock_acquire+0x240/0x728 [ 595.537679][T12604] __mutex_lock_common+0x190/0x21a0 [ 595.539036][T12604] mutex_lock_nested+0x2c/0x38 [ 595.540301][T12604] bch2_gc_mark_key+0x894/0xb3c [ 595.541642][T12604] bch2_check_allocations+0x2680/0x80d8 [ 595.543115][T12604] bch2_run_recovery_pass+0xe4/0x1d4 [ 595.544545][T12604] bch2_run_recovery_passes+0x258/0x6e0 [ 595.546044][T12604] bch2_fs_recovery+0x31f0/0x5488 [ 595.547404][T12604] bch2_fs_start+0x30c/0x53c [ 595.548626][T12604] bch2_fs_open+0x8b4/0xb64 [ 595.549951][T12604] bch2_mount+0x4fc/0xe68 [ 595.551134][T12604] legacy_get_tree+0xd4/0x16c [ 595.552495][T12604] vfs_get_tree+0x90/0x288 [ 595.553730][T12604] do_new_mount+0x278/0x900 [ 595.554978][T12604] path_mount+0x590/0xe04 [ 595.556252][T12604] __arm64_sys_mount+0x45c/0x594 [ 595.557709][T12604] invoke_syscall+0x98/0x2b8 [ 595.559031][T12604] el0_svc_common+0x130/0x23c [ 595.560279][T12604] do_el0_svc+0x48/0x58 [ 595.561384][T12604] el0_svc+0x54/0x168 [ 595.562465][T12604] el0t_64_sync_handler+0x84/0xfc [ 595.563845][T12604] el0t_64_sync+0x190/0x194 [ 595.565476][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.568386][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.573043][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.575926][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.579207][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.592471][T12219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.595279][T12219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.597719][T12219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.597742][T12219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.603175][ T5865] Bluetooth: hci0: command tx timeout [ 595.605284][T12604] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 1792, should be 256, fixing [ 595.616482][T12604] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 595.618617][T12604] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 595.621651][T12604] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 595.625876][T12604] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 595.628753][T12604] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 595.631094][T12604] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 595.684108][T12604] dev 0 has wrong sb sectors: got 530440, should be 6152, fixing [ 595.686244][T12604] dev 0 has wrong cached buckets: got 8, should be 0, fixing [ 595.688359][T12604] done [ 595.692292][T12604] bcachefs (loop2): going read-write [ 595.695023][T12265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.695987][T12604] bcachefs (loop2): journal_replay... [ 595.699480][T12604] bcachefs (loop2): bch2_journal_replay(): error ERESTARTSYS [ 595.703685][T12604] bcachefs (loop2): bch2_fs_recovery(): error ERESTARTSYS [ 595.705716][T12604] bcachefs (loop2): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 595.708173][ T2218] bcachefs (loop2): going read-only [ 595.709569][ T2218] bcachefs (loop2): finished waiting for writes to stop [ 595.711428][ T2218] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 595.713169][T12604] bcachefs (loop2): shutting down [ 595.715757][ T2218] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 595.718395][ T2218] bcachefs (loop2): unshutdown complete, journal seq 12 [ 595.720552][ T2218] bcachefs (loop2): done going read-only, filesystem not clean [ 595.726959][T12604] bcachefs (loop2): shutdown complete [ 595.875588][T12265] bridge_slave_1: left allmulticast mode [ 595.877146][T12265] bridge_slave_1: left promiscuous mode [ 595.879069][T12265] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.881705][T12265] bridge_slave_0: left allmulticast mode [ 595.883738][T12265] bridge_slave_0: left promiscuous mode [ 595.885243][T12265] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.455248][T12265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.494846][T12265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.544764][T12265] bond0 (unregistering): Released all slaves [ 597.683328][ T6305] Bluetooth: hci0: command tx timeout [ 597.783405][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.192428][T12265] hsr_slave_0: left promiscuous mode [ 598.253757][T12265] hsr_slave_1: left promiscuous mode [ 598.354047][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.356060][T12265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.361709][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.363939][T12265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.367751][T12265] veth1_macvtap: left promiscuous mode [ 598.369215][T12265] veth0_macvtap: left promiscuous mode [ 598.370712][T12265] veth1_vlan: left promiscuous mode [ 598.372169][T12265] veth0_vlan: left promiscuous mode [ 600.093915][T12265] team0 (unregistering): Port device team_slave_1 removed [ 600.273796][T12265] team0 (unregistering): Port device team_slave_0 removed [ 604.594956][T12265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.684941][T12265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.764369][T12265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.844390][T12265] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.064179][T12265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.134446][T12265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.224911][T12265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.304481][T12265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0