last executing test programs: 21.318618881s ago: executing program 2 (id=175): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x11a}, 0x20) 13.867648808s ago: executing program 2 (id=195): openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='net/snmp6\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0xef, 0x1) 12.322543154s ago: executing program 2 (id=201): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x79, 0xa0, 0xdd, 0x40, 0x1199, 0x68a3, 0xe2e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x7, 0x10, 0x68, [{{0x9, 0x4, 0x36, 0x6, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0x3, 0x10, 0x9}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200660d000000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x3, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x20}]}}]}, 0x4c}}, 0x0) ioctl$KDFONTOP_SET(r0, 0x4bfb, &(0x7f0000000040)={0x0, 0x0, 0xe, 0xb, 0x200, 0x0}) 10.468540898s ago: executing program 0 (id=206): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003d0007010000000008000000047c000008000880040008001400018006000600894f00000800", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) 10.185736068s ago: executing program 3 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 10.079445012s ago: executing program 0 (id=209): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 9.033125543s ago: executing program 3 (id=212): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a000001020309090212"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x2, 0x1) write(r3, &(0x7f0000000040)="26000000220047010500071089", 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 8.184725978s ago: executing program 4 (id=213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) shutdown(0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 8.184486636s ago: executing program 0 (id=214): chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}, 0x1, 0x7}, 0x0) 7.861771649s ago: executing program 2 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0xffff, 0x2000000000000000, 0x5, 0x1, 0x7, 0x8, 0x7, 0x1, 0x7ff, 0x7fffffffffffffff, 0x0, 0x378, 0x2, 0x9, 0x0, 0x40, 0x4, 0xfffffffffffffffb, 0x5, 0x1, 0x8, 0x4, 0x9, 0x6, 0x4, 0xfffffffffffffff7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendto$packet(r1, &(0x7f0000000440)="63c4fcf1", 0x4, 0x4008801, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x4, 0x5, "27f7bf"}, @mss={0x2, 0x4, 0x7}, @fastopen={0x22, 0x4, "cea1"}, @mptcp=@ack={0x1e, 0x4, 0x5}]}}}}}}}}, 0x0) 7.741622895s ago: executing program 2 (id=218): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$kcm(0x10, 0x2, 0x4) 7.696941306s ago: executing program 2 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 6.917597889s ago: executing program 0 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6cb, &(0x7f0000001400)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) ptrace(0x4206, r3) 6.916466004s ago: executing program 3 (id=222): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x70bd27, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x210000, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.144078336s ago: executing program 4 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="6121eed4ed2b01e841acde1a0000", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 5.934765634s ago: executing program 1 (id=224): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x229, &(0x7f0000000000)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) 4.92344952s ago: executing program 0 (id=225): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) ftruncate(r1, 0x2000009) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 4.916870164s ago: executing program 3 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r3, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 3.948751329s ago: executing program 1 (id=227): unshare(0x2a020400) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0xd8e, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x400000000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.947934278s ago: executing program 4 (id=228): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x2200010, &(0x7f0000000380)=ANY=[], 0x1, 0x14e1, &(0x7f0000002ac0)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f643030303030303030703030303030303032303030302c757365725b69643def9f9c754bc3bcc48b6a6fd710ab88934a1ab31e861595361d093a75ffa7f9b55a3f19497e175ad807517d9c5a0078d16e1cd728799250a7e43b888b160994f70af8b810d8904385d50247719e5f513bae75fcf71caecfab5ee168000000003399c34449087bd12e512ef3ea5eb32b423cf0d243420e10c30026366a2d7196e829b8cb8de06a42ffcc67a55ff2dd7b467099ccd328a43c9225f629559262313a3d7d0c7106cb", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=0x0]) syz_emit_ethernet(0x0, 0x0, 0x0) statfs(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x422880, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@known='user.syz\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1, 0x1, 0x8, 0x8, 0xfff8}, &(0x7f0000000400)=0x20) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x9, 0x8, 0x5, 0x1}, {0x0, 0x6, 0x7, 0x4}, {0x60, 0x4, 0x7, 0x3}, {0x1, 0x2, 0x6, 0x5}, {0x9, 0x4, 0x2, 0xfffffffc}, {0x2, 0x40, 0x1, 0x7}]}) truncate(&(0x7f0000000040)='./file0\x00', 0x600) 3.76997452s ago: executing program 0 (id=229): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r4 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0x20000040) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) 3.769278894s ago: executing program 1 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) close(0x3) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.012827979s ago: executing program 3 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) 2.954716513s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x28}, 0x24004800) 1.942912535s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) 1.823510622s ago: executing program 4 (id=234): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x4}]}]}, 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) fadvise64(r4, 0x8, 0xff39, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) 1.376286019s ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r2, @ANYBLOB="9a"], 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ffb}, @broadcast, @device_b, @initial, {0x6, 0x6}}, 0xffffffff, @default, 0x1420, @val, @void, @void, @val={0x4, 0x6, {0x30, 0x5, 0x3, 0x2}}, @val={0x6, 0x2, 0x9}, @val={0x5, 0x3, {0x7d, 0xda, 0x14}}, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}}, @val={0x76, 0x6, {0x5, 0x1, 0x41, 0xe}}}, 0x4b) 963.289502ms ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 735.957915ms ago: executing program 4 (id=237): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x20000001) recvmsg(r0, 0x0, 0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 0s ago: executing program 1 (id=238): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)='-:+:&&.\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 35.277579][ T6477] cgroup: Unknown subsys name 'net' [ 35.542342][ T6477] cgroup: Unknown subsys name 'cpuset' [ 35.545796][ T6477] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.876711][ T6477] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.326964][ T6494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.327806][ T6494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.328270][ T6494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.328581][ T6494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.329452][ T6493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.329921][ T6493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.330273][ T6493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.330733][ T6493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.336319][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.338818][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.365737][ T6057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.372076][ T6057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.380762][ T6057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.385953][ T6057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.388774][ T6502] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.401445][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.402115][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.402573][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.403169][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.403607][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.444698][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.445238][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.445581][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.446180][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.446600][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.523933][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 37.651348][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.651512][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.651798][ T6490] bridge_slave_0: entered allmulticast mode [ 37.652688][ T6490] bridge_slave_0: entered promiscuous mode [ 37.654574][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.654619][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.654735][ T6490] bridge_slave_1: entered allmulticast mode [ 37.655517][ T6490] bridge_slave_1: entered promiscuous mode [ 37.697075][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.698627][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.744580][ T6490] team0: Port device team_slave_0 added [ 37.752161][ T6490] team0: Port device team_slave_1 added [ 37.779552][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.781791][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.788515][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.801870][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.801936][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.801991][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.811760][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 37.894530][ T6490] hsr_slave_0: entered promiscuous mode [ 37.895146][ T6490] hsr_slave_1: entered promiscuous mode [ 37.940388][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 37.979032][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.979133][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.979241][ T6489] bridge_slave_0: entered allmulticast mode [ 37.983218][ T6489] bridge_slave_0: entered promiscuous mode [ 38.017405][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.019314][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.024107][ T6489] bridge_slave_1: entered allmulticast mode [ 38.024982][ T6489] bridge_slave_1: entered promiscuous mode [ 38.043574][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 38.082546][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.089109][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 38.108996][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.130808][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.132795][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.134982][ T6495] bridge_slave_0: entered allmulticast mode [ 38.137584][ T6495] bridge_slave_0: entered promiscuous mode [ 38.142400][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.144643][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.146038][ T6495] bridge_slave_1: entered allmulticast mode [ 38.146865][ T6495] bridge_slave_1: entered promiscuous mode [ 38.177243][ T6489] team0: Port device team_slave_0 added [ 38.201106][ T6489] team0: Port device team_slave_1 added [ 38.242869][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.242931][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.242970][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.252883][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.254800][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.261668][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.261764][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.261866][ T6499] bridge_slave_0: entered allmulticast mode [ 38.262713][ T6499] bridge_slave_0: entered promiscuous mode [ 38.279592][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.279641][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.280097][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.303988][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304093][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.304189][ T6499] bridge_slave_1: entered allmulticast mode [ 38.305027][ T6499] bridge_slave_1: entered promiscuous mode [ 38.331330][ T6495] team0: Port device team_slave_0 added [ 38.346928][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.349129][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.350155][ T6500] bridge_slave_0: entered allmulticast mode [ 38.350992][ T6500] bridge_slave_0: entered promiscuous mode [ 38.355428][ T6495] team0: Port device team_slave_1 added [ 38.364441][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.379482][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.379555][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.380112][ T6500] bridge_slave_1: entered allmulticast mode [ 38.380933][ T6500] bridge_slave_1: entered promiscuous mode [ 38.405230][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.415219][ T6489] hsr_slave_0: entered promiscuous mode [ 38.415774][ T6489] hsr_slave_1: entered promiscuous mode [ 38.416126][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.416196][ T6489] Cannot create hsr debugfs directory [ 38.427578][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.430719][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.430772][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.430821][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.431889][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.431914][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.431946][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.463388][ T6499] team0: Port device team_slave_0 added [ 38.466485][ T6499] team0: Port device team_slave_1 added [ 38.473464][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.487437][ T6495] hsr_slave_0: entered promiscuous mode [ 38.488005][ T6495] hsr_slave_1: entered promiscuous mode [ 38.488295][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.488322][ T6495] Cannot create hsr debugfs directory [ 38.560131][ T6500] team0: Port device team_slave_0 added [ 38.575050][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.576975][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.583924][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.603922][ T6490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.608868][ T6500] team0: Port device team_slave_1 added [ 38.609109][ T6490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.625897][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.627850][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.634237][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.651364][ T6490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.677350][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.678178][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.678231][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.678774][ T6490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.714318][ T6499] hsr_slave_0: entered promiscuous mode [ 38.716718][ T6499] hsr_slave_1: entered promiscuous mode [ 38.718704][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.720399][ T6499] Cannot create hsr debugfs directory [ 38.721101][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.721127][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.721174][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.770709][ T6500] hsr_slave_0: entered promiscuous mode [ 38.772919][ T6500] hsr_slave_1: entered promiscuous mode [ 38.774844][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.775521][ T6500] Cannot create hsr debugfs directory [ 38.894293][ T6489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.921507][ T6489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.948252][ T6489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.970862][ T6489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.981895][ T6495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.996711][ T6495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.009024][ T6495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.013337][ T6495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.052629][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.074113][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.077231][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.077363][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.080319][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.085426][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.088989][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.102403][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.102491][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.108954][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.148771][ T6499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.163053][ T6499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.166523][ T6499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.172295][ T6499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.188244][ T6490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.189422][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.216236][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.226504][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.237133][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.282653][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.292019][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.292098][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.304341][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.304414][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.309262][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.309336][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.328615][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.328691][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.361258][ T6493] Bluetooth: hci1: command tx timeout [ 39.361261][ T55] Bluetooth: hci0: command tx timeout [ 39.362781][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.397162][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.419623][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.431227][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.438958][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.439028][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.441310][ T55] Bluetooth: hci2: command tx timeout [ 39.441567][ T6493] Bluetooth: hci3: command tx timeout [ 39.442232][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.442278][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.446281][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.467520][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.467595][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.484497][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.484586][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.493521][ T6495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.521215][ T6493] Bluetooth: hci4: command tx timeout [ 39.549659][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.557621][ T6490] veth0_vlan: entered promiscuous mode [ 39.577650][ T6500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.593381][ T6490] veth1_vlan: entered promiscuous mode [ 39.655865][ T6490] veth0_macvtap: entered promiscuous mode [ 39.674242][ T6489] veth0_vlan: entered promiscuous mode [ 39.678815][ T6489] veth1_vlan: entered promiscuous mode [ 39.703523][ T6489] veth0_macvtap: entered promiscuous mode [ 39.706044][ T6490] veth1_macvtap: entered promiscuous mode [ 39.725317][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.736323][ T6489] veth1_macvtap: entered promiscuous mode [ 39.748217][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.754790][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.771216][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.783288][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.791958][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.797340][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.802633][ T6490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.802727][ T6490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.802758][ T6490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.802787][ T6490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.844053][ T6489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.846530][ T6489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.848939][ T6489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851454][ T6489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.876306][ T6495] veth0_vlan: entered promiscuous mode [ 39.893921][ T6495] veth1_vlan: entered promiscuous mode [ 39.914687][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.914774][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.975662][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.976265][ T6499] veth0_vlan: entered promiscuous mode [ 39.979165][ T6499] veth1_vlan: entered promiscuous mode [ 39.984560][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.047808][ T6495] veth0_macvtap: entered promiscuous mode [ 40.049491][ T6500] veth0_vlan: entered promiscuous mode [ 40.051686][ T6499] veth0_macvtap: entered promiscuous mode [ 40.057909][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.057968][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.061294][ T6490] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.072248][ T6495] veth1_macvtap: entered promiscuous mode [ 40.078317][ T6500] veth1_vlan: entered promiscuous mode [ 40.102094][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.108205][ T6499] veth1_macvtap: entered promiscuous mode [ 40.137142][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.137213][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.146639][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.163335][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.168879][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.175004][ T6499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.177578][ T6499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182821][ T6499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.185317][ T6499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.197987][ T6495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.198053][ T6495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.198083][ T6495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.198112][ T6495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.239519][ T6500] veth0_macvtap: entered promiscuous mode [ 40.252509][ T6500] veth1_macvtap: entered promiscuous mode [ 40.254773][ T6574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'. [ 40.263409][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.268396][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.354068][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.354143][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.355210][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.355410][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.487327][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.489610][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.156359][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.156424][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.255114][ T6582] bridge_slave_0: left allmulticast mode [ 41.255190][ T6582] bridge_slave_0: left promiscuous mode [ 41.255874][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.264369][ T6582] bridge_slave_1: left allmulticast mode [ 41.264440][ T6582] bridge_slave_1: left promiscuous mode [ 41.264549][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.277182][ T6582] bond0: (slave bond_slave_0): Releasing backup interface [ 41.324423][ T6582] bond0: (slave bond_slave_1): Releasing backup interface [ 41.370229][ T6579] loop3: detected capacity change from 0 to 32768 [ 41.373305][ T6579] ======================================================= [ 41.373305][ T6579] WARNING: The mand mount option has been deprecated and [ 41.373305][ T6579] and is ignored by this kernel. Remove the mand [ 41.373305][ T6579] option from the mount to silence this warning. [ 41.373305][ T6579] ======================================================= [ 41.375501][ T6582] team0: Port device team_slave_0 removed [ 41.385250][ T6579] jfs: Bad value for 'uid' [ 41.386564][ T6582] team0: Port device team_slave_1 removed [ 41.387013][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.387065][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.392290][ T6579] jfs: Bad value for 'uid' [ 41.397492][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.397566][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.409968][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 41.440689][ T55] Bluetooth: hci0: command tx timeout [ 41.440805][ T6493] Bluetooth: hci1: command tx timeout [ 41.520748][ T55] Bluetooth: hci2: command tx timeout [ 41.520860][ T6493] Bluetooth: hci3: command tx timeout [ 41.599830][ T6493] Bluetooth: hci4: command tx timeout [ 41.904952][ T6589] loop3: detected capacity change from 0 to 32768 [ 41.907649][ T6589] XFS: ikeep mount option is deprecated. [ 41.931186][ T6589] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 41.989055][ T6589] XFS (loop3): Ending clean mount [ 41.994745][ T6589] XFS (loop3): Quotacheck needed: Please wait. [ 42.012855][ T6589] XFS (loop3): Quotacheck: Done. [ 42.072916][ T6584] vlan0: entered promiscuous mode [ 42.085832][ T646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.085890][ T646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.144068][ T6490] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 42.149394][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.149452][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.204079][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.204142][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.262812][ T646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.262876][ T646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.388659][ T6601] loop3: detected capacity change from 0 to 512 [ 43.438938][ T6615] loop4: detected capacity change from 0 to 1024 [ 43.445759][ T6615] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.524319][ T6493] Bluetooth: hci1: command tx timeout [ 43.524394][ T6493] Bluetooth: hci0: command tx timeout [ 43.640129][ T55] Bluetooth: hci3: command tx timeout [ 43.640217][ T55] Bluetooth: hci2: command tx timeout [ 43.679996][ T6493] Bluetooth: hci4: command tx timeout [ 44.264828][ T6615] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.14: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 44.267768][ T6615] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.14: Bad quota inode: 3, type: 0 [ 44.267972][ T6615] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.268287][ T6615] EXT4-fs (loop4): mount failed [ 44.614924][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16'. [ 45.453963][ T6638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17'. [ 45.457267][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 45.478378][ T6493] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 45.999574][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.015512][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.060630][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20'. [ 46.062084][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.062604][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.285711][ T6493] Bluetooth: hci0: command tx timeout [ 46.285792][ T6493] Bluetooth: hci1: command tx timeout [ 46.285844][ T6493] Bluetooth: hci2: command tx timeout [ 46.285885][ T6493] Bluetooth: hci3: command tx timeout [ 46.285923][ T6493] Bluetooth: hci4: command tx timeout [ 46.342110][ T6645] loop1: detected capacity change from 0 to 16 [ 46.348296][ T6645] erofs (device loop1): algorithm 1 isn't enabled on this kernel [ 46.442941][ T6654] loop3: detected capacity change from 0 to 128 [ 47.102967][ T6655] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.154120][ T6654] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.214854][ T6654] syz.3.24 (pid 6654) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 47.281641][ T6667] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 47.978423][ T6654] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 48.965199][ T6490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.188151][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.234363][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.435189][ T6710] loop2: detected capacity change from 0 to 32768 [ 52.401171][ T6726] xt_nat: multiple ranges no longer supported [ 52.526675][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.39 (6710) [ 52.556708][ T6710] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.556868][ T6710] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 52.556949][ T6710] BTRFS info (device loop2): using free-space-tree [ 53.602503][ T6717] loop1: detected capacity change from 0 to 32768 [ 53.657437][ T6710] BTRFS error (device loop2): open_ctree failed: -4 [ 53.684531][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.687148][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.732661][ T6717] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 53.743957][ T6717] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 53.743957][ T6717] allowing incompatible features above 0.0: (unknown version) [ 53.744124][ T6717] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 53.744291][ T6717] bcachefs (loop1): Version upgrade required: [ 53.744291][ T6717] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 53.744291][ T6717] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 53.744291][ T6717] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 53.788702][ T6717] bcachefs (loop1): dropping and reconstructing all alloc info [ 53.820659][ T6717] bcachefs (loop1): accounting_read... done [ 53.862243][ T6717] bcachefs (loop1): alloc_read... done [ 53.862311][ T6717] bcachefs (loop1): snapshots_read... done [ 53.863142][ T6717] bcachefs (loop1): check_allocations... done [ 53.918759][ T6717] bcachefs (loop1): going read-write [ 53.918883][ T6717] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1 [ 53.918883][ T6717] rw journal devs: [ 53.933333][ T6717] bcachefs (loop1): done starting filesystem [ 54.033587][ T6495] bcachefs (loop1): shutting down [ 54.033717][ T6495] bcachefs (loop1): going read-only [ 54.033874][ T6495] bcachefs (loop1): finished waiting for writes to stop [ 54.106074][ T6495] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 54.106337][ T6495] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 54.113160][ T6495] bcachefs (loop1): unclean shutdown complete, journal seq 10 [ 54.365328][ T6495] bcachefs (loop1): done going read-only, filesystem not clean [ 54.893314][ T6495] bcachefs (loop1): shutdown complete [ 54.900797][ T6773] loop3: detected capacity change from 0 to 128 [ 54.961272][ T6773] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 54.973233][ T6773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.619563][ T6785] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 55.619563][ T6785] The task syz.0.55 (6785) triggered the difference, watch for misbehavior. [ 55.634159][ T6785] overlayfs: failed to resolve './file0': -2 [ 56.498247][ T6791] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.504032][ T6791] process 'syz.2.56' launched '/dev/fd/6' with NULL argv: empty string added [ 56.636670][ T6794] tipc: Failed to remove unknown binding: 66,1,1/0:389848040/389848042 [ 56.636776][ T6794] tipc: Failed to remove unknown binding: 66,1,1/0:389848040/389848042 [ 57.932913][ T6793] SET target dimension over the limit! [ 58.215622][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.62'. [ 58.218382][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.62'. [ 58.222804][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.62'. [ 58.225189][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.62'. [ 61.510777][ T6842] loop2: detected capacity change from 0 to 40427 [ 61.719198][ T6842] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 61.719791][ T6842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.220409][ T6842] F2FS-fs (loop2): invalid crc value [ 62.262686][ T6842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.262812][ T6842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.286591][ T6499] syz-executor: attempt to access beyond end of device [ 63.286591][ T6499] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 63.287146][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 63.287173][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.287181][ T6499] Call trace: [ 63.287186][ T6499] show_stack+0x2c/0x3c (C) [ 63.287203][ T6499] __dump_stack+0x30/0x40 [ 63.287215][ T6499] dump_stack_lvl+0xd8/0x12c [ 63.287225][ T6499] dump_stack+0x1c/0x28 [ 63.287235][ T6499] f2fs_handle_critical_error+0x34c/0x4b8 [ 63.287249][ T6499] f2fs_stop_checkpoint+0x58/0x6c [ 63.287261][ T6499] f2fs_write_end_io+0x794/0xadc [ 63.287279][ T6499] bio_endio+0x81c/0x858 [ 63.287293][ T6499] submit_bio_noacct+0x158/0x176c [ 63.287304][ T6499] submit_bio+0x354/0x4d4 [ 63.287314][ T6499] f2fs_submit_write_bio+0x13c/0x324 [ 63.287327][ T6499] __submit_merged_bio+0x254/0x704 [ 63.287340][ T6499] __submit_merged_write_cond+0x380/0x4ac [ 63.287353][ T6499] f2fs_submit_merged_write+0x38/0x48 [ 63.287365][ T6499] f2fs_sync_node_pages+0x1734/0x18e8 [ 63.287377][ T6499] f2fs_write_checkpoint+0xac8/0x1694 [ 63.287389][ T6499] kill_f2fs_super+0x21c/0x584 [ 63.287402][ T6499] deactivate_locked_super+0xc4/0x12c [ 63.287415][ T6499] deactivate_super+0xe0/0x100 [ 63.287426][ T6499] cleanup_mnt+0x31c/0x3ac [ 63.287438][ T6499] __cleanup_mnt+0x20/0x30 [ 63.287450][ T6499] task_work_run+0x1dc/0x260 [ 63.287462][ T6499] do_notify_resume+0x16c/0x1ec [ 63.287484][ T6499] el0_svc+0xb4/0x17c [ 63.287499][ T6499] el0t_64_sync_handler+0x78/0x108 [ 63.287513][ T6499] el0t_64_sync+0x198/0x19c [ 63.298822][ T6499] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 64.861443][ T2385] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.861590][ T2385] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.157398][ T6884] loop2: detected capacity change from 0 to 2048 [ 66.486450][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.527333][ T6897] loop0: detected capacity change from 0 to 512 [ 66.532513][ T6897] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.585536][ T6903] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.604498][ T6884] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.609842][ T6884] EXT4-fs (loop2): Remounting filesystem read-only [ 66.636711][ T6897] EXT4-fs (loop0): 1 orphan inode deleted [ 66.637593][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.714340][ T646] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 66.735188][ T646] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 67.539252][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.721077][ T6919] loop3: detected capacity change from 0 to 256 [ 68.165353][ T6919] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.165901][ T6919] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 68.278425][ T6919] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 68.336321][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.392629][ T6935] loop3: detected capacity change from 0 to 2048 [ 69.417889][ T6935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.431898][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 69.432042][ T6939] netlink: 'syz.2.100': attribute type 7 has an invalid length. [ 69.432105][ T6939] netlink: 'syz.2.100': attribute type 8 has an invalid length. [ 69.432133][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 69.438695][ T6939] ip6gretap0: entered promiscuous mode [ 69.444073][ T6939] syz_tun: entered promiscuous mode [ 69.455225][ T6939] gretap0: entered promiscuous mode [ 69.691462][ T6941] loop0: detected capacity change from 0 to 4096 [ 70.300286][ T1805] cfg80211: failed to load regulatory.db [ 71.231672][ T6958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.314452][ T6960] loop2: detected capacity change from 0 to 2048 [ 71.337029][ T6963] loop4: detected capacity change from 0 to 512 [ 71.342006][ T6963] EXT4-fs (loop4): bad block size 8192 [ 71.364748][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.280935][ T6967] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 74.066619][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.089216][ T6499] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.128060][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.144241][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.445167][ T7022] loop0: detected capacity change from 0 to 1024 [ 76.445805][ T7022] EXT4-fs: Ignoring removed nobh option [ 76.448933][ T7022] EXT4-fs: Ignoring removed bh option [ 76.610487][ T7023] loop4: detected capacity change from 0 to 8 [ 76.622379][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.638267][ T7023] SQUASHFS error: zlib decompression failed, data probably corrupt [ 76.641755][ T7023] SQUASHFS error: Failed to read block 0x9b: -5 [ 76.641804][ T7023] SQUASHFS error: Unable to read metadata cache entry [99] [ 76.641833][ T7023] SQUASHFS error: Unable to read inode 0x127 [ 77.608425][ T6570] IPVS: starting estimator thread 0... [ 78.700452][ T7037] IPVS: using max 33 ests per chain, 79200 per kthread [ 79.974112][ T7055] tipc: Started in network mode [ 79.978210][ T7055] tipc: Node identity a18d, cluster identity 4711 [ 79.980360][ T7055] tipc: Node number set to 41357 [ 80.985726][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.821245][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 82.925195][ T7141] loop2: detected capacity change from 0 to 64 [ 84.871167][ T7155] cgroup: fork rejected by pids controller in /syz0 [ 85.047469][ T7204] veth0_vlan: entered allmulticast mode [ 85.069137][ T7204] veth0_vlan: left promiscuous mode [ 85.070566][ T7204] veth0_vlan: entered promiscuous mode [ 85.964315][ T7209] bridge1: entered allmulticast mode [ 86.061356][ T7210] loop0: detected capacity change from 0 to 64 [ 87.799587][ T7224] loop3: detected capacity change from 0 to 1024 [ 87.803532][ T7224] EXT4-fs: Ignoring removed orlov option [ 87.806854][ T7224] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 87.833391][ T7224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.901845][ T7224] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 87.902035][ T7224] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.156: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 87.920336][ T7224] EXT4-fs (loop3): Remounting filesystem read-only [ 87.999200][ T7234] binder: 7233:7234 tried to acquire reference to desc 0, got 1 instead [ 88.039832][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 88.069233][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.087370][ T6539] binder: undelivered transaction 5, process died. [ 88.121178][ T7236] tipc: Started in network mode [ 88.122613][ T7236] tipc: Node identity 4, cluster identity 4711 [ 88.124279][ T7236] tipc: Node number set to 4 [ 88.192683][ T7240] loop0: detected capacity change from 0 to 512 [ 88.196797][ T7240] ext4: Unknown parameter 'fscontext' [ 88.391941][ T7242] loop3: detected capacity change from 0 to 4096 [ 88.413972][ T7244] binder: 7243:7244 tried to acquire reference to desc 0, got 1 instead [ 88.429248][ T6541] binder: release 7243:7244 transaction 17 out, still active [ 88.429379][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 88.429409][ T6541] binder: undelivered TRANSACTION_COMPLETE [ 89.418955][ T6539] binder: undelivered transaction 16, process died. [ 89.425180][ T6539] binder: send failed reply for transaction 17, target dead [ 90.142018][ T7242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.154211][ T6541] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 90.154330][ T6541] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 90.165079][ T6541] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 90.331540][ T7242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.331603][ T7242] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.339081][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.044465][ T7232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 385: padding at end of block bitmap is not set [ 91.158926][ T7264] fido_id[7264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.186065][ T7242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.186171][ T7242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.235132][ T7242] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.319095][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 91.319167][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 91.336128][ T6490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.498952][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 91.499022][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 92.551676][ T7286] Bluetooth: MGMT ver 1.23 [ 93.736470][ T7306] syz_tun: entered allmulticast mode [ 93.753238][ T7306] xfrm0: entered allmulticast mode [ 93.764912][ T7306] dvmrp1: entered allmulticast mode [ 93.768140][ T7308] loop4: detected capacity change from 0 to 2048 [ 93.895726][ T7305] syz_tun: left allmulticast mode [ 93.933262][ T7308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 93.934714][ T7308] System zones: 0-4 [ 93.940887][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.998146][ T7308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.180: bg 0: block 361: padding at end of block bitmap is not set [ 94.120709][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.430700][ T7324] netlink: 48 bytes leftover after parsing attributes in process `syz.0.184'. [ 97.509356][ T7345] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 97.521251][ T558] Bluetooth: (null): Invalid header checksum [ 97.851763][ T7352] loop3: detected capacity change from 0 to 256 [ 97.858902][ T7352] exfat: Deprecated parameter 'namecase' [ 97.859105][ T7352] exfat: Bad value for 'uid' [ 97.859197][ T7352] exfat: Bad value for 'uid' [ 101.218744][ T7376] loop1: detected capacity change from 0 to 2048 [ 101.243652][ T7376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.240743][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.241078][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.262782][ T7385] warning: `syz.0.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.278566][ T7385] loop0: detected capacity change from 0 to 8 [ 102.308629][ T7385] Filesystem uses "unknown" compression. This is not supported [ 103.301245][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'. [ 103.655709][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 103.839884][ T7416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.210'. [ 103.885686][ T7416] loop1: detected capacity change from 0 to 8 [ 103.892856][ T7416] unable to read id index table [ 105.945008][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.945309][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.983293][ T55] Bluetooth: hci1: unknown advertising packet type: 0x10 [ 106.155535][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 106.155625][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 106.975232][ T7454] loop0: detected capacity change from 0 to 1024 [ 107.097671][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'. [ 107.729147][ T7456] batman_adv: batadv0: Adding interface: dummy0 [ 107.729261][ T7456] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.729342][ T7456] batman_adv: batadv0: Interface activated: dummy0 [ 107.739092][ T7456] batadv0: mtu less than device minimum [ 107.742236][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.745219][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.748123][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.751012][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.753887][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.756755][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.759610][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.762511][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.765383][ T7456] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.913378][ T7463] loop1: detected capacity change from 0 to 16 [ 107.928059][ T7463] erofs (device loop1): mounted with root inode @ nid 36. [ 108.940919][ T7469] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 109.962739][ T7477] loop4: detected capacity change from 0 to 256 [ 110.159152][ T7477] fuse: Unknown parameter 'rootmod00000000p000000020000' [ 112.810773][ T7502] loop4: detected capacity change from 0 to 16 [ 112.822894][ T7502] erofs (device loop4): mounted with root inode @ nid 36. [ 112.911392][ T7507] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 112.914139][ T7507] syz.4.234: attempt to access beyond end of device [ 112.914139][ T7507] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 112.918274][ T7507] erofs (device loop4): read error -5 @ 0 of nid 36 [ 112.920443][ T7507] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 112.926553][ T7507] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 112.931709][ T7507] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 112.931857][ T7507] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 112.931907][ T7507] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 112.932060][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932060][ T7507] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 112.932338][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932338][ T7507] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 112.932416][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932416][ T7507] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 112.932560][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932560][ T7507] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 112.932642][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932642][ T7507] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 112.932716][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932716][ T7507] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 112.932810][ T7507] syz.4.234: attempt to access beyond end of device [ 112.932810][ T7507] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 113.812202][ T7510] batman_adv: batadv0: Interface deactivated: dummy0 [ 113.831581][ T7510] batman_adv: batadv0: Removing interface: dummy0 [ 113.834220][ T7505] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 113.874313][ T7510] bridge_slave_0: left allmulticast mode [ 113.876035][ T7510] bridge_slave_0: left promiscuous mode [ 113.877883][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.884103][ T7510] bridge_slave_1: left allmulticast mode [ 113.885783][ T7510] bridge_slave_1: left promiscuous mode [ 113.887462][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.892193][ T7510] bond0: (slave bond_slave_0): Releasing backup interface [ 113.919987][ C0] Unable to handle kernel paging request at virtual address dfff800000000018 [ 113.920115][ C0] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 113.920160][ C0] Mem abort info: [ 113.920182][ C0] ESR = 0x0000000096000005 [ 113.920205][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 113.920229][ C0] SET = 0, FnV = 0 [ 113.920252][ C0] EA = 0, S1PTW = 0 [ 113.920274][ C0] FSC = 0x05: level 1 translation fault [ 113.920297][ C0] Data abort info: [ 113.920317][ C0] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 113.920340][ C0] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 113.920364][ C0] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 113.920389][ C0] [dfff800000000018] address between user and kernel address ranges [ 113.920559][ C0] Internal error: Oops: 0000000096000005 [#1] SMP [ 113.920985][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.942168][ C0] Modules linked in: [ 113.943097][ C0] CPU: 0 UID: 0 PID: 6541 Comm: kworker/0:5 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 113.945746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.948216][ C0] Workqueue: mld mld_ifc_work [ 113.949336][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.951181][ C0] pc : find_match+0xa0/0xacc [ 113.952373][ C0] lr : find_match+0x74/0xacc [ 113.953502][ C0] sp : ffff8000800070a0 [ 113.954419][ C0] x29: ffff8000800070c0 x28: 1fffe0001945ff66 x27: 1fffe0001945ff64 [ 113.956392][ C0] x26: 00000000000000c0 x25: ffff0000ca2ffb37 x24: 0000000000000201 [ 113.958337][ C0] x23: 0000000000000003 x22: ffff0000ca2ffb20 x21: 0000000000000021 [ 113.960374][ C0] x20: dfff800000000000 x19: 0000000000000000 x18: 1fffe0003386aa76 [ 113.962399][ C0] x17: ffff80010d0e8000 x16: ffff80008051c10c x15: 0000000000000002 [ 113.964202][ C0] x14: 1ffff00010000e58 x13: 0000000000000000 x12: 0000000000000000 [ 113.966161][ C0] x11: ffff700010000e5a x10: 0000000000ff0100 x9 : 0000000000000000 [ 113.968076][ C0] x8 : 0000000000000018 x7 : ffff800080007450 x6 : 0000000000000003 [ 113.969915][ C0] x5 : ffff800080007450 x4 : ffff800080007440 x3 : 0000000000000003 [ 113.971839][ C0] x2 : 0000000000000021 x1 : 0000000000000000 x0 : 0000000000000000 [ 113.973725][ C0] Call trace: [ 113.974463][ C0] find_match+0xa0/0xacc (P) [ 113.975568][ C0] rt6_nh_find_match+0xcc/0x138 [ 113.976696][ C0] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 113.978057][ C0] __find_rr_leaf+0x3b8/0x5c8 [ 113.979195][ C0] fib6_table_lookup+0x308/0x8b8 [ 113.980410][ C0] ip6_pol_route+0x1f8/0x1014 [ 113.981596][ C0] ip6_pol_route_input+0x74/0x94 [ 113.982788][ C0] fib6_rule_lookup+0x258/0x45c [ 113.983957][ C0] ip6_route_input+0x5d0/0x8d4 [ 113.985054][ C0] ip6_rcv_finish_core+0x218/0x3c8 [ 113.986333][ C0] ip6_rcv_finish+0x120/0x21c [ 113.987499][ C0] NF_HOOK+0x2c4/0x358 [ 113.988514][ C0] ipv6_rcv+0x9c/0xbc [ 113.989459][ C0] __netif_receive_skb+0xcc/0x2a8 [ 113.990685][ C0] process_backlog+0x60c/0x10e4 [ 113.991879][ C0] __napi_poll+0xb4/0x3fc [ 113.993064][ C0] net_rx_action+0x5d4/0xcc8 [ 113.994155][ C0] handle_softirqs+0x328/0xc88 [ 113.995427][ C0] __do_softirq+0x14/0x20 [ 113.996634][ C0] ____do_softirq+0x14/0x20 [ 113.997816][ C0] call_on_irq_stack+0x24/0x30 [ 113.999041][ C0] do_softirq_own_stack+0x20/0x2c [ 114.000333][ C0] do_softirq+0x90/0xf8 [ 114.001411][ C0] __local_bh_enable_ip+0x240/0x35c [ 114.002763][ C0] local_bh_enable+0x28/0x34 [ 114.003876][ C0] __dev_queue_xmit+0x1750/0x31f0 [ 114.005126][ C0] ip6_finish_output2+0x1510/0x1c7c [ 114.006426][ C0] ip6_finish_output+0x418/0x7b4 [ 114.007678][ C0] ip6_output+0x274/0x504 [ 114.008809][ C0] NF_HOOK+0x15c/0x430 [ 114.009852][ C0] mld_sendpack+0x764/0xf50 [ 114.010992][ C0] mld_ifc_work+0x770/0xce8 [ 114.012132][ C0] process_one_work+0x7e8/0x156c [ 114.013352][ C0] worker_thread+0x958/0xed8 [ 114.014573][ C0] kthread+0x5fc/0x75c [ 114.015671][ C0] ret_from_fork+0x10/0x20 [ 114.016867][ C0] Code: 97978776 f94002c8 9103011a d343ff48 (38746908) [ 114.018667][ C0] ---[ end trace 0000000000000000 ]--- [ 114.387914][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 114.390023][ C0] SMP: stopping secondary CPUs [ 114.391241][ C0] Kernel Offset: disabled [ 114.392375][ C0] CPU features: 0x0800,000040e0,01000250,82017203 [ 114.393970][ C0] Memory Limit: none [ 114.735089][ C0] Rebooting in 86400 seconds..