last executing test programs: 35.172555949s ago: executing program 3 (id=370): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 33.487921273s ago: executing program 3 (id=376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="06886661c1b71ac4fb", 0x9}], 0x1}}], 0x1, 0x888) 33.220722526s ago: executing program 3 (id=379): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = fsopen(&(0x7f0000000440)='nfsd\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a00", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) 32.188682012s ago: executing program 3 (id=383): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @empty}, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000003c0)='net/stat\x00') r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r7, r6, 0x25, 0x2, @void}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000070080000700000000800000010000000000000000b000000000d0000000000000e030000000400000010000000040000130700000003000000040000000800000010000000020000000b00000007000000070000007302000003000000010000000700000003000000000000080500000000005f61002e2e0032c8595fb029493e85a452d4560a7a8d6f0b03c9adab100f1027e228ceb88be5ab659626771611ae61f76409ab643120725267fe86b7a7cc408a06b5bc0c2ea4b926de68363851"], &(0x7f0000000640)=""/156, 0x90, 0xc7, 0x1, 0x80000000, 0x10000, @value=r4}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1d000000060000000c000000001000000a810000", @ANYRES32=r3, @ANYBLOB="4d00000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES16=r5, @ANYRESHEX=r8, @ANYBLOB="00001000e4df3dca1969d51c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='rxrpc_call_reset\x00', r4, 0x0, 0xfffffffffffffffe}, 0xffe7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="18250000", @ANYRES32=r8, @ANYBLOB="000000000164dc0018240000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000004600000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185700000c00"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6}, 0x94) 31.178237483s ago: executing program 3 (id=387): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 31.000842923s ago: executing program 3 (id=389): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10022, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000002c0), &(0x7f0000000440)="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"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 15.306284603s ago: executing program 32 (id=389): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10022, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000002c0), &(0x7f0000000440)="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"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 2.268870524s ago: executing program 0 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.136371831s ago: executing program 0 (id=495): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x6]}}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x28) 2.134912547s ago: executing program 1 (id=497): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x9, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}]}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r7) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) close(0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r11}, 0x10) 2.024019581s ago: executing program 2 (id=499): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 1.976913466s ago: executing program 4 (id=500): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) 1.973346367s ago: executing program 2 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0xe985e4df3848afb5, 0x20, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x24}}, 0x20044040) 1.952552514s ago: executing program 4 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x20000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 1.85280596s ago: executing program 1 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.852320245s ago: executing program 0 (id=504): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.851925462s ago: executing program 4 (id=505): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="64000000100001080000000000", @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\b\x00'], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x400, 0x1ff}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1.851628678s ago: executing program 2 (id=506): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8d0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2], 0x24}}, 0x0) 1.754532893s ago: executing program 4 (id=507): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r0, r1+10000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1.750195577s ago: executing program 2 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x65, 0x1, 0xc006, 0xcab, 0x8, 0xb, 0x80000001, 0x4}, 0x20) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'bond0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.524023219s ago: executing program 0 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.388613952s ago: executing program 0 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x33}, 0x2c) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @ptr={0xa}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x75, 0x55757aaa9bb6a8ea}, @float={0x1, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x0, 0x30, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000000700)=""/124, 0x67, 0x7c, 0x1, 0x90}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000280)=@raw=[@ldst={0x3, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1f}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xd9, &(0x7f0000000600)=""/217, 0x41100, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x9, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0xe, 0xa}, {0x4, 0x3, 0xc, 0x5}, {0x5, 0x2, 0x0, 0x8}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0xfff}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x30, 0x6, "62b094d8eebaf062cf85cbd52862ad480e8539099f7ed5974530e7595723c61c73035cbda344fc70b57d0dee"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000240)=0x84) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x14}, 0x10) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 1.388144851s ago: executing program 1 (id=511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.320522556s ago: executing program 1 (id=512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffdffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.247373357s ago: executing program 1 (id=513): socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.226135262s ago: executing program 5 (id=445): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="000000000000000000000000000000000000000096ba6a171fd7fdaf929ee5", @ANYRES32=0x0, @ANYBLOB="000000008000"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4, @private=0xa050100}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x44015}, 0x40) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.028772682s ago: executing program 1 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffa, 0x2, 0xc, 0x4, 0x5, 0x8e, 0xffffffff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x4) 307.975767ms ago: executing program 5 (id=515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0xfffffffd, 0x80008}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f00000003c0)=""/123, 0x7b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x90}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 260.039215ms ago: executing program 2 (id=516): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x24, r0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 259.652986ms ago: executing program 4 (id=517): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x409}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 164.665324ms ago: executing program 4 (id=518): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3ff6f3ba0a39e71b, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1811}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x2000c040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x10) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$kcm(0x10, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x18, 0x24, 0x301, 0x70bd2d, 0xfffffffc, {0x1}, [@nested={0x4, 0x14a}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4008004) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000fd971ddbdd1985b7ae340ee51528cde697ce000000000000000000850000000745fa5ef2595c639b243c8eff439809122e7a55d74f0cfc9985173c4ba4327fb424e34094e31ddfd1626a805cafe5b6a8d0add136ea8b8d7de074a866ec353c1e9883a4385a6e706d7047b25b184f28cf91b19271bc56cf526b9e5de8481efb8bd99059b534b1af3d810c6d4fd9bd37a9415efde53fa60ed4d176a3bac25ea59af1651991aa61691f68c153a9b3bb7df4a2c309998e86d355fa65ed2e49bb2a149e542f0f2494b7465608de2871c999d9433d5ca51dc186d85e31fbc58d95fa009ec4c090a8e5b1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 159.409813ms ago: executing program 2 (id=519): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x2f5a, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX], 0x0) 0s ago: executing program 0 (id=520): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 38.748157][ T6515] cgroup: Unknown subsys name 'net' [ 38.885902][ T6515] cgroup: Unknown subsys name 'cpuset' [ 38.889752][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.125210][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 41.528971][ T6536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.529641][ T6538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.530557][ T6538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.531288][ T6538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.531763][ T6538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.532153][ T6538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.534840][ T6536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.535743][ T6538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.536495][ T6538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.537247][ T6538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.544062][ T6538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.555916][ T6536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.562848][ T6536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.566412][ T6536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.572227][ T6536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.574955][ T6536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.578915][ T6538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.584285][ T6538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.587501][ T6538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.590216][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.595205][ T6538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.595350][ T6538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.602078][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.619583][ T6095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.622901][ T6095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.837235][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 41.865176][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 41.989416][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.989567][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.989755][ T6529] bridge_slave_0: entered allmulticast mode [ 41.990715][ T6529] bridge_slave_0: entered promiscuous mode [ 41.993156][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.993208][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.993366][ T6529] bridge_slave_1: entered allmulticast mode [ 41.994221][ T6529] bridge_slave_1: entered promiscuous mode [ 42.005648][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.005702][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.005856][ T6539] bridge_slave_0: entered allmulticast mode [ 42.006800][ T6539] bridge_slave_0: entered promiscuous mode [ 42.010266][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.010318][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.010425][ T6539] bridge_slave_1: entered allmulticast mode [ 42.011500][ T6539] bridge_slave_1: entered promiscuous mode [ 42.068661][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.097139][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.098709][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.116421][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 42.128528][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.145553][ T6539] team0: Port device team_slave_0 added [ 42.177353][ T6539] team0: Port device team_slave_1 added [ 42.196135][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 42.208794][ T6529] team0: Port device team_slave_0 added [ 42.212889][ T6529] team0: Port device team_slave_1 added [ 42.230821][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 42.261849][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.264427][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.264472][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.289871][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.291983][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.299946][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.306587][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.306648][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.306683][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.332934][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.335146][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.337342][ T6526] bridge_slave_0: entered allmulticast mode [ 42.338497][ T6526] bridge_slave_0: entered promiscuous mode [ 42.340770][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.340804][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.340841][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.364653][ T6539] hsr_slave_0: entered promiscuous mode [ 42.365356][ T6539] hsr_slave_1: entered promiscuous mode [ 42.370764][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.371270][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.371393][ T6526] bridge_slave_1: entered allmulticast mode [ 42.372673][ T6526] bridge_slave_1: entered promiscuous mode [ 42.401886][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.401994][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.402157][ T6525] bridge_slave_0: entered allmulticast mode [ 42.403127][ T6525] bridge_slave_0: entered promiscuous mode [ 42.424103][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.438055][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.438164][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.438282][ T6525] bridge_slave_1: entered allmulticast mode [ 42.439152][ T6525] bridge_slave_1: entered promiscuous mode [ 42.455244][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.467142][ T6529] hsr_slave_0: entered promiscuous mode [ 42.467702][ T6529] hsr_slave_1: entered promiscuous mode [ 42.468125][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.468220][ T6529] Cannot create hsr debugfs directory [ 42.513686][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.513776][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.513896][ T6530] bridge_slave_0: entered allmulticast mode [ 42.514868][ T6530] bridge_slave_0: entered promiscuous mode [ 42.525397][ T6526] team0: Port device team_slave_0 added [ 42.528849][ T6526] team0: Port device team_slave_1 added [ 42.551700][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.555235][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.555433][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.555507][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.555615][ T6530] bridge_slave_1: entered allmulticast mode [ 42.556487][ T6530] bridge_slave_1: entered promiscuous mode [ 42.619025][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.619095][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.619155][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.636360][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.640050][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.643501][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.643532][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.643577][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.664137][ T6525] team0: Port device team_slave_0 added [ 42.689201][ T6525] team0: Port device team_slave_1 added [ 42.703792][ T6530] team0: Port device team_slave_0 added [ 42.732156][ T6530] team0: Port device team_slave_1 added [ 42.782876][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.782938][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.782984][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.800737][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.800813][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.800855][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.802080][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.802111][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.802148][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.806663][ T6526] hsr_slave_0: entered promiscuous mode [ 42.807304][ T6526] hsr_slave_1: entered promiscuous mode [ 42.807672][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.807702][ T6526] Cannot create hsr debugfs directory [ 42.808151][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.808176][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.808216][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.937547][ T6525] hsr_slave_0: entered promiscuous mode [ 42.938170][ T6525] hsr_slave_1: entered promiscuous mode [ 42.938546][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.938577][ T6525] Cannot create hsr debugfs directory [ 42.956094][ T6530] hsr_slave_0: entered promiscuous mode [ 42.958501][ T6530] hsr_slave_1: entered promiscuous mode [ 42.960749][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.963166][ T6530] Cannot create hsr debugfs directory [ 43.017624][ T6539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.026870][ T6539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.058454][ T6539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.082933][ T6539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.176721][ T6529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.182503][ T6529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.200447][ T6529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.205262][ T6529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.269624][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.278563][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.293816][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.298620][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.309810][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.351619][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.365083][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.377563][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.377724][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.392244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.392394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.409785][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.433736][ T6525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.440598][ T6525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.457879][ T6525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.464902][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.464989][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.466037][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.466086][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.485666][ T6525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.566480][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.592011][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.592096][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.594272][ T6528] Bluetooth: hci4: command tx timeout [ 43.594465][ T6528] Bluetooth: hci2: command tx timeout [ 43.612836][ T6530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.630595][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.633949][ T6530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.640003][ T6530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.645349][ T6530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.673119][ T6528] Bluetooth: hci0: command tx timeout [ 43.673285][ T6528] Bluetooth: hci1: command tx timeout [ 43.676575][ T6095] Bluetooth: hci3: command tx timeout [ 43.685080][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.685169][ T748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.686254][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.686305][ T748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.711008][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.761934][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.767325][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.774147][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.815751][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.833685][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.833822][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.846683][ T6539] veth0_vlan: entered promiscuous mode [ 43.857518][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.857607][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.870753][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.878888][ T6539] veth1_vlan: entered promiscuous mode [ 43.915619][ T6539] veth0_macvtap: entered promiscuous mode [ 43.920546][ T6539] veth1_macvtap: entered promiscuous mode [ 43.930199][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.958820][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.979655][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.992061][ T6539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.997060][ T6539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.999790][ T6539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.003329][ T6539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.018906][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.021869][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.021960][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.036487][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.056809][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.056886][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.058330][ T6529] veth0_vlan: entered promiscuous mode [ 44.061645][ T6529] veth1_vlan: entered promiscuous mode [ 44.177883][ T3888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.177987][ T3888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.184030][ T6529] veth0_macvtap: entered promiscuous mode [ 44.189519][ T6526] veth0_vlan: entered promiscuous mode [ 44.201456][ T6529] veth1_macvtap: entered promiscuous mode [ 44.218882][ T6526] veth1_vlan: entered promiscuous mode [ 44.235231][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.235299][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.251171][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.264855][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.276983][ T6526] veth0_macvtap: entered promiscuous mode [ 44.287422][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.304357][ T6526] veth1_macvtap: entered promiscuous mode [ 44.309076][ T6529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.309171][ T6529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.309202][ T6529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.309231][ T6529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.346494][ T6525] veth0_vlan: entered promiscuous mode [ 44.353671][ T6525] veth1_vlan: entered promiscuous mode [ 44.356077][ T6539] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.427380][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.429516][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.451585][ T6525] veth0_macvtap: entered promiscuous mode [ 44.480847][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.480938][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.480969][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.480997][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.488800][ T6525] veth1_macvtap: entered promiscuous mode [ 44.508963][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.509043][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.561295][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.588085][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.588158][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.590494][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.590871][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.593300][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.614594][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.616395][ T6525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.616443][ T6525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.616479][ T6525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.616508][ T6525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.708619][ T3888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.708685][ T3888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.719252][ T3888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.719313][ T3888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.755071][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.755143][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.789626][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.789693][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.975615][ T6644] fuse: root generation should be zero [ 46.059835][ T6095] Bluetooth: hci2: command tx timeout [ 46.061633][ T6095] Bluetooth: hci4: command tx timeout [ 46.063614][ T6095] Bluetooth: hci3: command tx timeout [ 46.063655][ T6095] Bluetooth: hci1: command tx timeout [ 46.063689][ T6095] Bluetooth: hci0: command tx timeout [ 46.071410][ T6530] veth0_vlan: entered promiscuous mode [ 46.086342][ T6530] veth1_vlan: entered promiscuous mode [ 46.105853][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.106152][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.352704][ T6530] veth0_macvtap: entered promiscuous mode [ 46.863445][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.866785][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.083594][ T6530] veth1_macvtap: entered promiscuous mode [ 47.115821][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.123090][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.190213][ T6670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 47.793473][ T6530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793557][ T6530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793612][ T6530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793643][ T6530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.860337][ T6677] loop0: detected capacity change from 0 to 16 [ 47.869038][ T6677] erofs (device loop0): mounted with root inode @ nid 36. [ 47.879373][ T6677] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 47.888432][ T6677] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851] [ 47.888549][ T6677] erofs (device loop0): read error -117 @ 43 of nid 36 [ 48.037807][ T6679] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 48.037949][ T6679] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 48.037998][ T6679] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 48.038044][ T6679] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 48.038075][ T6679] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 48.038104][ T6679] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 48.038133][ T6679] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 48.038179][ T6679] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 48.038208][ T6679] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 48.038403][ T6679] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 48.038511][ T6679] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 48.038541][ T6679] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 48.038663][ T6679] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 48.038702][ T6679] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 48.038814][ T6679] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 48.039197][ T6679] syz.0.13: attempt to access beyond end of device [ 48.039197][ T6679] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 48.039881][ T6679] syz.0.13: attempt to access beyond end of device [ 48.039881][ T6679] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 48.040021][ T6679] syz.0.13: attempt to access beyond end of device [ 48.040021][ T6679] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 48.040317][ T6679] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639] [ 48.040483][ T6679] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 48.040518][ T6679] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 48.040546][ T6679] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 48.040575][ T6679] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 48.040634][ T6679] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 48.040785][ T6679] syz.0.13: attempt to access beyond end of device [ 48.040785][ T6679] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 48.041443][ T6679] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537] [ 48.072462][ T52] Bluetooth: hci0: command tx timeout [ 48.072519][ T52] Bluetooth: hci1: command tx timeout [ 48.072552][ T52] Bluetooth: hci3: command tx timeout [ 48.072586][ T52] Bluetooth: hci4: command tx timeout [ 48.072618][ T52] Bluetooth: hci2: command tx timeout [ 48.286282][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.286320][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.488191][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.488230][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.124660][ T6690] loop3: detected capacity change from 0 to 4096 [ 50.152522][ T52] Bluetooth: hci4: command tx timeout [ 50.152600][ T52] Bluetooth: hci3: command tx timeout [ 50.152636][ T52] Bluetooth: hci1: command tx timeout [ 50.152669][ T52] Bluetooth: hci0: command tx timeout [ 50.152758][ T6095] Bluetooth: hci2: command tx timeout [ 50.433488][ T6690] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 51.830015][ T6690] ntfs3(loop3): Failed to read $UpCase (-4). [ 52.973366][ T6704] loop4: detected capacity change from 0 to 1024 [ 53.005025][ T6704] hfsplus: invalid btree extent records (0 size) [ 53.005186][ T6704] hfsplus: failed to load attributes file [ 53.166078][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.166530][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.292236][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 55.341693][ T6722] cgroup: Invalid name [ 56.913618][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.917434][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.943175][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.948705][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.527703][ T6763] cgroup: Invalid name [ 58.237119][ T6767] loop2: detected capacity change from 0 to 512 [ 58.279239][ T6767] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.287119][ T6767] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 58.481474][ T6777] loop4: detected capacity change from 0 to 128 [ 58.525420][ T6774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.525752][ T6774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.654863][ T6784] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 59.468263][ T6784] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.842681][ T6811] cgroup: Invalid name [ 61.527947][ T6820] loop1: detected capacity change from 0 to 512 [ 61.564703][ T6816] loop2: detected capacity change from 0 to 32768 [ 61.572092][ T6816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.55 (6816) [ 61.632609][ T6822] loop3: detected capacity change from 0 to 256 [ 61.714095][ T6822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 62.367140][ T6820] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 62.367283][ T6820] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 62.383046][ T6820] EXT4-fs (loop1): 1 truncate cleaned up [ 62.385849][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.462514][ T6816] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 62.462702][ T6816] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 62.462799][ T6816] BTRFS info (device loop2): using free-space-tree [ 62.503799][ T6820] ======================================================= [ 62.503799][ T6820] WARNING: The mand mount option has been deprecated and [ 62.503799][ T6820] and is ignored by this kernel. Remove the mand [ 62.503799][ T6820] option from the mount to silence this warning. [ 62.503799][ T6820] ======================================================= [ 62.580087][ T6820] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.804739][ T6815] loop4: detected capacity change from 0 to 32768 [ 62.840602][ T6539] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 62.847796][ T6815] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 62.953683][ T6815] XFS (loop4): Ending clean mount [ 62.963665][ T6815] XFS (loop4): Quotacheck needed: Please wait. [ 62.992462][ T6815] XFS (loop4): Quotacheck: Done. [ 63.066085][ T6530] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 63.438507][ T6525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.515159][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 63.759606][ T6864] batman_adv: batadv0: Adding interface: dummy0 [ 63.759679][ T6864] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.759778][ T6864] batman_adv: batadv0: Interface activated: dummy0 [ 64.715377][ T6875] loop3: detected capacity change from 0 to 512 [ 64.716079][ T6875] EXT4-fs: Ignoring removed nobh option [ 64.716124][ T6875] ext4: Unknown parameter 'hash' [ 64.877479][ T2405] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.877634][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.751720][ T6885] process 'syz.1.67' launched './file0' with NULL argv: empty string added [ 66.846953][ T6905] loop4: detected capacity change from 0 to 512 [ 66.916394][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.971759][ T6905] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.75: corrupted inode contents [ 67.069967][ T6905] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.75: mark_inode_dirty error [ 67.543345][ T6905] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.75: corrupted inode contents [ 67.613908][ T6905] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.75: mark_inode_dirty error [ 67.650788][ T6913] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.75: corrupted inode contents [ 67.658710][ T6913] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.75: mark_inode_dirty error [ 67.668110][ T6913] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.75: corrupted inode contents [ 67.725147][ T6905] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.75: corrupted inode contents [ 67.730906][ T6905] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.75: mark_inode_dirty error [ 67.735207][ T6905] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 67.779031][ T6530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.814485][ T6924] loop1: detected capacity change from 0 to 512 [ 67.824442][ T6924] EXT4-fs: Ignoring removed nobh option [ 67.826794][ T6924] ext4: Unknown parameter 'hash' [ 67.847386][ T10] libceph: connect (1)[c::]:6789 error -101 [ 67.847781][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 67.871833][ T6916] ceph: No mds server is up or the cluster is laggy [ 67.881213][ T10] libceph: connect (1)[c::]:6789 error -101 [ 67.881390][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 68.848004][ T31] audit: type=1326 audit(67.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848087][ T31] audit: type=1326 audit(67.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848156][ T31] audit: type=1326 audit(67.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848195][ T31] audit: type=1326 audit(67.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848235][ T31] audit: type=1326 audit(67.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848273][ T31] audit: type=1326 audit(67.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848311][ T31] audit: type=1326 audit(67.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848348][ T31] audit: type=1326 audit(67.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848385][ T31] audit: type=1326 audit(67.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 68.848422][ T31] audit: type=1326 audit(67.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x7ffc0000 [ 69.348419][ T6952] loop4: detected capacity change from 0 to 512 [ 69.381919][ T6952] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.387948][ T6952] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 69.399683][ T6952] EXT4-fs (loop4): 1 truncate cleaned up [ 69.400630][ T6952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.438061][ T6952] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.469040][ T6530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.097111][ T6960] loop0: detected capacity change from 0 to 4096 [ 70.132230][ T3917] cfg80211: failed to load regulatory.db [ 70.262837][ T6960] ntfs3(loop0): Unsupported bytes per MFT record 8192. [ 70.263214][ T6960] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 70.284027][ T6959] loop4: detected capacity change from 0 to 512 [ 70.337258][ T6959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 70.338094][ T6959] System zones: 0-2, 18-18, 34-35 [ 70.353481][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.467249][ T6966] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 70.467322][ T6966] netlink: 'syz.0.90': attribute type 4 has an invalid length. [ 70.467520][ T6966] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.90'. [ 70.538648][ T6530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.823085][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.829363][ T6976] loop4: detected capacity change from 0 to 512 [ 70.832113][ T6976] EXT4-fs: Ignoring removed nobh option [ 70.834100][ T6976] ext4: Unknown parameter 'hash' [ 71.602649][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.602817][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.602874][ T24] usb 1-1: Product: syz [ 71.602902][ T24] usb 1-1: Manufacturer: syz [ 71.602928][ T24] usb 1-1: SerialNumber: syz [ 71.633610][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.660169][ T24] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 71.802562][ T24] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 72.266832][ T6985] loop1: detected capacity change from 0 to 8 [ 72.345518][ T6985] SQUASHFS error: xz decompression failed, data probably corrupt [ 72.345758][ T6985] SQUASHFS error: Failed to read block 0x108: -5 [ 72.345852][ T6985] SQUASHFS error: Unable to read metadata cache entry [106] [ 72.345938][ T6985] SQUASHFS error: Unable to read inode 0x11f [ 72.605480][ T6983] loop2: detected capacity change from 0 to 1024 [ 72.830295][ T12] hfsplus: b-tree write err: -5, ino 4 [ 73.616377][ T6622] usb 1-1: USB disconnect, device number 2 [ 74.793313][ T7008] loop4: detected capacity change from 0 to 4096 [ 74.804748][ T7008] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 75.319596][ T7008] ntfs3(loop4): ino=1a, mi_enum_attr [ 75.319848][ T7008] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 75.323599][ T7008] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 76.891896][ T7041] cgroup: Invalid name [ 77.755455][ T7051] loop2: detected capacity change from 0 to 512 [ 77.809870][ T7051] EXT4-fs (loop2): too many log groups per flexible block group [ 77.810078][ T7051] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 77.810194][ T7051] EXT4-fs (loop2): mount failed [ 78.230202][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.230827][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.611428][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.709015][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.632411][ T6528] Bluetooth: hci5: command 0x1003 tx timeout [ 80.634126][ T7077] loop4: detected capacity change from 0 to 4096 [ 80.642655][ T6095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.657937][ T7077] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 80.663063][ T7051] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.663133][ T7051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.663181][ T7051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.663218][ T7051] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.389011][ T7077] ntfs3(loop4): ino=1a, mi_enum_attr [ 81.389101][ T7077] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 81.389374][ T7077] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 82.438398][ T7094] cgroup: Invalid name [ 83.193884][ T7101] netlink: 332 bytes leftover after parsing attributes in process `syz.4.127'. [ 83.285402][ T7104] Zero length message leads to an empty skb [ 84.724148][ T7127] loop0: detected capacity change from 0 to 64 [ 84.954038][ T7137] cgroup: Invalid name [ 86.194207][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.194538][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.664258][ T7158] input: syz1 as /devices/virtual/input/input2 [ 86.829617][ T7164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.856205][ T7175] loop3: detected capacity change from 0 to 1024 [ 87.900663][ T7176] cgroup: Invalid name [ 87.947517][ T3888] hfsplus: b-tree write err: -5, ino 4 [ 88.940302][ T6095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 91.633366][ T7019] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.670671][ T7219] cgroup: Invalid name [ 93.673241][ T6528] Bluetooth: hci5: command 0x1003 tx timeout [ 93.732593][ T6095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 94.021525][ T7234] usb usb8: usbfs: process 7234 (syz.4.172) did not claim interface 0 before use [ 94.054574][ T7237] loop1: detected capacity change from 0 to 64 [ 94.198509][ T7244] loop4: detected capacity change from 0 to 1024 [ 94.464223][ T7248] loop0: detected capacity change from 0 to 128 [ 94.996073][ T7264] cgroup: Invalid name [ 95.284435][ T6790] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.191026][ T7263] loop0: detected capacity change from 0 to 32768 [ 96.277998][ T7263] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 96.329931][ T7263] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.559727][ T7271] loop3: detected capacity change from 0 to 32768 [ 96.578048][ T7271] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 96.581253][ T7271] JBD2: Ignoring recovery information on journal [ 96.582238][ T7271] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 96.582501][ T7271] JBD2: bad block at offset 32 [ 96.587843][ T7271] (syz.3.184,7271,1):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75 [ 96.587886][ T7271] (syz.3.184,7271,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 96.587912][ T7271] (syz.3.184,7271,1):ocfs2_check_volume:2404 ERROR: status = -22 [ 96.587937][ T7271] (syz.3.184,7271,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 96.587961][ T7271] (syz.3.184,7271,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 96.596031][ T7271] (syz.3.184,7271,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 96.832892][ T6526] ocfs2: Unmounting device (7,0) on (node local) [ 97.353373][ T6528] Bluetooth: hci5: command 0x1003 tx timeout [ 97.354506][ T6095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.520858][ T7307] loop2: detected capacity change from 0 to 4096 [ 98.524541][ T7307] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 98.564498][ T7307] ntfs3(loop2): ino=1a, mi_enum_attr [ 98.564644][ T7307] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 98.566011][ T7307] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 99.837538][ T7328] loop4: detected capacity change from 0 to 2048 [ 99.838192][ T7328] udf: Unknown parameter '18446744073709551615' [ 100.254655][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.204'. [ 100.811435][ T6702] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.964201][ T7344] loop2: detected capacity change from 0 to 16 [ 100.976587][ T7344] erofs (device loop2): mounted with root inode @ nid 36. [ 100.980580][ T7344] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 100.983684][ T7344] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851] [ 100.983765][ T7344] erofs (device loop2): read error -117 @ 43 of nid 36 [ 100.987076][ T7344] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 100.987149][ T7344] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 100.987174][ T7344] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 100.987209][ T7344] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 100.987232][ T7344] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 100.987255][ T7344] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 100.987277][ T7344] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 100.987306][ T7344] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 100.987329][ T7344] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 100.987411][ T7344] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 100.988302][ T7344] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 100.988341][ T7344] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 100.988459][ T7344] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 100.988492][ T7344] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 100.988585][ T7344] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 100.988830][ T7344] syz.2.208: attempt to access beyond end of device [ 100.988830][ T7344] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 100.988991][ T7344] syz.2.208: attempt to access beyond end of device [ 100.988991][ T7344] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 100.989101][ T7344] syz.2.208: attempt to access beyond end of device [ 100.989101][ T7344] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 100.989340][ T7344] erofs (device loop2): failed to decompress -29 in[58, 4038] out[2639] [ 100.989461][ T7344] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 100.989487][ T7344] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 100.989509][ T7344] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 100.989532][ T7344] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 100.989579][ T7344] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 100.989667][ T7344] syz.2.208: attempt to access beyond end of device [ 100.989667][ T7344] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 100.990182][ T7344] erofs (device loop2): failed to decompress -29 in[58, 4038] out[3537] [ 101.744698][ T7361] loop2: detected capacity change from 0 to 4096 [ 101.766651][ T7361] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 102.727627][ T6528] Bluetooth: hci5: command 0x1003 tx timeout [ 102.784842][ T6095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.807504][ T7361] ntfs3(loop2): ino=1a, mi_enum_attr [ 102.807585][ T7361] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 102.808518][ T7361] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 103.518861][ T7380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.518992][ T7380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 104.235760][ T7386] Bluetooth: MGMT ver 1.23 [ 104.356290][ T7388] loop3: detected capacity change from 0 to 2048 [ 104.374464][ T7388] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.492714][ T7392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.759457][ T7400] serio: Serial port ptm0 [ 105.110480][ T338] Bluetooth: hci5: Frame reassembly failed (-84) [ 106.195541][ T7419] loop3: detected capacity change from 0 to 4096 [ 106.207162][ T7419] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 106.313727][ T52] Bluetooth: hci0: command 0x1407 tx timeout [ 106.314758][ T6095] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 106.741383][ T7419] ntfs3(loop3): ino=1a, mi_enum_attr [ 106.741472][ T7419] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 106.746861][ T7419] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 106.764392][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.769682][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.964405][ T7428] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.964598][ T7428] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 107.032631][ T6528] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 107.285250][ T7435] loop3: detected capacity change from 0 to 1024 [ 107.328833][ T7435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.585001][ T7443] loop0: detected capacity change from 0 to 40427 [ 107.605804][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.606132][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.649668][ T7443] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.649853][ T7443] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.654549][ T7443] F2FS-fs (loop0): invalid crc value [ 107.681147][ T7443] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.681353][ T7443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.779644][ T7458] netlink: 'syz.0.239': attribute type 2 has an invalid length. [ 108.525907][ T6529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.697007][ T41] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.432808][ T7479] loop3: detected capacity change from 0 to 4096 [ 110.582619][ T7479] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 110.623764][ T7479] ntfs3(loop3): ino=1a, mi_enum_attr [ 110.623850][ T7479] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 110.627909][ T7479] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 110.713157][ T6095] Bluetooth: hci5: command 0x1003 tx timeout [ 110.714804][ T6528] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.046534][ T7487] loop1: detected capacity change from 0 to 4096 [ 111.053945][ T7487] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 111.662459][ T7497] netlink: 324 bytes leftover after parsing attributes in process `syz.0.255'. [ 112.309029][ T7509] loop0: detected capacity change from 0 to 512 [ 112.496357][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.229131][ T3888] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.252142][ T7522] loop3: detected capacity change from 0 to 4096 [ 113.259658][ T7522] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 113.407831][ T7522] ntfs3(loop3): ino=1a, mi_enum_attr [ 113.407924][ T7522] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 113.408548][ T7522] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 114.356024][ T7531] loop4: detected capacity change from 0 to 16 [ 114.922103][ T7531] erofs (device loop4): mounted with root inode @ nid 36. [ 114.927651][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.953540][ T7531] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 114.966379][ T7531] erofs (device loop4): failed to decompress -29 in[58, 4038] out[1851] [ 114.966461][ T7531] erofs (device loop4): read error -117 @ 43 of nid 36 [ 114.977265][ T7531] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 114.977375][ T7531] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 114.977400][ T7531] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 114.977434][ T7531] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 114.977458][ T7531] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 114.977480][ T7531] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 114.977503][ T7531] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 114.977532][ T7531] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 114.977555][ T7531] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 114.977633][ T7531] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 114.977781][ T7531] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 114.977807][ T7531] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 114.977915][ T7531] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 114.977946][ T7531] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 114.978035][ T7531] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 114.978716][ T7531] syz.4.267: attempt to access beyond end of device [ 114.978716][ T7531] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 114.978889][ T7531] syz.4.267: attempt to access beyond end of device [ 114.978889][ T7531] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 114.978999][ T7531] syz.4.267: attempt to access beyond end of device [ 114.978999][ T7531] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 114.979243][ T7531] erofs (device loop4): failed to decompress -29 in[58, 4038] out[2639] [ 114.979369][ T7531] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 114.979395][ T7531] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 114.979417][ T7531] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 114.979454][ T7531] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 114.979505][ T7531] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 114.979602][ T7531] syz.4.267: attempt to access beyond end of device [ 114.979602][ T7531] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 114.980493][ T7531] erofs (device loop4): failed to decompress -29 in[58, 4038] out[3537] [ 115.230818][ T7533] loop2: detected capacity change from 0 to 40427 [ 115.234130][ T7533] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.234170][ T7533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.237686][ T7533] F2FS-fs (loop2): invalid crc value [ 115.272560][ T6095] Bluetooth: hci5: command 0x1003 tx timeout [ 115.272792][ T6528] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.385659][ T7533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.385730][ T7533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.402610][ T7548] loop1: detected capacity change from 0 to 128 [ 116.218157][ T7552] syz.2.269: attempt to access beyond end of device [ 116.218157][ T7552] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 116.726060][ T7557] loop4: detected capacity change from 0 to 4096 [ 116.735980][ T7557] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 116.860673][ T7557] ntfs3(loop4): ino=1a, mi_enum_attr [ 116.863148][ T7557] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 116.872568][ T7557] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 116.897955][ T7557] ntfs3(loop4): ino=1b, mi_enum_attr [ 116.900682][ T7557] ntfs3(loop4): ino=1b, mi_enum_attr [ 116.927536][ T6539] syz-executor: attempt to access beyond end of device [ 116.927536][ T6539] loop2: rw=2051, sector=77824, nr_sectors = 520 limit=40427 [ 116.929154][ T6539] F2FS-fs (loop2): Issue discard(9728, 9728, 65) failed, ret: -5 [ 116.937399][ T7557] ntfs3(loop4): ino=1e, mi_enum_attr [ 116.964322][ T7543] loop3: detected capacity change from 0 to 32768 [ 116.976553][ T7543] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.272 (7543) [ 116.997823][ T7543] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.997938][ T7543] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 116.997980][ T7543] BTRFS info (device loop3): using free-space-tree [ 118.584596][ T6529] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.891217][ T3888] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.022637][ T7605] loop0: detected capacity change from 0 to 40427 [ 120.032925][ T7605] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 120.032979][ T7605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.042402][ T7605] F2FS-fs (loop0): invalid crc value [ 120.127566][ T7605] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.127660][ T7605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.953517][ T6095] Bluetooth: hci5: command 0x1003 tx timeout [ 120.959539][ T6528] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.064901][ T7606] loop2: detected capacity change from 0 to 32768 [ 121.071892][ T7623] loop3: detected capacity change from 0 to 1024 [ 121.078517][ T7606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.286 (7606) [ 121.107968][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 121.217657][ T7606] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.221834][ T7606] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 121.224973][ T7606] BTRFS info (device loop2): using free-space-tree [ 121.919109][ T7654] loop4: detected capacity change from 0 to 256 [ 121.927110][ T7625] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 121.991258][ T7654] FAT-fs (loop4): Directory bread(block 64) failed [ 121.994408][ T7654] FAT-fs (loop4): Directory bread(block 65) failed [ 121.996685][ T7654] FAT-fs (loop4): Directory bread(block 66) failed [ 121.998973][ T7654] FAT-fs (loop4): Directory bread(block 67) failed [ 122.006290][ T7654] FAT-fs (loop4): Directory bread(block 68) failed [ 122.006383][ T7654] FAT-fs (loop4): Directory bread(block 69) failed [ 122.006448][ T7654] FAT-fs (loop4): Directory bread(block 70) failed [ 122.006491][ T7654] FAT-fs (loop4): Directory bread(block 71) failed [ 122.006552][ T7654] FAT-fs (loop4): Directory bread(block 72) failed [ 122.006591][ T7654] FAT-fs (loop4): Directory bread(block 73) failed [ 122.026340][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.029297][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.036345][ T6790] hfsplus: b-tree write err: -5, ino 4 [ 122.331076][ T6539] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.227016][ T7691] loop4: detected capacity change from 0 to 4096 [ 124.347961][ T7691] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 124.476043][ T7691] ntfs3(loop4): ino=1a, mi_enum_attr [ 124.476124][ T7691] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 124.480779][ T7691] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 125.553967][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.554305][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.386800][ T2405] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.386889][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.639008][ T7713] 9pnet_fd: Insufficient options for proto=fd [ 128.065071][ T7736] loop4: detected capacity change from 0 to 32768 [ 128.229001][ T7740] loop3: detected capacity change from 0 to 2048 [ 128.235757][ T7740] EXT4-fs: Ignoring removed bh option [ 128.523017][ T7736] find_entry called with index >= next_index [ 128.534899][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.572637][ T7737] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.574161][ T7737] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 128.574321][ T7737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.574321][ T7737] [ 128.574354][ T7737] EXT4-fs (loop3): Total free blocks count 0 [ 128.574382][ T7737] EXT4-fs (loop3): Free/Dirty block details [ 128.574447][ T7737] EXT4-fs (loop3): free_blocks=2415919104 [ 128.574486][ T7737] EXT4-fs (loop3): dirty_blocks=32 [ 128.574513][ T7737] EXT4-fs (loop3): Block reservation details [ 128.574540][ T7737] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 128.663061][ T7737] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 128.729759][ T7728] loop0: detected capacity change from 0 to 8192 [ 128.815288][ T7728] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.874773][ T7728] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 129.019984][ T7728] FAT-fs (loop0): Filesystem has been set read-only [ 129.020116][ T7728] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 129.020207][ T7728] FAT-fs (loop0): error, clusters badly computed (3 != 2) [ 129.020276][ T7728] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 130.422800][ T7755] loop3: detected capacity change from 0 to 32768 [ 130.685391][ T7758] loop4: detected capacity change from 0 to 32768 [ 130.697303][ T7758] XFS: noikeep mount option is deprecated. [ 130.703925][ T7758] XFS: ikeep mount option is deprecated. [ 130.952570][ T7758] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 131.185908][ T6530] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.732460][ T7788] loop1: detected capacity change from 0 to 65536 [ 133.790397][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.801411][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.854604][ T7788] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 133.925363][ T7788] XFS (loop1): Ending clean mount [ 134.496036][ T6525] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 134.768711][ T7795] loop0: detected capacity change from 0 to 262144 [ 134.857273][ T7813] tipc: Started in network mode [ 134.857416][ T7813] tipc: Node identity ac1414aa, cluster identity 4711 [ 134.858041][ T7813] tipc: Enabled bearer , priority 10 [ 134.863672][ T7795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.171332][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 135.976237][ T6540] tipc: Node number set to 2886997162 [ 136.313584][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 136.565153][ T24] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 136.566282][ T24] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 136.566317][ T24] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 136.893859][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.894171][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.915290][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 136.915373][ T31] audit: type=1326 audit(136.510:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.4.351" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8915ce28 code=0x0 [ 137.789708][ T7836] loop2: detected capacity change from 0 to 32768 [ 137.790774][ T7836] XFS: attr2 mount option is deprecated. [ 137.979464][ T7836] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.252655][ T7836] XFS (loop2): Ending clean mount [ 139.263348][ T7836] XFS (loop2): Quotacheck needed: Please wait. [ 139.302145][ T7836] XFS (loop2): Quotacheck: Done. [ 139.329903][ T7869] loop1: detected capacity change from 0 to 16 [ 139.340023][ T7869] erofs (device loop1): mounted with root inode @ nid 36. [ 139.354254][ T7869] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 139.355582][ T7869] erofs (device loop1): failed to decompress -29 in[58, 4038] out[1851] [ 139.355626][ T7869] erofs (device loop1): read error -117 @ 43 of nid 36 [ 139.356768][ T7869] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 139.356837][ T7869] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 139.356862][ T7869] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 139.356895][ T7869] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 139.356919][ T7869] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 139.356948][ T7869] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 139.356971][ T7869] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 139.357000][ T7869] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 139.357023][ T7869] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 139.357135][ T7869] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 139.357235][ T7869] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 139.357266][ T7869] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 139.357379][ T7869] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 139.357417][ T7869] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 139.357517][ T7869] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 139.357764][ T7869] syz.1.356: attempt to access beyond end of device [ 139.357764][ T7869] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 139.357921][ T7869] syz.1.356: attempt to access beyond end of device [ 139.357921][ T7869] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 139.358041][ T7869] syz.1.356: attempt to access beyond end of device [ 139.358041][ T7869] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 139.358338][ T7869] erofs (device loop1): failed to decompress -29 in[58, 4038] out[2639] [ 139.358495][ T7869] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 139.358523][ T7869] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 139.358545][ T7869] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 139.358568][ T7869] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 139.358616][ T7869] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 139.358724][ T7869] syz.1.356: attempt to access beyond end of device [ 139.358724][ T7869] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 139.358828][ T7869] erofs (device loop1): failed to decompress -29 in[58, 4038] out[3537] [ 139.395891][ T6539] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.658824][ T7875] loop0: detected capacity change from 0 to 8 [ 139.675369][ T7875] SQUASHFS error: lzo decompression failed, data probably corrupt [ 139.680794][ T7875] SQUASHFS error: Failed to read block 0x91: -5 [ 139.685067][ T7875] SQUASHFS error: Unable to read metadata cache entry [8f] [ 139.685130][ T7875] SQUASHFS error: Unable to read inode 0x11f [ 139.710024][ T7876] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 139.710175][ T7876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.724391][ T7876] vhci_hcd vhci_hcd.0: Device attached [ 139.782256][ T7878] vhci_hcd: connection closed [ 139.800847][ T93] vhci_hcd: stop threads [ 139.815249][ T93] vhci_hcd: release socket [ 139.815353][ T93] vhci_hcd: disconnect device [ 139.991533][ T7880] loop1: detected capacity change from 0 to 8192 [ 142.980671][ T7910] loop1: detected capacity change from 0 to 131072 [ 142.983519][ T7910] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 142.983556][ T7910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.984818][ T7910] F2FS-fs (loop1): invalid crc value [ 143.036774][ T7910] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.036843][ T7910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 143.093881][ T7910] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 144.284842][ T7946] loop0: detected capacity change from 0 to 128 [ 144.366845][ T7946] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.487303][ T7953] netlink: 'syz.2.380': attribute type 36 has an invalid length. [ 144.595064][ T31] audit: type=1326 audit(144.190:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.609799][ T31] audit: type=1326 audit(144.190:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.616557][ T31] audit: type=1326 audit(144.200:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.625822][ T31] audit: type=1326 audit(144.210:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.625900][ T31] audit: type=1326 audit(144.220:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.626162][ T31] audit: type=1326 audit(144.220:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.626270][ T31] audit: type=1326 audit(144.220:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 144.626389][ T31] audit: type=1326 audit(144.220:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 145.322091][ T31] audit: type=1326 audit(144.910:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8855b354 code=0x7ffc0000 [ 145.322612][ T31] audit: type=1326 audit(144.920:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8855ce28 code=0x7ffc0000 [ 145.350266][ T6526] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.706340][ T7969] veth0_vlan: entered allmulticast mode [ 145.920901][ T7969] veth0_vlan: left promiscuous mode [ 145.927352][ T7969] veth0_vlan: entered promiscuous mode [ 146.330853][ T7971] loop4: detected capacity change from 0 to 128 [ 146.398890][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 146.418522][ T7978] syz_tun: entered allmulticast mode [ 146.576106][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.576412][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.963537][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.963896][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.055898][ T7972] syz_tun: left allmulticast mode [ 147.773463][ T8007] loop4: detected capacity change from 0 to 32768 [ 147.774172][ T8007] XFS: ikeep mount option is deprecated. [ 147.857721][ T8007] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.949721][ T8007] XFS (loop4): Ending clean mount [ 147.954429][ T8007] XFS (loop4): Quotacheck needed: Please wait. [ 148.018881][ T8007] XFS (loop4): Quotacheck: Done. [ 148.265504][ T8018] loop1: detected capacity change from 0 to 4096 [ 148.545966][ T6530] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.703257][ T6531] IPVS: starting estimator thread 0... [ 152.986880][ T8069] loop4: detected capacity change from 0 to 4096 [ 153.056500][ T8069] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 153.075283][ T8067] IPVS: using max 32 ests per chain, 76800 per kthread [ 153.181753][ T8069] ntfs3(loop4): ino=1a, mi_enum_attr [ 153.181836][ T8069] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 153.186875][ T8069] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 153.320000][ T8073] loop2: detected capacity change from 0 to 16 [ 153.323421][ T8073] erofs (device loop2): mounted with root inode @ nid 36. [ 153.328794][ T8073] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 153.329390][ T8073] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851] [ 153.330559][ T8073] erofs (device loop2): read error -117 @ 43 of nid 36 [ 153.334536][ T8073] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 153.334615][ T8073] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 153.334639][ T8073] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 153.334675][ T8073] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 153.334699][ T8073] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 153.334721][ T8073] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 153.334756][ T8073] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 153.334787][ T8073] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 153.334810][ T8073] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 153.334891][ T8073] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 153.335001][ T8073] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 153.335027][ T8073] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 153.335138][ T8073] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 153.335169][ T8073] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 153.335259][ T8073] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 153.339008][ T8073] syz.2.411: attempt to access beyond end of device [ 153.339008][ T8073] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 153.339194][ T8073] syz.2.411: attempt to access beyond end of device [ 153.339194][ T8073] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 153.339340][ T8073] syz.2.411: attempt to access beyond end of device [ 153.339340][ T8073] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 153.341712][ T8073] erofs (device loop2): failed to decompress -29 in[58, 4038] out[2639] [ 153.341867][ T8073] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 153.341895][ T8073] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 153.341918][ T8073] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 153.341957][ T8073] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 153.342008][ T8073] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 153.342105][ T8073] syz.2.411: attempt to access beyond end of device [ 153.342105][ T8073] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 153.342192][ T8073] erofs (device loop2): failed to decompress -29 in[58, 4038] out[3537] [ 153.681456][ T8081] could not allocate digest TFM handle sha224-avx [ 154.701094][ T8098] loop4: detected capacity change from 0 to 1024 [ 155.921151][ T8104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.419'. [ 155.924064][ T8104] ksmbd: Unknown IPC event: 4, ignore. [ 156.498483][ T93] hfsplus: b-tree write err: -5, ino 4 [ 156.703488][ T8121] tipc: Started in network mode [ 156.703562][ T8121] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 156.703625][ T8121] tipc: Enabling of bearer rejected, failed to enable media [ 157.592482][ T8124] loop4: detected capacity change from 0 to 4096 [ 157.609448][ T8124] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 157.654533][ T8124] ntfs3(loop4): ino=1a, mi_enum_attr [ 157.654610][ T8124] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 157.658804][ T8124] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 158.165639][ T8145] loop1: detected capacity change from 0 to 32768 [ 158.174913][ T8145] find_entry called with index >= next_index [ 159.418088][ T8160] netlink: 'syz.2.433': attribute type 21 has an invalid length. [ 160.336485][ T8181] loop4: detected capacity change from 0 to 2048 [ 160.341702][ T8181] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.341757][ T8181] NILFS (loop4): mounting unchecked fs [ 160.772064][ T8182] loop1: detected capacity change from 0 to 4096 [ 160.815518][ T8182] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 160.973193][ T8182] ntfs3(loop1): ino=1a, mi_enum_attr [ 160.973271][ T8182] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 160.977154][ T8182] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 161.008505][ T8181] NILFS (loop4): recovery complete [ 161.009242][ T8186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.283776][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 163.161967][ T8224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.189667][ T8224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.200611][ T8224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.570586][ T8224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.598625][ T8224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.248812][ T8224] Bluetooth: hci2: command 0x0406 tx timeout [ 164.249915][ T8224] Bluetooth: hci4: command 0x0406 tx timeout [ 164.250565][ T8224] Bluetooth: hci1: command 0x0406 tx timeout [ 164.252026][ T8224] Bluetooth: hci3: command 0x0406 tx timeout [ 164.252767][ T8224] Bluetooth: hci0: command 0x1407 tx timeout [ 164.842602][ T8257] loop1: detected capacity change from 0 to 16 [ 164.878263][ T8257] erofs (device loop1): mounted with root inode @ nid 36. [ 164.913261][ T8257] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 164.913328][ T8257] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 164.913372][ T8257] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 164.913402][ T8257] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 164.914023][ T8257] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 164.914107][ T8257] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 164.914138][ T8257] erofs (device loop1): readahead error at folio 43 @ nid 36 [ 164.914167][ T8257] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 164.914196][ T8257] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 164.914231][ T8257] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 164.914260][ T8257] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 164.914287][ T8257] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 164.914316][ T8257] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 164.914350][ T8257] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 164.914379][ T8257] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 164.927845][ T8257] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 164.927992][ T8257] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 164.928040][ T8257] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 164.928167][ T8257] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 164.928209][ T8257] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 164.928309][ T8257] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 164.928569][ T8257] syz.1.457: attempt to access beyond end of device [ 164.928569][ T8257] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 164.928756][ T8257] syz.1.457: attempt to access beyond end of device [ 164.928756][ T8257] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 164.928915][ T8257] syz.1.457: attempt to access beyond end of device [ 164.928915][ T8257] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 164.929012][ T8257] syz.1.457: attempt to access beyond end of device [ 164.929012][ T8257] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 165.167466][ T8266] loop1: detected capacity change from 0 to 512 [ 165.187157][ T8266] EXT4-fs: Ignoring removed i_version option [ 165.189720][ T8266] EXT4-fs: Ignoring removed nobh option [ 165.197767][ T8266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.216928][ T8266] EXT4-fs (loop1): 1 truncate cleaned up [ 165.233590][ T8266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.236901][ T6095] Bluetooth: hci5: command tx timeout [ 166.695273][ T8219] chnl_net:caif_netlink_parms(): no params data found [ 166.783715][ T8284] loop4: detected capacity change from 0 to 256 [ 166.791525][ T8284] exfat: Deprecated parameter 'utf8' [ 166.805868][ T8284] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 167.094520][ T6525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.910895][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.910979][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.911151][ T8219] bridge_slave_0: entered allmulticast mode [ 167.919554][ T8219] bridge_slave_0: entered promiscuous mode [ 167.952582][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.954930][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.957500][ T8219] bridge_slave_1: entered allmulticast mode [ 167.967518][ T8219] bridge_slave_1: entered promiscuous mode [ 168.084516][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.248277][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.328837][ T6095] Bluetooth: hci5: command tx timeout [ 168.417284][ T8219] team0: Port device team_slave_0 added [ 168.430608][ T8219] team0: Port device team_slave_1 added [ 168.489520][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.492447][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.505912][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.515337][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.517769][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.527847][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.368197][ T8219] hsr_slave_0: entered promiscuous mode [ 170.368798][ T8219] hsr_slave_1: entered promiscuous mode [ 170.371352][ T8219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.371654][ T8219] Cannot create hsr debugfs directory [ 170.397064][ T6095] Bluetooth: hci5: command tx timeout [ 172.473887][ T6095] Bluetooth: hci5: command tx timeout [ 172.875222][ T8219] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.891121][ T8219] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.904598][ T8219] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.939646][ T8219] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.118585][ T8342] loop1: detected capacity change from 0 to 32768 [ 173.144902][ T8342] JBD2: Ignoring recovery information on journal [ 173.145871][ T8342] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 173.145907][ T8342] JBD2: bad block at offset 32 [ 173.153261][ T8342] (syz.1.480,8342,1):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75 [ 173.153343][ T8342] (syz.1.480,8342,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 173.153369][ T8342] (syz.1.480,8342,1):ocfs2_check_volume:2404 ERROR: status = -22 [ 173.153394][ T8342] (syz.1.480,8342,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 173.153419][ T8342] (syz.1.480,8342,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 173.163380][ T8342] (syz.1.480,8342,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 174.077640][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.138107][ T8219] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.220870][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.220956][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.248712][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.248822][ T6701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.283804][ T8365] tipc: Enabling of bearer rejected, failed to enable media [ 174.289605][ T8219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.470939][ T8219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.311954][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.445725][ T8401] pim6reg: entered allmulticast mode [ 175.454240][ T8401] pim6reg: left allmulticast mode [ 175.682175][ T8219] veth0_vlan: entered promiscuous mode [ 175.702140][ T8219] veth1_vlan: entered promiscuous mode [ 175.709607][ T8425] tipc: Started in network mode [ 175.709697][ T8425] tipc: Node identity 464ef65dc684, cluster identity 4711 [ 175.709898][ T8425] tipc: Enabled bearer , priority 0 [ 175.738096][ T8425] syzkaller0: entered promiscuous mode [ 175.738180][ T8425] syzkaller0: entered allmulticast mode [ 175.756944][ T8219] veth0_macvtap: entered promiscuous mode [ 175.818812][ T8219] veth1_macvtap: entered promiscuous mode [ 175.841360][ T8425] tipc: Resetting bearer [ 175.857654][ T8421] tipc: Resetting bearer [ 175.986090][ T8421] tipc: Disabling bearer [ 175.994068][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.999521][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.007686][ T8219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.010587][ T8219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.013589][ T8219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.016446][ T8219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.071235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.071316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.171677][ T8454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.511'. [ 176.197435][ T6701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.197504][ T6701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.359133][ T8462] syz.1.513 uses obsolete (PF_INET,SOCK_PACKET) [ 176.361832][ T8462] netlink: 'syz.1.513': attribute type 24 has an invalid length. [ 176.509401][ T8465] tipc: Enabled bearer , priority 0 [ 177.215372][ T8465] syzkaller0: entered promiscuous mode [ 177.217429][ T8465] syzkaller0: entered allmulticast mode [ 177.249721][ T26] IPVS: starting estimator thread 0... [ 177.342483][ T8468] IPVS: using max 34 ests per chain, 81600 per kthread [ 177.344090][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.515'. [ 177.344140][ T8476] netlink: 'syz.5.515': attribute type 7 has an invalid length. [ 177.344304][ T8476] netlink: 'syz.5.515': attribute type 8 has an invalid length. [ 177.344327][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.515'. [ 177.374452][ T8465] tipc: Resetting bearer [ 177.384180][ T8476] bridge0: entered promiscuous mode [ 177.385082][ T8476] batadv_slave_1: entered promiscuous mode [ 177.393260][ T8478] lo: entered allmulticast mode [ 177.395573][ T8478] tunl0: entered allmulticast mode [ 177.408191][ T8478] gre0: entered allmulticast mode [ 177.421911][ T8478] gretap0: entered allmulticast mode [ 177.428062][ T8478] erspan0: entered allmulticast mode [ 177.435138][ T8478] ip_vti0: entered allmulticast mode [ 177.437341][ T8478] ip6_vti0: entered allmulticast mode [ 177.439810][ T8478] sit0: entered allmulticast mode [ 177.456200][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.456537][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.468594][ T8478] ip6tnl0: entered allmulticast mode [ 177.472144][ T8478] ip6gre0: entered allmulticast mode [ 177.475665][ T8478] syz_tun: entered allmulticast mode [ 177.480245][ T8478] ip6gretap0: entered allmulticast mode [ 177.487052][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.488616][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.491443][ T8478] bridge0: entered allmulticast mode [ 177.494787][ T8478] vcan0: entered allmulticast mode [ 177.497423][ T8478] bond0: entered allmulticast mode [ 177.497515][ T8478] bond_slave_0: entered allmulticast mode [ 177.497545][ T8478] bond_slave_1: entered allmulticast mode [ 177.501974][ T8478] team0: entered allmulticast mode [ 177.502014][ T8478] team_slave_0: entered allmulticast mode [ 177.502038][ T8478] team_slave_1: entered allmulticast mode [ 177.505527][ T8478] batman_adv: batadv0: Interface deactivated: dummy0 [ 177.505978][ T8478] dummy0: entered allmulticast mode [ 177.517201][ T6540] tipc: Node number set to 2160784989 [ 177.540300][ T8478] nlmon0: entered allmulticast mode [ 177.544717][ T8478] caif0: entered allmulticast mode [ 177.545248][ T8478] batadv0: entered allmulticast mode [ 177.547956][ T8478] vxcan0: entered allmulticast mode [ 177.548961][ T8478] vxcan1: entered allmulticast mode [ 177.550034][ T8478] veth0: entered allmulticast mode [ 177.556876][ T8478] veth1: entered allmulticast mode [ 177.569314][ T8485] [ 177.570236][ T8485] ============================= [ 177.571586][ T8485] WARNING: suspicious RCU usage [ 177.573168][ T8485] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted [ 177.575046][ T8485] ----------------------------- [ 177.576457][ T8485] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 177.579001][ T8485] [ 177.579001][ T8485] other info that might help us debug this: [ 177.579001][ T8485] [ 177.581935][ T8485] [ 177.581935][ T8485] rcu_scheduler_active = 2, debug_locks = 1 [ 177.584702][ T8485] 1 lock held by syz.0.520/8485: [ 177.586121][ T8485] #0: ffff80008f869b60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x18/0x54 [ 177.589015][ T8485] [ 177.589015][ T8485] stack backtrace: [ 177.590650][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.0.520 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 177.593636][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.596460][ T8485] Call trace: [ 177.597304][ T8485] show_stack+0x2c/0x3c (C) [ 177.598572][ T8485] __dump_stack+0x30/0x40 [ 177.599845][ T8485] dump_stack_lvl+0xd8/0x12c [ 177.601178][ T8485] dump_stack+0x1c/0x28 [ 177.602424][ T8485] lockdep_rcu_suspicious+0x168/0x274 [ 177.603969][ T8485] task_cls_state+0x1d0/0x1f0 [ 177.605340][ T8485] bpf_get_cgroup_classid_curr+0x1c/0x6c [ 177.606980][ T8485] bpf_prog_cd2e46495e8fe8a5+0x4c/0x70 [ 177.608543][ T8485] bpf_prog_run_pin_on_cpu+0x70/0x1e8 [ 177.610032][ T8485] bpf_prog_test_run_syscall+0x2fc/0x4ac [ 177.611625][ T8485] bpf_prog_test_run+0x2b4/0x33c [ 177.613052][ T8485] __sys_bpf+0x4b0/0x614 [ 177.614305][ T8485] __arm64_sys_bpf+0x80/0x98 [ 177.615603][ T8485] invoke_syscall+0x98/0x2b8 [ 177.616903][ T8485] el0_svc_common+0x130/0x23c [ 177.618202][ T8485] do_el0_svc+0x48/0x58 [ 177.619373][ T8485] el0_svc+0x58/0x180 [ 177.620532][ T8485] el0t_64_sync_handler+0x84/0x12c [ 177.621959][ T8485] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.637383][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 177.734010][ T8478] wg0: entered allmulticast mode [ 177.842722][ T8478] wg1: entered allmulticast mode [ 177.922922][ T8478] wg2: entered allmulticast mode [ 177.924966][ T8478] veth0_to_bridge: entered allmulticast mode [ 177.928790][ T8478] veth1_to_bridge: entered allmulticast mode [ 177.932188][ T8478] veth0_to_bond: entered allmulticast mode [ 177.946289][ T8478] veth1_to_bond: entered allmulticast mode [ 177.966779][ T8478] veth0_to_team: entered allmulticast mode [ 177.982734][ T8478] veth1_to_team: entered allmulticast mode [ 177.987139][ T8478] veth0_to_batadv: entered allmulticast mode [ 177.994195][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.997239][ T8478] batadv_slave_0: entered allmulticast mode [ 178.001485][ T8478] veth1_to_batadv: entered allmulticast mode [ 178.005714][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.015846][ T8478] batadv_slave_1: entered allmulticast mode [ 178.017887][ T8478] xfrm0: entered allmulticast mode [ 178.019764][ T8478] veth0_to_hsr: entered allmulticast mode [ 178.021459][ T8478] hsr_slave_0: entered allmulticast mode [ 178.025156][ T8478] veth1_to_hsr: entered allmulticast mode [ 178.029059][ T8478] hsr_slave_1: entered allmulticast mode [ 178.054130][ T8478] hsr0: entered allmulticast mode [ 178.061917][ T8478] veth1_virt_wifi: entered allmulticast mode [ 178.068103][ T8478] veth0_virt_wifi: entered allmulticast mode [ 178.070173][ T8478] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 178.070693][ T8478] veth1_vlan: entered allmulticast mode [ 178.085422][ T8478] veth0_vlan: entered allmulticast mode [ 178.111760][ T8478] vlan0: entered allmulticast mode [ 178.111908][ T8478] vlan1: entered allmulticast mode [ 178.153320][ T8478] macvlan0: entered allmulticast mode [ 178.212616][ T8478] macvlan1: entered allmulticast mode [ 178.215882][ T8478] ipvlan0: entered allmulticast mode [ 178.220096][ T8478] ipvlan1: entered allmulticast mode [ 178.220775][ T8478] veth1_macvtap: entered allmulticast mode [ 178.223075][ T8478] veth0_macvtap: entered allmulticast mode [ 178.272779][ T8478] macvtap0: entered allmulticast mode [ 178.278294][ T8478] macsec0: entered allmulticast mode [ 178.313523][ T8478] geneve0: entered allmulticast mode [ 178.321163][ T8478] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.326059][ T8478] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.326094][ T8478] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.326123][ T8478] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.352956][ T8478] geneve1: entered allmulticast mode [ 178.358273][ T8478] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 178.368148][ T8478] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 178.373013][ T8478] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 178.383134][ T8478] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 178.478441][ T8478] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 178.585701][ T8478] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 178.590234][ T8478] syztnl1: entered allmulticast mode [ 178.594523][ T8464] tipc: Resetting bearer [ 178.662938][ T8464] tipc: Disabling bearer [ 179.167344][ T835] IPVS: stop unused estimator thread 0... [ 179.798366][ T835] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.884703][ T835] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.995144][ T835] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.084558][ T835] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.315970][ T835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.425341][ T835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.503956][ T835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.588916][ T835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.756724][ T835] bridge_slave_1: left allmulticast mode [ 180.756970][ T835] bridge_slave_1: left promiscuous mode [ 180.758730][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.778383][ T835] bridge_slave_0: left allmulticast mode [ 180.778454][ T835] bridge_slave_0: left promiscuous mode [ 180.778915][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.788785][ T835] bridge_slave_1: left allmulticast mode [ 180.788861][ T835] bridge_slave_1: left promiscuous mode [ 180.789250][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.799342][ T835] bridge_slave_0: left allmulticast mode [ 180.799411][ T835] bridge_slave_0: left promiscuous mode [ 180.799527][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.736239][ T835] bridge0 (unregistering): left promiscuous mode [ 182.488810][ T835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.525192][ T835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.565440][ T835] bond0 (unregistering): Released all slaves [ 184.068884][ T835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.105003][ T835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.154204][ T835] bond0 (unregistering): Released all slaves [ 185.315265][ T835] batadv_slave_1: left promiscuous mode [ 185.321202][ T835] hsr_slave_0: left promiscuous mode [ 185.323011][ T835] hsr_slave_1: left promiscuous mode [ 185.323471][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.323541][ T835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.324511][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.324554][ T835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.331112][ T835] hsr_slave_0: left promiscuous mode [ 185.333376][ T835] hsr_slave_1: left promiscuous mode [ 185.333806][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.333864][ T835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.338265][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.338311][ T835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.366547][ T835] veth1_macvtap: left promiscuous mode [ 185.366800][ T835] veth0_macvtap: left promiscuous mode [ 185.366910][ T835] veth1_vlan: left promiscuous mode [ 185.368223][ T835] veth0_vlan: left promiscuous mode [ 185.374070][ T835] veth1_macvtap: left promiscuous mode [ 185.374176][ T835] veth0_macvtap: left promiscuous mode [ 185.374274][ T835] veth1_vlan: left promiscuous mode [ 185.374346][ T835] veth0_vlan: left promiscuous mode [ 187.440515][ T835] team0 (unregistering): Port device team_slave_1 removed