last executing test programs: 6m9.437707867s ago: executing program 2 (id=9): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 6m8.45823171s ago: executing program 2 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x7e8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@loopback, r2}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex=r2, 0xffffffffffffffff, 0x37, 0x0, r0, @void, @value=r0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m8.119826244s ago: executing program 2 (id=17): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6m6.12702316s ago: executing program 2 (id=18): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x2000000000000178, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto(0xffffffffffffffff, &(0x7f00000006c0)="8b80985ec4058dd7d4a5dba00490f80d7406e1ae9726234ecaf2ec68b17e52da3ec8cff8e4f6648e8c832612c5dec41ad97eb53044b2476b509dd30bfe322a81df55423ff349fca326845ad0036edbdf7afde0985ecb8da40f135797cd0e1373edef19e9f9bab17d8bd5ed7a640cc196879ea6dad5287191c3fd6dff83865281f7fb32c6b989d27dfc2ff43719f75c13895f052cc66f3026e01df42a64bec292e68fa0e9414ec7d925", 0xa9, 0x50, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r3, 0x0, 0x2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6m5.249417861s ago: executing program 2 (id=22): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 6m3.364275785s ago: executing program 1 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000002c8518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) umount2(0x0, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m2.344022408s ago: executing program 2 (id=29): socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 6m2.113364901s ago: executing program 32 (id=29): socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 6m1.043108245s ago: executing program 1 (id=34): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x48001051, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)) readv(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) 5m59.776428111s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 5m58.557204507s ago: executing program 1 (id=40): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 5m58.187205692s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 5m55.931595331s ago: executing program 1 (id=46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x578410eb) sendfile(r3, r0, 0x0, 0x100000000) 5m55.672408114s ago: executing program 33 (id=46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x578410eb) sendfile(r3, r0, 0x0, 0x100000000) 16.496810758s ago: executing program 3 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) io_uring_setup(0x35fc, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x80000000, 0x161}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) 14.251134947s ago: executing program 3 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)=ANY=[@ANYBLOB="44000000090601020000000000000000070010000900020073797a3100000000450029eae6f700001c0007801800018014000240fc0100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 12.898242764s ago: executing program 5 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x854) socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)) 12.893368274s ago: executing program 3 (id=963): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 10.985023419s ago: executing program 5 (id=966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 10.88781555s ago: executing program 4 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 8.928165305s ago: executing program 3 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1e, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioprio_set$pid(0x2, 0x0, 0x6000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7961000000000000e5007e"], 0x14}}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") 7.363067546s ago: executing program 0 (id=971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x80084504, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='pim6reg\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 7.362807246s ago: executing program 5 (id=972): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x20000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 7.362358835s ago: executing program 6 (id=973): socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 7.268503656s ago: executing program 0 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)=ANY=[@ANYBLOB="44000000090601020000000000000000070010000900020073797a3100000000450029eae6f700001c0007801800018014000240fc0100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 6.489631217s ago: executing program 6 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) close(r3) 5.217220453s ago: executing program 0 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.209312133s ago: executing program 4 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004850) close_range(r3, 0xffffffffffffffff, 0x0) 4.955848097s ago: executing program 3 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000500)="fac7264d505ef1", 0x7, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 4.954992057s ago: executing program 5 (id=978): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000140)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x25}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@gid}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000"], 0x8840) 4.345724984s ago: executing program 6 (id=979): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4b7f, &(0x7f00000005c0)={0x0, 0x9f00, 0x800, 0x0, 0x2ff}, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xffffffff, 0x204}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.155124427s ago: executing program 0 (id=980): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) 4.037170038s ago: executing program 4 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x800) 2.578609987s ago: executing program 5 (id=982): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.463705418s ago: executing program 6 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'b'}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 2.463161378s ago: executing program 0 (id=984): socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x10000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.36305347s ago: executing program 4 (id=985): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x80084504, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='pim6reg\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 1.413337972s ago: executing program 5 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)=ANY=[@ANYBLOB="44000000090601020000000000000000070010000900020073797a3100000000450029eae6f700001c0007801800018014000240fc0100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 1.411789982s ago: executing program 0 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x11c000, 0x800}, 0x1c) 1.397507862s ago: executing program 6 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getdents64(0xffffffffffffffff, 0x0, 0x3f00) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r4, {0x8}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 199.636958ms ago: executing program 4 (id=989): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r1 = syz_open_dev$media(0x0, 0x4, 0x62602) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) capset(0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 37.86099ms ago: executing program 6 (id=990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1e, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioprio_set$pid(0x2, 0x0, 0x6000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7961000000000000e5007e"], 0x14}}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY772R9N533sybZ80gBbBvjad/chGHIwbS5GhWnkRWEP0RJ+v5h+trhXRJYmPjle+SWtmD9bVCNL0mdTDL/DEiPnsj4khue72VldX5mVKpuJTlJ6sLFycrK6tHLyzMzBXniovHp6anj534x4njexfrD1+uHrr79v//+tHJn17/w623Pk/iZBzK1jXHsVfGYzzbJgPpJtzkf3tdWY8lvW4AzyQ9NPvqR3kcjtHo26En/9PVlgEAnXIlIjYAgH0mcf4HgH2m8TnAg/W1QmOJ+vWcqz39YKJL7v03Iobr8Teub9bX9Nev2X01XLsOOvIgqV0jaUgiYmwP6h+PiOu3z9xMl+jQdUiAVq5ei4hzY+Nbx/90hNt6z8LT+tsunjO+JW/8g+75JJ3//HP7/C8ilx3/w7W/W+c/Qy2O3Wfx5OM/d2dTdmAPKm2Szv/+3XRv28Om+DNjfVnuN7U530By/kKpmI5tv42IiRgYSvNTO9Qxcf/n++3WNc//vn/ntQ/S+tPHx8/I3ekf2vya2ZnqzPPE3OzetYg/9beKP3nU/0mb+e/pXdbx0r/efL/dujT+NN7Gsj3+ztq4EfGXlv3/+D6oZMf7Eydru8NkY6do4eOv3xtpV39z/1+/nda0Vmj8L9ANaf+P7Bz/WNJ8v2bl6ev44sbop+3WbY7/zM20/s3xt97/B5NXa+nBrOzyTLW6NBUxmLy8vfzY49c28o3np/FP/Ln18b/T/p8OQ+ey9MYTbn7sv/vth88ef2el8c+m/Z9kQTyx/58+cevhfF+7+nfX/9O11ERWsn3869/2vrtt4HNtPAAAAAAAAAAAAAAAAAAAAAAAAADYpVxEHIokl3+UzuXy+fpveP8+RnKlcqV65Hx5eXE2ar+VPRYDucZXXY42fR/qVPZ9+I38sS35v0fE7yLi3aEDtXy+UC7N9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgcbPP7/6lvhnrdOgCgY4Z73QAAoOuc/wFg/2lz/h9sXXygo20BALqjdv5P+nvdDACgi3z+DwD7j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXb61Kl02fhxfa2Q5mcvrSzPly8dnS1W5vMLy4V8obx0MT9XLs+VivlCeaHtG12tP5TK5YvTsbh8ebJarFQnKyurZxfKy4vVsxcWZuaKZ4sDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHavsrI6P1MqFZckdk5ceSGacS3rtl5vDYkXIjEUEZ2qonmUONCbwQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgV+CXAAAA///Oeh+5") 1.45693ms ago: executing program 4 (id=991): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x20000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 0s ago: executing program 3 (id=992): socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 47.693940][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.696192][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.699307][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.706372][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.714804][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.720289][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.722786][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.724710][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.731857][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.734435][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.740164][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.741966][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.744554][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.754055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.756317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.765424][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.774122][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.778717][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.780646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.783318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.785616][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.787580][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.808621][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.814164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.818741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.821094][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.822842][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.824874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.830775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.843896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.846208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.849270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.864699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.868375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.893106][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.895549][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.898313][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.900072][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.902141][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.905044][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.908936][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.911412][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.922316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.924359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.926261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.935865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.947210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.949688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.953513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.961271][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.964518][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.971479][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.973913][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.977499][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.980752][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.988708][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.000025][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.002651][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.005194][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.018525][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.021018][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.026277][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.038764][ T4296] device veth0_vlan entered promiscuous mode [ 48.046435][ T4296] device veth1_vlan entered promiscuous mode [ 48.059458][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.061862][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.064299][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.078838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.081245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.088704][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.101858][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.104204][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.106173][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.121701][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.123706][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.126224][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.133008][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.135534][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.143527][ T4302] device veth0_vlan entered promiscuous mode [ 48.164715][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.167145][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.184204][ T4296] device veth0_macvtap entered promiscuous mode [ 48.193098][ T4302] device veth1_vlan entered promiscuous mode [ 48.201356][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.203647][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.206115][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.215081][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.225502][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.227721][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.238802][ T4296] device veth1_macvtap entered promiscuous mode [ 48.245491][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.279956][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.283126][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.285460][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.288015][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.302258][ T4302] device veth0_macvtap entered promiscuous mode [ 48.305706][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.309299][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.311822][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.314304][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.317141][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.319301][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.321470][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.325155][ T4300] device veth0_vlan entered promiscuous mode [ 48.329326][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.338178][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.340797][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.343342][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.345782][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.356890][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 48.361918][ T4302] device veth1_macvtap entered promiscuous mode [ 48.370864][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.373484][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.375950][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.379917][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.383213][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.385531][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.390324][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.395596][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.399519][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.403356][ T4304] device veth0_vlan entered promiscuous mode [ 48.418808][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.421049][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.423299][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.425344][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.435553][ T4300] device veth1_vlan entered promiscuous mode [ 48.437698][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 48.446316][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.454942][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.459436][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.466314][ T4304] device veth1_vlan entered promiscuous mode [ 48.473425][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.475902][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.481844][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.484134][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.488604][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.504417][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.507415][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.511319][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.516738][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 48.518249][ T4312] Bluetooth: hci4: command 0x041b tx timeout [ 48.519799][ T4312] Bluetooth: hci2: command 0x041b tx timeout [ 48.522476][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.524828][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.529168][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.552732][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.554972][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.567485][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.569741][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.609357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.611984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.625143][ T4300] device veth0_macvtap entered promiscuous mode [ 48.634279][ T4304] device veth0_macvtap entered promiscuous mode [ 48.636632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.638977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.641429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.644476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.657843][ T4304] device veth1_macvtap entered promiscuous mode [ 48.669267][ T4300] device veth1_macvtap entered promiscuous mode [ 48.691089][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.693142][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.699835][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.702310][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.704763][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.716870][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.719487][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.721934][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.724489][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.728612][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.743451][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.746006][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.748869][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.751367][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.777153][ T4305] device veth0_vlan entered promiscuous mode [ 48.780053][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.782656][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.784889][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.788957][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.792572][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.802579][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.805052][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.808032][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.810566][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.813141][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.815495][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.822690][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.825384][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.828347][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.830914][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.833296][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.835687][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.840187][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.847073][ T4304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.849323][ T4304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.851383][ T4304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.853416][ T4304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858408][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.861403][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.864879][ T4305] device veth1_vlan entered promiscuous mode [ 48.873738][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.875790][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.892743][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.894758][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.897729][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.900039][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.902283][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.905294][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.910349][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.912808][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.915179][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.921861][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.924297][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.927562][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.931314][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.936653][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.939220][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.954290][ T4300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.956489][ T4300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.959403][ T4300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.961525][ T4300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.981875][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.984615][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.989971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.038856][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.041734][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.091816][ T4305] device veth0_macvtap entered promiscuous mode [ 49.125449][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129852][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.133327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.135916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.141204][ T4305] device veth1_macvtap entered promiscuous mode [ 49.206426][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.214011][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.230890][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.230951][ T4384] loop0: detected capacity change from 0 to 512 [ 49.233397][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.233435][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.233448][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.242879][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.246298][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.257682][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.269861][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.271741][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.284655][ T4384] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.1: iget: bad i_size value: -1 [ 49.300952][ T4384] EXT4-fs (loop0): get root inode failed [ 49.302419][ T4384] EXT4-fs (loop0): mount failed [ 49.303815][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.313361][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.321373][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.341755][ T127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.360849][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.362953][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.368003][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.370622][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.372877][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.386478][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.394104][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.403503][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.405970][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.416448][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.422054][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.424145][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.443221][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.445958][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.472269][ T4305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.474535][ T4305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.487515][ T4305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.501450][ T4305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.512918][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.514890][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.525187][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.436659][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 50.516771][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 50.816772][ T4299] Bluetooth: hci4: command 0x040f tx timeout [ 50.818804][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 51.119074][ T4312] Bluetooth: hci2: command 0x040f tx timeout [ 51.868397][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.870950][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.947488][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.984523][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.986478][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.996026][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.274220][ T4417] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 52.276337][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 52.285200][ T4417] batman_adv: batadv0: Adding interface: wlan0 [ 52.286984][ T4417] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.293021][ T4417] batman_adv: batadv0: Interface activated: wlan0 [ 52.617053][ T4420] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 52.654385][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 52.674220][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 52.836617][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 52.838420][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 53.196618][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 54.967793][ T4441] loop0: detected capacity change from 0 to 64 [ 55.319983][ T4489] loop2: detected capacity change from 0 to 1024 [ 55.595617][ T4502] loop4: detected capacity change from 0 to 4096 [ 55.635990][ T4502] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 55.670647][ T4441] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 55.681219][ T4489] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 56.095227][ T4304] hfsplus: bad catalog entry type [ 56.143284][ T4304] hfsplus: bad catalog entry type [ 59.743657][ T4567] Zero length message leads to an empty skb [ 60.217857][ T4297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.226798][ T4297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.229321][ T4297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.234259][ T4297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.236736][ T4297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.239239][ T4297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.249770][ T4509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.261729][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 61.620763][ T4509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.765773][ T4299] Bluetooth: hci3: command 0x0409 tx timeout [ 62.907842][ T4603] loop1: detected capacity change from 0 to 256 [ 62.909891][ T4603] ======================================================= [ 62.909891][ T4603] WARNING: The mand mount option has been deprecated and [ 62.909891][ T4603] and is ignored by this kernel. Remove the mand [ 62.909891][ T4603] option from the mount to silence this warning. [ 62.909891][ T4603] ======================================================= [ 62.974737][ T4603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 63.097721][ T4509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.279977][ T4509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.270376][ T4574] chnl_net:caif_netlink_parms(): no params data found [ 64.835272][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.837322][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 64.842468][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.856273][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.345291][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.407591][ T4574] device bridge_slave_0 entered promiscuous mode [ 65.424981][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.426843][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.458454][ T4574] device bridge_slave_1 entered promiscuous mode [ 65.652778][ T4574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.632360][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 66.649859][ T4574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.729496][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.732921][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.735428][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.755484][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.758081][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.760181][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.788323][ T4646] device veth3 entered promiscuous mode [ 66.884987][ T4574] team0: Port device team_slave_0 added [ 66.952798][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 66.987133][ T4574] team0: Port device team_slave_1 added [ 67.912940][ T4574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.914742][ T4574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.938344][ T4574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.997727][ T4574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.999382][ T4574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.015982][ T4574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.036973][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 69.038940][ T4312] Bluetooth: hci3: command 0x0419 tx timeout [ 69.043632][ T4574] device hsr_slave_0 entered promiscuous mode [ 69.081704][ T4574] device hsr_slave_1 entered promiscuous mode [ 69.149649][ T4574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.151734][ T4574] Cannot create hsr debugfs directory [ 70.703929][ T24] cfg80211: failed to load regulatory.db [ 71.139471][ T4704] loop0: detected capacity change from 0 to 16 [ 71.155649][ T4704] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 71.839249][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 73.431078][ T4723] loop0: detected capacity change from 0 to 128 [ 73.521472][ T4723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.553858][ T4726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 73.877777][ T4312] Bluetooth: hci0: command 0x040f tx timeout [ 74.171064][ T4723] process 'syz.0.66' launched '/dev/fd/3' with NULL argv: empty string added [ 74.507728][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 75.541925][ T4752] loop0: detected capacity change from 0 to 2048 [ 75.562143][ T4752] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 75.574538][ T4752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.647579][ T4752] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 75.650522][ T4650] chnl_net:caif_netlink_parms(): no params data found [ 75.956762][ T4312] Bluetooth: hci0: command 0x0419 tx timeout [ 76.992924][ T4774] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 77.106171][ T4781] loop0: detected capacity change from 0 to 256 [ 77.117278][ T4781] FAT-fs (loop0): Unrecognized mount option "shortname=[Ƚ[(g$win95" or missing value [ 77.296122][ T4786] mmap: syz.0.79 (4786) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.344303][ T4786] loop0: detected capacity change from 0 to 256 [ 77.356911][ T4786] exfat: Deprecated parameter 'namecase' [ 77.371408][ T4786] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 77.543915][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.551851][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.564339][ T4650] device bridge_slave_0 entered promiscuous mode [ 77.575451][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.584072][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.592594][ T4650] device bridge_slave_1 entered promiscuous mode [ 77.875518][ T4795] loop0: detected capacity change from 0 to 8 [ 78.498833][ T4650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.616606][ T4509] device hsr_slave_0 left promiscuous mode [ 78.737377][ T4509] device hsr_slave_1 left promiscuous mode [ 78.952530][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.215784][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.746936][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.749072][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.779543][ T4509] device bridge_slave_1 left promiscuous mode [ 79.782294][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.822392][ T4810] loop0: detected capacity change from 0 to 512 [ 79.847607][ T4509] device bridge_slave_0 left promiscuous mode [ 79.849329][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.881589][ T4810] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 79.883861][ T4810] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 79.906885][ T4803] loop3: detected capacity change from 0 to 32768 [ 80.018990][ T112] kernel write not supported for file bpf-prog (pid: 112 comm: kworker/1:2) [ 80.107145][ T4509] device veth1_macvtap left promiscuous mode [ 80.109549][ T4509] device veth0_macvtap left promiscuous mode [ 80.111454][ T4509] device veth1_vlan left promiscuous mode [ 80.232157][ T4509] device veth0_vlan left promiscuous mode [ 83.525554][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 83.699040][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 83.867425][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.088337][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.418710][ T4509] bond0 (unregistering): Released all slaves [ 86.674452][ T4650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.687518][ T4797] device ip6tnl1 entered promiscuous mode [ 86.734921][ T4574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.810020][ T4650] team0: Port device team_slave_0 added [ 86.814218][ T4650] team0: Port device team_slave_1 added [ 87.079653][ T4574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.859615][ T4650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.861479][ T4650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.875839][ T4650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.901000][ T4650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.907207][ T4650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.920567][ T4650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.940084][ T4574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.010274][ T4574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.043313][ T4858] loop0: detected capacity change from 0 to 16 [ 88.085143][ T4858] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.094155][ T4858] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 88.120084][ T4858] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 88.122624][ T4858] syz.0.92: attempt to access beyond end of device [ 88.122624][ T4858] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 88.126022][ T4858] syz.0.92: attempt to access beyond end of device [ 88.126022][ T4858] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 88.165113][ T4858] syz.0.92: attempt to access beyond end of device [ 88.165113][ T4858] loop0: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 88.208899][ T4650] device hsr_slave_0 entered promiscuous mode [ 88.266737][ T4650] device hsr_slave_1 entered promiscuous mode [ 88.509359][ T4650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.557473][ T4650] Cannot create hsr debugfs directory [ 89.487987][ T4574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.049185][ T4574] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.206334][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.209740][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.212145][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.217164][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.226725][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.228482][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.230691][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.233182][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.235459][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.237409][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.241297][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.246294][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.257481][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.269197][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.271862][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.276468][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.340056][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.342790][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.381271][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.383928][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.590288][ T4574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.597882][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.649650][ T4509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.659021][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.661715][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.671645][ T4650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.938907][ T4509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.944834][ T4650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.891410][ T4918] sched: RT throttling activated [ 93.190289][ T4650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.355329][ T4509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.509196][ T4509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.564653][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 94.595553][ T4941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.117'. [ 94.924992][ T4650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.595252][ T4650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.689993][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.696473][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.713306][ T4650] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.550889][ T4299] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 98.556261][ T4299] Bluetooth: hci4: Injecting HCI hardware error event [ 98.558911][ T4299] Bluetooth: hci4: hardware error 0x00 [ 98.577970][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.580514][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.582890][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.584735][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.592821][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.597648][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.610304][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.612736][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.614547][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.669440][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.672230][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.697531][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.701170][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.703794][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.713790][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.716356][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.729192][ T4973] overlayfs: failed to clone upperpath [ 98.732797][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.735418][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.736297][ T4976] loop3: detected capacity change from 0 to 128 [ 98.787625][ T4976] syz.3.125: attempt to access beyond end of device [ 98.787625][ T4976] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 98.902004][ T4650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.905784][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.946720][ T4574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.966983][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.969706][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.972118][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.974099][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.496117][ T5007] device batadv0 entered promiscuous mode [ 99.507253][ T5007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.511361][ T5007] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 99.681890][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.684006][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.702922][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.707201][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.519570][ T4650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.532177][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 100.858777][ T4299] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 101.663110][ T4574] device veth0_vlan entered promiscuous mode [ 101.668142][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.670787][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.683751][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.707271][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.961307][ T4574] device veth1_vlan entered promiscuous mode [ 103.018718][ T4574] device veth0_macvtap entered promiscuous mode [ 103.057004][ T4574] device veth1_macvtap entered promiscuous mode [ 103.062624][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.065075][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.075615][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.093898][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.326868][ T5069] netlink: 165 bytes leftover after parsing attributes in process `syz.0.140'. [ 103.745638][ T5072] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 104.351342][ T5072] device bond1 entered promiscuous mode [ 104.374908][ T5075] bond1: (slave ip6gretap1): making interface the new active one [ 104.380166][ T5075] device ip6gretap1 entered promiscuous mode [ 104.388200][ T5075] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.400769][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.403410][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.405835][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.426145][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.434506][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.438548][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.440971][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.443534][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.454782][ T4574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.457853][ T5076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 104.460391][ T5076] device bond1 left promiscuous mode [ 104.461814][ T5076] device ip6gretap1 left promiscuous mode [ 104.465571][ T5076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.620432][ T4509] device hsr_slave_0 left promiscuous mode [ 104.660782][ T4509] device hsr_slave_1 left promiscuous mode [ 104.906712][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.910310][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.952059][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.013111][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.198849][ T4509] device bridge_slave_1 left promiscuous mode [ 105.260154][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.487850][ T4509] device bridge_slave_0 left promiscuous mode [ 105.489759][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.636947][ T4509] device veth1_macvtap left promiscuous mode [ 105.638583][ T4509] device veth0_macvtap left promiscuous mode [ 105.640142][ T4509] device veth1_vlan left promiscuous mode [ 105.641768][ T4509] device veth0_vlan left promiscuous mode [ 107.420048][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 107.598875][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 107.784287][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.998168][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.432631][ T4509] bond0 (unregistering): Released all slaves [ 110.671444][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.674155][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.689309][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.691962][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.694420][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.699620][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.702241][ T4574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.704712][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.709435][ T4574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.715385][ T5099] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 110.722530][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.724530][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.736146][ T5100] device bridge_slave_0 left promiscuous mode [ 110.740289][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.778801][ T5100] device bridge_slave_1 left promiscuous mode [ 110.780437][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.819204][ T5100] bond0: (slave bond_slave_0): Releasing backup interface [ 110.874098][ T5100] bond0: (slave bond_slave_1): Releasing backup interface [ 110.936853][ T5100] team0: Port device team_slave_0 removed [ 110.952803][ T5100] team0: Port device team_slave_1 removed [ 110.954801][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.956902][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.960077][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.961955][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.976413][ T5101] device veth3 entered promiscuous mode [ 110.992734][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.008308][ T5102] team0: Port device bond0 added [ 111.016017][ T5103] device veth3 entered promiscuous mode [ 111.030114][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.032884][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.035844][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.045046][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.066754][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.069281][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.071879][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.074171][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.078524][ T4650] device veth0_vlan entered promiscuous mode [ 111.085062][ T4574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.088287][ T4574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.090636][ T4574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.092763][ T4574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.260692][ T4650] device veth1_vlan entered promiscuous mode [ 111.263990][ T5120] netlink: 100 bytes leftover after parsing attributes in process `syz.3.154'. [ 112.177005][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.281669][ T4650] device veth0_macvtap entered promiscuous mode [ 112.325216][ T4574] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 112.347661][ T4574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.350435][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.353092][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.355661][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.371670][ T4650] device veth1_macvtap entered promiscuous mode [ 112.545040][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.552944][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.557183][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.573661][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.505378][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.518752][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.522480][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.526405][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.542233][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.544917][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.562123][ T4650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.595649][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.604623][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.387383][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.389577][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.393275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.492441][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.494977][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.504034][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.518538][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.521350][ T4650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.541371][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.560161][ T4650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.628194][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.631115][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.815956][ T4650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.962334][ T4650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.447051][ T4650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.449263][ T4650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.710790][ T4650] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 115.713383][ T4650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.864313][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.875042][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.317576][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.594698][ T5182] loop5: detected capacity change from 0 to 16 [ 116.643480][ T5182] erofs: (device loop5): mounted with root inode @ nid 36. [ 117.074560][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.145259][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.233825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.210113][ T5203] loop6: detected capacity change from 0 to 1024 [ 118.222336][ T5203] EXT4-fs: Ignoring removed nobh option [ 118.226733][ T5203] EXT4-fs: Ignoring removed bh option [ 118.236228][ T5203] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.429878][ T5203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 118.503730][ T5225] netlink: 96 bytes leftover after parsing attributes in process `syz.4.176'. [ 119.354328][ T5232] netlink: 104 bytes leftover after parsing attributes in process `syz.4.178'. [ 119.483393][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 124.297223][ T5371] loop3: detected capacity change from 0 to 512 [ 124.359145][ T5371] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 124.394168][ T5371] EXT4-fs (loop3): 1 truncate cleaned up [ 124.395711][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.478262][ T5398] loop5: detected capacity change from 0 to 512 [ 126.522581][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.524244][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.633732][ T5398] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 126.636075][ T5398] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 126.679919][ T5398] EXT4-fs error (device loop5): __ext4_iget:5076: inode #13: block 4653056: comm syz.5.198: invalid block [ 126.701238][ T5398] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.198: couldn't read orphan inode 13 (err -117) [ 126.717527][ T5398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 126.874965][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 127.076714][ T5398] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 129.588688][ T4574] EXT4-fs (loop5): unmounting filesystem. [ 131.047106][ T5518] binder: 5516:5518 tried to acquire reference to desc 0, got 1 instead [ 131.049807][ T5520] binder: 5519:5520 tried to acquire reference to desc 0, got 1 instead [ 131.057960][ T5518] binder: 5516:5518 got transaction to context manager from process owning it [ 131.060285][ T5518] binder: 5516:5518 transaction async to 5516:0 failed 11/29201/-22, size 0-0 line 3043 [ 131.073211][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 131.097140][ T5518] binder: 5516:5518 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.100358][ T5518] binder: 5518 RLIMIT_NICE not set [ 131.101567][ T5518] binder: 5518 RLIMIT_NICE not set [ 131.170162][ T112] binder: undelivered transaction 9, process died. [ 131.172953][ T5518] binder: 5518 RLIMIT_NICE not set [ 131.174501][ T5518] binder_alloc: 5516: binder_alloc_buf, no vma [ 131.176131][ T5518] binder: cannot allocate buffer: vma cleared, target dead or dying [ 131.176165][ T5518] binder: 5516:5518 transaction reply to 5516:5518 failed 12/29189/-3, size 0-0 line 3239 [ 131.180690][ T5518] binder: send failed reply for transaction 10 to 5516:5518 [ 131.184077][ T112] binder: undelivered TRANSACTION_COMPLETE [ 131.185541][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.187878][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.202722][ T112] binder: undelivered TRANSACTION_ERROR: 29190 [ 132.367584][ T5548] MPTCP: kernel_bind error, err=-98 [ 132.811994][ T5551] syz.4.222 sent an empty control message without MSG_MORE. [ 132.862029][ T5556] loop3: detected capacity change from 0 to 128 [ 132.938978][ T5556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.171839][ T5567] netlink: 'syz.4.224': attribute type 5 has an invalid length. [ 133.241175][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 133.374846][ T5578] binder: 5576:5578 tried to acquire reference to desc 0, got 1 instead [ 133.394687][ T5578] binder: 5576:5578 ioctl c0306201 20000700 returned -14 [ 134.689223][ T5599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 134.695031][ T5594] vcan0: tx drop: invalid da for name 0x0008000000000000 [ 134.696865][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 139.227388][ T5651] netlink: 'syz.6.249': attribute type 1 has an invalid length. [ 139.236390][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 139.257424][ T5651] device ip6erspan0 entered promiscuous mode [ 139.313815][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.249'. [ 141.055420][ T5672] loop3: detected capacity change from 0 to 40427 [ 141.479214][ T5672] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.626047][ T5672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.816402][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 146.026367][ T5711] capability: warning: `syz.0.266' uses deprecated v2 capabilities in a way that may be insecure [ 146.053287][ T5709] binder: 5704:5709 tried to acquire reference to desc 0, got 1 instead [ 146.085146][ T5709] binder: 5704:5709 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 146.096245][ T5709] binder: 5709 RLIMIT_NICE not set [ 146.136610][ T24] binder_debug: 2 callbacks suppressed [ 146.136623][ T24] binder: undelivered TRANSACTION_COMPLETE [ 146.527615][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 147.284004][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.6.272'. [ 147.310668][ T5735] tipc: Started in network mode [ 147.311988][ T5735] tipc: Node identity 7, cluster identity 5 [ 147.313488][ T5735] tipc: Node number set to 7 [ 148.224775][ T5743] loop3: detected capacity change from 0 to 128 [ 148.392564][ T5750] loop5: detected capacity change from 0 to 1024 [ 148.418980][ T5750] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 148.420961][ T5750] hfsplus: failed to load root directory [ 148.446196][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 148.469556][ T4299] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 148.472615][ T4299] CPU: 1 PID: 4299 Comm: kworker/u5:2 Not tainted 6.1.140-syzkaller #0 [ 148.474545][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.477013][ T4299] Workqueue: hci3 hci_rx_work [ 148.478173][ T4299] Call trace: [ 148.478999][ T4299] dump_backtrace+0x1c8/0x1f4 [ 148.480207][ T4299] show_stack+0x2c/0x3c [ 148.481376][ T4299] __dump_stack+0x30/0x40 [ 148.482470][ T4299] dump_stack_lvl+0xf8/0x160 [ 148.483598][ T4299] dump_stack+0x1c/0x5c [ 148.484628][ T4299] sysfs_create_dir_ns+0x22c/0x24c [ 148.485809][ T4299] kobject_add_internal+0x5a8/0xb30 [ 148.487054][ T4299] kobject_add+0x134/0x1f8 [ 148.488146][ T4299] device_add+0x3f0/0xf94 [ 148.489226][ T4299] hci_conn_add_sysfs+0xbc/0x1cc [ 148.490455][ T4299] le_conn_complete_evt+0xa24/0xf8c [ 148.491733][ T4299] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 148.493259][ T4299] hci_le_meta_evt+0x2c0/0x4a4 [ 148.494486][ T4299] hci_event_packet+0x6ac/0xf08 [ 148.495737][ T4299] hci_rx_work+0x324/0xaa0 [ 148.496847][ T4299] process_one_work+0x7f4/0x13a8 [ 148.498005][ T4299] worker_thread+0x8c8/0xfbc [ 148.499196][ T4299] kthread+0x250/0x2d8 [ 148.500199][ T4299] ret_from_fork+0x10/0x20 [ 148.503774][ T4299] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.507203][ T4299] Bluetooth: hci3: failed to register connection device [ 148.753188][ T5768] binder: 5765:5768 tried to acquire reference to desc 0, got 1 instead [ 148.768571][ T5768] binder_alloc: 5765: binder_alloc_buf failed to map page at 20ffd000 in userspace [ 148.781176][ T5768] binder: cannot allocate buffer: memory allocation failed [ 148.781216][ T5768] binder: 5765:5768 transaction async to 5765:0 failed 31/29201/-12, size 0-0 line 3239 [ 148.808031][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.098205][ T4299] Bluetooth: hci1: hardware error 0x09 [ 153.335270][ T4299] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 154.105763][ T5842] tipc: Started in network mode [ 154.118997][ T5842] tipc: Node identity ac1414aa, cluster identity 4711 [ 154.123442][ T5842] tipc: Enabled bearer , priority 10 [ 155.533363][ T5795] tipc: Node number set to 2886997162 [ 156.075038][ T5842] tipc: Enabled bearer , priority 0 [ 158.393077][ T5878] loop3: detected capacity change from 0 to 1024 [ 158.461433][ T5878] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.464128][ T5878] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.293183][ T5878] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.305: Invalid block bitmap block 0 in block_group 0 [ 159.341875][ T5878] Quota error (device loop3): write_blk: dquota write failed [ 159.343739][ T5878] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 159.345950][ T5878] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.305: Failed to acquire dquot type 0 [ 159.372897][ T5878] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.305: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.402609][ T5878] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.305: Invalid inode bitmap blk 0 in block_group 0 [ 159.421511][ T5878] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 159.427848][ T4517] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 159.430274][ T4517] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:23: Failed to release dquot type 0 [ 159.446706][ T5878] EXT4-fs (loop3): 1 orphan inode deleted [ 159.457674][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.117216][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 161.203250][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 161.410418][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 164.359916][ T5937] loop6: detected capacity change from 0 to 128 [ 164.579410][ T5937] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 164.637296][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'. [ 164.639645][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 166.703500][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 169.076839][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 169.252694][ T5990] Bluetooth: MGMT ver 1.22 [ 173.177784][ T6039] netlink: 'syz.6.348': attribute type 1 has an invalid length. [ 174.051992][ T6044] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.054102][ T6044] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.056092][ T6044] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.083288][ T6044] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.121853][ T6044] bond1: (slave geneve2): making interface the new active one [ 174.125057][ T6044] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 174.127710][ T6047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.397679][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.764033][ T6081] tipc: Failed to remove unknown binding: 66,1,1/0:943990224/943990226 [ 177.774554][ T6081] tipc: Failed to remove unknown binding: 66,1,1/0:943990224/943990226 [ 177.778716][ T6081] tipc: Failed to remove unknown binding: 66,1,1/0:943990224/943990226 [ 181.836886][ T27] audit: type=1326 audit(180.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.373" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x0 [ 182.130994][ T6125] loop6: detected capacity change from 0 to 2048 [ 182.234651][ T6125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 182.294516][ T6134] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1401412820/1401412822 [ 182.376243][ T6142] xt_nat: multiple ranges no longer supported [ 183.071872][ T6134] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1401412820/1401412822 [ 183.074259][ T6134] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1401412820/1401412822 [ 183.379369][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 187.286433][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 187.454750][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.456783][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.734009][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 187.759317][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 188.265541][ T6188] loop3: detected capacity change from 0 to 2048 [ 188.321573][ T6188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.398651][ T6192] tipc: Failed to remove unknown binding: 66,1,1/7:1172194292/1172194294 [ 188.451189][ T6192] tipc: Failed to remove unknown binding: 66,1,1/7:1172194292/1172194294 [ 188.453853][ T6192] tipc: Failed to remove unknown binding: 66,1,1/7:1172194292/1172194294 [ 191.183784][ T4299] Bluetooth: hci0: command 0x0406 tx timeout [ 193.575929][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 193.641046][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 193.643232][ T6227] netlink: 'syz.5.394': attribute type 5 has an invalid length. [ 193.645073][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.394'. [ 193.686168][ T6227] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 193.716648][ T6227] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 193.718902][ T6227] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 193.770649][ T6227] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 193.773024][ T6227] device geneve2 entered promiscuous mode [ 195.014804][ T6250] loop5: detected capacity change from 0 to 8192 [ 195.057883][ T6250] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 195.186817][ T5104] I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.718048][ T6292] xt_nat: multiple ranges no longer supported [ 200.695210][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 206.372769][ T6366] xt_nat: multiple ranges no longer supported [ 206.897081][ T6373] loop5: detected capacity change from 0 to 4096 [ 210.424846][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'. [ 214.093766][ T6452] loop3: detected capacity change from 0 to 512 [ 214.426724][ T27] audit: type=1326 audit(214.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.431989][ T27] audit: type=1326 audit(214.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.467346][ T6438] device syz_tun entered promiscuous mode [ 214.469008][ T6438] device vlan2 entered promiscuous mode [ 214.517005][ T27] audit: type=1326 audit(214.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.522040][ T27] audit: type=1326 audit(214.380:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.561784][ T6452] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.444: attempt to clear invalid blocks 1 len 1 [ 214.573849][ T6452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.444: bg 0: block 343: padding at end of block bitmap is not set [ 214.578879][ T6452] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 214.581631][ T6452] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.444: invalid indirect mapped block 1819239214 (level 0) [ 214.585871][ T6452] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.444: invalid indirect mapped block 1819239214 (level 1) [ 214.594915][ T6452] EXT4-fs (loop3): 1 truncate cleaned up [ 214.596461][ T6452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.675951][ T27] audit: type=1326 audit(214.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.698554][ T27] audit: type=1326 audit(214.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.704186][ T27] audit: type=1326 audit(214.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.712492][ T27] audit: type=1326 audit(214.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.726281][ T6456] binder: 6454:6456 tried to acquire reference to desc 0, got 1 instead [ 214.745473][ T6456] binder_alloc: 6454: binder_alloc_buf failed to map page at 20ffe000 in userspace [ 214.754983][ T6456] binder: cannot allocate buffer: memory allocation failed [ 214.755021][ T6456] binder: 6454:6456 transaction async to 6454:0 failed 37/29201/-12, size 0-0 line 3239 [ 214.765340][ T14] binder: undelivered TRANSACTION_COMPLETE [ 214.766877][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.792479][ T27] audit: type=1326 audit(214.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa255a768 code=0x7ffc0000 [ 214.802560][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 214.844146][ T14] binder: undelivered transaction 36, process died. [ 215.074425][ T6473] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.077171][ T6473] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.079375][ T6473] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.081463][ T6473] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.085578][ T6473] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 216.124434][ T6491] trusted_key: encrypted_key: insufficient parameters specified [ 218.197718][ T6517] loop6: detected capacity change from 0 to 512 [ 218.290382][ T6517] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.462: attempt to clear invalid blocks 1 len 1 [ 218.294440][ T6517] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.462: bg 0: block 343: padding at end of block bitmap is not set [ 218.298850][ T6517] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 218.301576][ T6517] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.462: invalid indirect mapped block 1819239214 (level 0) [ 218.305727][ T6517] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.462: invalid indirect mapped block 1819239214 (level 1) [ 218.311641][ T6517] EXT4-fs (loop6): 1 truncate cleaned up [ 218.313145][ T6517] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 218.585494][ T6531] loop5: detected capacity change from 0 to 512 [ 218.621662][ T6531] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 218.692830][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 219.466988][ T6531] EXT2-fs (loop5): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 219.473992][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 4, length 1 [ 219.485532][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 5, length 1 [ 219.503501][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 6, length 1 [ 219.511566][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 7, length 1 [ 219.524206][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 8, length 1 [ 219.545483][ T6531] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 9, length 1 [ 219.659652][ T6543] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 10, length 1 [ 219.697087][ T6543] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 11, length 1 [ 219.741744][ T6543] EXT2-fs (loop5): error: ext2_new_blocks: Allocating block in system zone - blocks from 12, length 1 [ 219.750556][ T6543] syz.5.466: attempt to access beyond end of device [ 219.750556][ T6543] loop5: rw=2049, sector=3606377190, nr_sectors = 2 limit=512 [ 219.754334][ T6543] Buffer I/O error on dev loop5, logical block 1803188595, lost async page write [ 219.762561][ T6543] syz.5.466: attempt to access beyond end of device [ 219.762561][ T6543] loop5: rw=2049, sector=3403208898, nr_sectors = 2 limit=512 [ 219.766056][ T6543] Buffer I/O error on dev loop5, logical block 1701604449, lost async page write [ 219.769704][ T6543] syz.5.466: attempt to access beyond end of device [ 219.769704][ T6543] loop5: rw=2049, sector=59108, nr_sectors = 2 limit=512 [ 220.472012][ T6543] Buffer I/O error on dev loop5, logical block 29554, lost async page write [ 220.551356][ T6543] EXT2-fs (loop5): error: ext2_fsync: detected IO error when writing metadata buffers [ 220.632200][ T6558] loop3: detected capacity change from 0 to 2048 [ 220.790386][ T6561] loop5: detected capacity change from 0 to 512 [ 220.816700][ T6558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.841206][ T6561] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.473: casefold flag without casefold feature [ 220.847413][ T6561] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.473: couldn't read orphan inode 15 (err -117) [ 221.236178][ T6561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 221.848966][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 221.993976][ T4574] EXT4-fs (loop5): unmounting filesystem. [ 224.292568][ T6624] loop3: detected capacity change from 0 to 16 [ 224.366708][ T6624] erofs: (device loop3): mounted with root inode @ nid 36. [ 225.018160][ T6621] loop6: detected capacity change from 0 to 2048 [ 225.138284][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.175930][ T6631] Cannot find set identified by id 0 to match [ 226.865962][ T6629] loop3: detected capacity change from 0 to 8192 [ 226.907346][ T6629] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 228.408350][ T5104] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.458384][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.494'. [ 230.760162][ T27] audit: type=1326 audit(230.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 230.774168][ T27] audit: type=1326 audit(230.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 230.788546][ T27] audit: type=1326 audit(230.740:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 230.916003][ T6706] loop5: detected capacity change from 0 to 256 [ 231.760409][ T6706] FAT-fs (loop5): Directory bread(block 64) failed [ 231.762459][ T6706] FAT-fs (loop5): Directory bread(block 65) failed [ 231.764724][ T6706] FAT-fs (loop5): Directory bread(block 66) failed [ 231.766805][ T6706] FAT-fs (loop5): Directory bread(block 67) failed [ 231.768740][ T6706] FAT-fs (loop5): Directory bread(block 68) failed [ 231.770544][ T6706] FAT-fs (loop5): Directory bread(block 69) failed [ 231.772600][ T6706] FAT-fs (loop5): Directory bread(block 70) failed [ 231.774440][ T6706] FAT-fs (loop5): Directory bread(block 71) failed [ 231.776727][ T6706] FAT-fs (loop5): Directory bread(block 72) failed [ 231.778561][ T6706] FAT-fs (loop5): Directory bread(block 73) failed [ 232.356954][ T27] audit: type=1326 audit(232.310:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 233.256580][ T27] audit: type=1326 audit(232.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 233.265138][ T6716] loop6: detected capacity change from 0 to 64 [ 233.299516][ T27] audit: type=1326 audit(233.260:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffbd585e88 code=0x7ffc0000 [ 233.490004][ T27] audit: type=1326 audit(233.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 233.568754][ T27] audit: type=1326 audit(233.390:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 234.176484][ T27] audit: type=1326 audit(233.390:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 234.221003][ T27] audit: type=1326 audit(233.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffbd55a768 code=0x7ffc0000 [ 234.382194][ T6729] loop3: detected capacity change from 0 to 1024 [ 234.467381][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 234.469767][ T6729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 234.506670][ T6729] EXT4-fs error (device loop3): ext4_get_journal_inode:5723: inode #5: comm syz.3.511: unexpected bad inode w/o EXT4_IGET_BAD [ 234.562167][ T6729] EXT4-fs (loop3): no journal found [ 235.023155][ T6748] netlink: 'syz.5.515': attribute type 1 has an invalid length. [ 235.035826][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.065998][ T6748] bond1: (slave gretap1): making interface the new active one [ 235.083026][ T6748] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 235.089408][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 236.055656][ T6757] loop6: detected capacity change from 0 to 1024 [ 236.083920][ T6757] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 236.086412][ T6757] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 236.093354][ T6757] EXT4-fs error (device loop6): ext4_get_journal_inode:5723: inode #5: comm syz.6.527: unexpected bad inode w/o EXT4_IGET_BAD [ 236.160381][ T6765] tipc: Started in network mode [ 236.172397][ T6757] EXT4-fs (loop6): no journal found [ 236.186793][ T6765] tipc: Node identity ac1414aa, cluster identity 4711 [ 236.188945][ T6765] tipc: Enabled bearer , priority 10 [ 237.307870][ T112] tipc: Node number set to 2886997162 [ 240.333453][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.338055][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.340297][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.429593][ T6832] 9pnet_fd: Insufficient options for proto=fd [ 241.444157][ T6832] fuse: Bad value for 'fd' [ 242.216322][ T6852] loop5: detected capacity change from 0 to 512 [ 242.303115][ T6852] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 242.773049][ T6852] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #3: comm syz.5.538: corrupted inode contents [ 242.784355][ T6852] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #3: comm syz.5.538: mark_inode_dirty error [ 242.796939][ T6852] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #3: comm syz.5.538: corrupted inode contents [ 242.802233][ T6852] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.538: mark_inode_dirty error [ 242.815079][ T6852] __quota_error: 18 callbacks suppressed [ 242.815113][ T6852] Quota error (device loop5): write_blk: dquota write failed [ 242.818506][ T6852] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 242.821081][ T6852] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.538: Failed to acquire dquot type 0 [ 242.853176][ T6852] EXT4-fs (loop5): 1 orphan inode deleted [ 242.854808][ T6852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 243.060851][ T4491] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.440342][ T4491] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 243.467577][ T6858] loop6: detected capacity change from 0 to 64 [ 245.428864][ T6858] hfs: unable to locate alternate MDB [ 245.445274][ T6858] hfs: continuing without an alternate MDB [ 247.089888][ T6873] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 247.092118][ T6873] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.106162][ T4574] EXT4-fs (loop5): unmounting filesystem. [ 247.153008][ T6880] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 247.302343][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.447818][ T6893] loop5: detected capacity change from 0 to 128 [ 248.877187][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.878841][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.953370][ T6893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 249.113083][ T6880] bond1: (slave veth3): Enslaving as an active interface with a down link [ 249.211049][ T6880] bond1: (slave veth0_to_bond): making interface the new active one [ 249.232228][ T6898] loop3: detected capacity change from 0 to 1024 [ 249.239442][ T6880] device veth0_to_bond entered promiscuous mode [ 249.241231][ T6880] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 249.269442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 249.326750][ T4574] EXT4-fs (loop5): unmounting filesystem. [ 249.409595][ T6880] device veth1 entered promiscuous mode [ 249.411299][ T6880] device veth1 left promiscuous mode [ 249.414052][ T6880] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 249.598240][ T11] hfsplus: b-tree write err: -5, ino 4 [ 250.444323][ T6915] loop5: detected capacity change from 0 to 256 [ 250.466103][ T6917] netlink: 76 bytes leftover after parsing attributes in process `syz.4.552'. [ 251.377777][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.448640][ T6930] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 251.573938][ T6937] binder: 6931:6937 tried to acquire reference to desc 0, got 1 instead [ 251.576114][ T6937] binder: 6931:6937 ioctl c0306201 200003c0 returned -14 [ 251.966189][ T6953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.971874][ T6953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.974093][ T6953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.757803][ T4301] binder: release 6931:6937 transaction 42 out, still active [ 252.826738][ T4301] binder: undelivered TRANSACTION_COMPLETE [ 253.107950][ T4301] binder: send failed reply for transaction 42, target dead [ 255.805874][ T6959] loop6: detected capacity change from 0 to 40427 [ 255.873392][ T6959] F2FS-fs (loop6): invalid crc value [ 255.896879][ T6959] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 256.814380][ T6984] loop3: detected capacity change from 0 to 1024 [ 257.398131][ T6984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.731433][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.010933][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.014278][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.016227][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.386271][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 263.127920][ T7036] loop5: detected capacity change from 0 to 32768 [ 263.185438][ T7036] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.577 (7036) [ 263.318140][ T7036] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 263.320968][ T7036] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 263.338414][ T7036] BTRFS info (device loop5): using free space tree [ 265.675656][ T7087] loop6: detected capacity change from 0 to 512 [ 265.713942][ T7087] EXT4-fs: Ignoring removed oldalloc option [ 265.773665][ T7036] BTRFS error (device loop5): open_ctree failed: -12 [ 265.776036][ T7087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b802e02d, mo2=0002] [ 265.778834][ T7087] System zones: 1-12 [ 265.792751][ T7087] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.588: invalid indirect mapped block 1 (level 1) [ 265.817364][ T7087] EXT4-fs (loop6): Remounting filesystem read-only [ 265.824510][ T7087] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.588: invalid indirect mapped block 7 (level 2) [ 265.864991][ T7087] EXT4-fs (loop6): Remounting filesystem read-only [ 265.883059][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 265.884612][ T7087] EXT4-fs (loop6): 1 truncate cleaned up [ 265.900923][ T7087] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 266.050215][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 266.153973][ T5104] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (5104) [ 271.167063][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.6.612'. [ 272.074426][ T4517] device veth0_to_bond left promiscuous mode [ 272.108565][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 272.146755][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 272.201934][ T7174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 272.203827][ T7174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.230821][ T7174] vhci_hcd vhci_hcd.0: Device attached [ 272.251248][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 272.631731][ T4343] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 273.369689][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 273.373397][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 273.498593][ T7175] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 273.504544][ T5348] vhci_hcd: stop threads [ 273.505864][ T5348] vhci_hcd: release socket [ 273.508686][ T5348] vhci_hcd: disconnect device [ 278.118595][ T4343] vhci_hcd: vhci_device speed not set [ 278.435892][ T7252] binder: 7249:7252 tried to acquire reference to desc 0, got 1 instead [ 278.441387][ T7252] binder: 7249:7252 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 279.310104][ T7259] loop6: detected capacity change from 0 to 128 [ 279.465106][ T7252] binder: 7252 RLIMIT_NICE not set [ 279.665285][ T7259] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.024528][ T7263] binder: 7249:7263 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 280.030500][ T7252] binder: 7252 RLIMIT_NICE not set [ 280.180816][ T4650] EXT4-fs (loop6): unmounting filesystem. [ 280.451908][ T4301] binder: release 7249:7252 transaction 47 out, still active [ 280.453849][ T4301] binder: undelivered TRANSACTION_COMPLETE [ 281.246842][ T7252] syz.3.624 (7252): drop_caches: 2 [ 281.320187][ T4287] binder: release 7249:7252 transaction 47 in, still active [ 281.322057][ T4287] binder: send failed reply for transaction 47, target dead [ 284.388920][ T27] audit: type=1326 audit(284.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.394829][ T27] audit: type=1326 audit(284.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.446606][ T27] audit: type=1326 audit(284.360:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.452105][ T27] audit: type=1326 audit(284.360:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.474082][ T27] audit: type=1326 audit(284.360:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.497659][ T27] audit: type=1326 audit(284.360:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.502851][ T27] audit: type=1326 audit(284.360:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.537065][ T27] audit: type=1326 audit(284.360:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.542624][ T27] audit: type=1326 audit(284.370:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.559949][ T27] audit: type=1326 audit(284.370:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.5.639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf15a768 code=0x7ffc0000 [ 284.644012][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 284.649369][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 284.760818][ T7335] Injecting memory failure for pfn 0x1367ec at process virtual address 0x20000000 [ 284.766213][ T7335] Memory failure: 0x1367ec: recovery action for dirty LRU page: Recovered [ 284.778875][ T7335] Injecting memory failure for pfn 0x136e9e at process virtual address 0x20001000 [ 284.784644][ T7335] Memory failure: 0x136e9e: recovery action for dirty LRU page: Recovered [ 284.788467][ T7335] Injecting memory failure for pfn 0x13dd3c at process virtual address 0x20002000 [ 284.796208][ T7335] Memory failure: 0x13dd3c: recovery action for dirty LRU page: Recovered [ 284.828653][ T7335] Injecting memory failure for pfn 0x1366d3 at process virtual address 0x20003000 [ 284.945089][ T7335] Memory failure: 0x1366d3: recovery action for dirty LRU page: Recovered [ 284.974180][ T7335] Injecting memory failure for pfn 0x13df54 at process virtual address 0x20004000 [ 284.987323][ T7335] Memory failure: 0x13df54: recovery action for dirty LRU page: Recovered [ 284.996966][ T7335] Injecting memory failure for pfn 0x13a50b at process virtual address 0x20005000 [ 285.007337][ T7335] Memory failure: 0x13a50b: recovery action for dirty LRU page: Recovered [ 285.015598][ T7335] Injecting memory failure for pfn 0x13a50a at process virtual address 0x20006000 [ 285.746876][ T7335] Memory failure: 0x13a50a: recovery action for dirty LRU page: Recovered [ 285.749028][ T7335] Injecting memory failure for pfn 0x135e10 at process virtual address 0x20007000 [ 285.751692][ T7335] Memory failure: 0x135e10: recovery action for dirty LRU page: Recovered [ 285.753951][ T7335] Injecting memory failure for pfn 0x136e9c at process virtual address 0x20008000 [ 285.756313][ T7335] Memory failure: 0x136e9c: recovery action for dirty LRU page: Recovered [ 285.777136][ T7335] Injecting memory failure for pfn 0x13dcf0 at process virtual address 0x20009000 [ 285.782255][ T7335] Memory failure: 0x13dcf0: recovery action for dirty LRU page: Recovered [ 285.784356][ T7335] Injecting memory failure for pfn 0x122000 at process virtual address 0x2000a000 [ 285.797414][ T7335] Memory failure: 0x122000: recovery action for dirty LRU page: Recovered [ 285.799619][ T7335] Injecting memory failure for pfn 0x11a676 at process virtual address 0x2000b000 [ 285.802010][ T7335] Memory failure: 0x11a676: recovery action for dirty LRU page: Recovered [ 285.804046][ T7335] Injecting memory failure for pfn 0x13d66d at process virtual address 0x2000c000 [ 285.806311][ T7335] Memory failure: 0x13d66d: recovery action for dirty LRU page: Recovered [ 285.821195][ T7335] Injecting memory failure for pfn 0x13a508 at process virtual address 0x2000d000 [ 285.823640][ T7335] Memory failure: 0x13a508: recovery action for dirty LRU page: Recovered [ 285.825719][ T7335] Injecting memory failure for pfn 0x13a50c at process virtual address 0x2000e000 [ 285.852168][ T7335] Memory failure: 0x13a50c: recovery action for dirty LRU page: Recovered [ 285.854281][ T7335] Injecting memory failure for pfn 0x12113f at process virtual address 0x2000f000 [ 285.856839][ T7335] Memory failure: 0x12113f: recovery action for dirty LRU page: Recovered [ 286.286955][ T7373] loop3: detected capacity change from 0 to 256 [ 286.290185][ T7373] exfat: Deprecated parameter 'namecase' [ 287.266430][ T7373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 288.094828][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 290.554770][ T7421] loop3: detected capacity change from 0 to 128 [ 291.469694][ T7421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 291.888604][ T7430] loop6: detected capacity change from 0 to 64 [ 291.905746][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 296.277115][ T7469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 296.281732][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 296.286398][ T7471] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 296.329147][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 297.517193][ T7492] syz.6.693 (7492): drop_caches: 2 [ 297.595383][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.598100][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.665171][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.827199][ T7499] loop6: detected capacity change from 0 to 256 [ 299.701483][ T7499] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 299.754956][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.584286][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.610307][ T7503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.688'. [ 301.677142][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.680273][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.858340][ T4512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.867183][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.869415][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.880291][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.183263][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.726791][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.949538][ T7553] loop3: detected capacity change from 0 to 2048 [ 305.969196][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.035730][ T7553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.757832][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.045943][ T4421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.050165][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.160338][ T7571] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 308.163492][ T7571] XFS (loop3): SB validate failed with error -5. [ 309.114488][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.123165][ T7584] loop6: detected capacity change from 0 to 256 [ 309.218922][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.335870][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 309.335881][ T27] audit: type=1326 audit(309.290:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.361218][ T27] audit: type=1326 audit(309.300:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.387998][ T7589] device wireguard0 entered promiscuous mode [ 309.401697][ T27] audit: type=1326 audit(309.300:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.433076][ T27] audit: type=1326 audit(309.300:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.446664][ T27] audit: type=1326 audit(309.300:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.456103][ T27] audit: type=1326 audit(309.300:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.662555][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.665192][ T27] audit: type=1326 audit(309.300:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.672612][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.679059][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.681497][ T27] audit: type=1326 audit(309.300:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 309.688984][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.693553][ T27] audit: type=1326 audit(309.300:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 311.273086][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.275017][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.692903][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.756674][ T27] audit: type=1326 audit(309.300:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 311.848774][ T7596] loop3: detected capacity change from 0 to 4096 [ 311.937408][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.941215][ T7596] ntfs: volume version 3.1. [ 312.300347][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.667088][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.669354][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.671523][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.690002][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.692152][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.697110][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.699604][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.703922][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.019677][ T22] net_ratelimit: 52 callbacks suppressed [ 317.019691][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.072527][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.074067][ T7669] loop3: detected capacity change from 0 to 1024 [ 318.119684][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 318.373512][ T7675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.737'. [ 318.491430][ T7683] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 318.633282][ T7686] bond1: (slave veth5): Enslaving as an active interface with a down link [ 318.724530][ T7683] bond1: (slave veth7): Enslaving as an active interface with a down link [ 318.739298][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 318.757615][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.766450][ T7688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.845018][ T7677] could not allocate digest TFM handle sha1-ssse3 [ 319.140527][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.116662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.119565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.121853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.116785][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.859663][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.921968][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.438091][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.443790][ T5308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.459218][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.856002][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.859954][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.193327][ T7728] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 323.498592][ T7740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.979970][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.026555][ T1516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.047064][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.893854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.896889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.899061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.927035][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.899405][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.046873][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.075208][ T7801] xt_bpf: check failed: parse error [ 331.077488][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.389729][ T4299] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7 [ 331.958808][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.047130][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.456287][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.390070][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 333.477814][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.907327][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.156779][ T4299] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 335.159303][ T4299] Bluetooth: hci2: Injecting HCI hardware error event [ 335.164000][ T4312] Bluetooth: hci2: hardware error 0x00 [ 335.172490][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.263056][ T7857] netlink: 'syz.4.793': attribute type 13 has an invalid length. [ 335.484358][ T4299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 335.487941][ T4299] Bluetooth: hci3: Injecting HCI hardware error event [ 335.491180][ T4299] Bluetooth: hci3: hardware error 0x00 [ 335.877443][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.957899][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.497151][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 337.338912][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.396804][ T4312] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 338.087887][ T7899] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 340.221491][ T4299] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 340.237354][ T7905] loop6: detected capacity change from 0 to 32768 [ 340.241839][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.244908][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.747955][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.276757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.279009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.281074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.843233][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.889669][ T7940] sctp: [Deprecated]: syz.5.816 (pid 7940) Use of int in max_burst socket option. [ 342.889669][ T7940] Use struct sctp_assoc_value instead [ 343.626790][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.674981][ T7950] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 343.878479][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.447504][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.449796][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.715540][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.219870][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.213040][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.877419][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.412134][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.407094][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.424546][ T8030] loop3: detected capacity change from 0 to 1024 [ 352.454624][ T8030] EXT4-fs: Ignoring removed orlov option [ 352.608362][ T8030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 353.610496][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 353.686898][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.689379][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.787685][ T8050] loop3: detected capacity change from 0 to 512 [ 353.806972][ T8050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.830921][ T8050] EXT4-fs (loop3): 1 truncate cleaned up [ 353.832450][ T8050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 355.191409][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.282556][ T8050] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.843: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 355.375812][ T8050] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 355.583093][ T8050] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.843: Deleting old file: nlink 4, error=-117 [ 355.587203][ T8064] EXT4-fs (loop3): shut down requested (1) [ 356.385351][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.395004][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.631097][ T4300] EXT4-fs (loop3): unmounting filesystem. [ 356.854073][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.997906][ T8079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.000344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.055643][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.066787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.121901][ T8073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.124330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.872001][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.937038][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.319816][ T8108] loop3: detected capacity change from 0 to 256 [ 361.856718][ T8108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 361.859629][ T8108] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 361.862102][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.904216][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.107803][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.926326][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.236214][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.238379][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.256940][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.272343][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 368.801944][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.436565][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.877815][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.077845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.080178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.082300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.759884][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.761503][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.773313][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.199699][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.180231][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.351970][ T8185] loop3: detected capacity change from 0 to 40427 [ 374.391808][ T8185] F2FS-fs (loop3): Unrecognized mount option "whint_mode=off" or missing value [ 374.395767][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.502846][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.624999][ T8221] bridge0: port 3(vlan2) entered blocking state [ 377.104785][ T8221] bridge0: port 3(vlan2) entered disabled state [ 377.152239][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.153078][ T8221] device vlan2 entered promiscuous mode [ 377.155640][ T8221] device bond0 entered promiscuous mode [ 377.170057][ T8221] device bond_slave_0 entered promiscuous mode [ 377.175623][ T8221] device bond_slave_1 entered promiscuous mode [ 377.363740][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.131439][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.608332][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.481375][ T8255] netlink: 'syz.6.895': attribute type 1 has an invalid length. [ 380.512886][ T8255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.628907][ T8255] device vlan2 entered promiscuous mode [ 380.630279][ T8255] device bond2 entered promiscuous mode [ 380.746222][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.796021][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.803249][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.806432][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.810366][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.823634][ T8255] bond2: (slave gretap1): making interface the new active one [ 380.849642][ T8255] device gretap1 entered promiscuous mode [ 380.854149][ T8255] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 381.622381][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 381.625052][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 382.494785][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.804051][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.061173][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.248977][ T8300] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 384.763508][ T8300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.793090][ T8307] bond2: (slave geneve2): making interface the new active one [ 384.808585][ T8307] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 384.818243][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 384.849715][ T8300] device veth9 entered promiscuous mode [ 384.861524][ T8300] bond2: (slave veth9): Enslaving as an active interface with a down link [ 384.883423][ T8300] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 386.561658][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.564593][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.566694][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.571299][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.580024][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.371917][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.474646][ T8341] netlink: 76 bytes leftover after parsing attributes in process `syz.6.916'. [ 387.509901][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.741435][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.812541][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 389.223556][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.733826][ T8371] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 390.437672][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.498787][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.663995][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 390.680369][ T8378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.700570][ T8378] device vlan2 entered promiscuous mode [ 390.702073][ T8378] device bond2 entered promiscuous mode [ 390.726029][ T8378] device gretap1 entered promiscuous mode [ 390.886986][ T8378] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 391.112241][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 391.336599][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 391.668686][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.697068][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.732039][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.734954][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.759091][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.761885][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.449183][ T8414] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 395.451669][ T8414] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 395.476803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.087000][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.203287][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.205290][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.337503][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 397.248835][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.087220][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.506403][ T4344] net_ratelimit: 2 callbacks suppressed [ 401.506424][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.510102][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.864535][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.008480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.246225][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.802863][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.937366][ T8482] netlink: 'syz.4.955': attribute type 39 has an invalid length. [ 406.663356][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.906367][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.566846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.438264][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.447768][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.329564][ T8530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.963'. [ 410.409473][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.610922][ T8536] netlink: 452 bytes leftover after parsing attributes in process `syz.6.967'. [ 412.614329][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.649161][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.689539][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.729650][ T8549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 413.732157][ T8549] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 413.882957][ T8543] loop3: detected capacity change from 0 to 2048 [ 413.929809][ T8543] EXT4-fs (loop3): invalid inodes per group: 1 [ 413.929809][ T8543] [ 414.979633][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.106821][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.077479][ T4613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.183055][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.476922][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.998279][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.841901][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.996764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.066738][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.622586][ T8620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 421.624974][ T8620] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 421.738632][ T8627] loop6: detected capacity change from 0 to 2048 [ 421.749255][ T8626] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 421.751687][ T8626] Mem abort info: [ 421.752598][ T8626] ESR = 0x0000000086000006 [ 421.753755][ T8626] EC = 0x21: IABT (current EL), IL = 32 bits [ 421.755183][ T8626] SET = 0, FnV = 0 [ 421.756101][ T8626] EA = 0, S1PTW = 0 [ 421.757111][ T8626] FSC = 0x06: level 2 translation fault [ 421.758559][ T8626] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011961f000 [ 421.760239][ T8626] [0000000000000000] pgd=080000013338b003, p4d=080000013338b003, pud=080000013c138003, pmd=0000000000000000 [ 421.763052][ T8626] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 421.764746][ T8626] Modules linked in: [ 421.765572][ T8626] CPU: 1 PID: 8626 Comm: syz.3.992 Not tainted 6.1.140-syzkaller #0 [ 421.767545][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.769953][ T8626] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 421.771835][ T8626] pc : 0x0 [ 421.772579][ T8626] lr : bond_xdp_xmit+0x27c/0x45c [ 421.773694][ T8626] sp : ffff800020a873e0 [ 421.774615][ T8626] x29: ffff800020a874a0 x28: 0000000000000000 x27: ffff800020a87408 [ 421.776532][ T8626] x26: dfff800000000000 x25: ffff800012b05f38 x24: ffff0000cb1f6000 [ 421.778501][ T8626] x23: fffffbffeffb2620 x22: ffff0000d7e3c000 x21: fffffbffeffb2620 [ 421.780444][ T8626] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 421.782308][ T8626] x17: 0000000000000000 x16: ffff8000082d076c x15: 0000000000000002 [ 421.784138][ T8626] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 421.786051][ T8626] x11: 0000000000000341 x10: ffff800026c19000 x9 : ffff800020a87440 [ 421.787997][ T8626] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 421.789789][ T8626] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 421.791691][ T8626] x2 : ffff800020a87460 x1 : 0000000000000001 x0 : ffff0000cb1f6000 [ 421.793631][ T8626] Call trace: [ 421.794417][ T8626] 0x0 [ 421.795088][ T8626] bq_xmit_all+0xab0/0xf10 [ 421.796245][ T8626] __dev_flush+0xc4/0x18c [ 421.797279][ T8626] xdp_do_flush+0x14/0x28 [ 421.798959][ T8626] tun_get_user+0x245c/0x3240 [ 421.800793][ T8626] tun_chr_write_iter+0xfc/0x204 [ 421.802017][ T8626] vfs_write+0x5ac/0x7c4 [ 421.803097][ T8626] ksys_write+0x120/0x210 [ 421.804286][ T8626] __arm64_sys_write+0x7c/0x90 [ 421.805490][ T8626] invoke_syscall+0x98/0x2bc [ 421.806568][ T8626] el0_svc_common+0x138/0x258 [ 421.807618][ T8626] do_el0_svc+0x58/0x13c [ 421.808540][ T8626] el0_svc+0x58/0x138 [ 421.809501][ T8626] el0t_64_sync_handler+0x84/0xf0 [ 421.810701][ T8626] el0t_64_sync+0x18c/0x190 [ 421.811845][ T8626] Code: bad PC value [ 421.812769][ T8626] ---[ end trace 0000000000000000 ]--- [ 422.398755][ T8626] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 422.400644][ T8626] SMP: stopping secondary CPUs [ 422.401785][ T8626] Kernel Offset: disabled [ 422.402891][ T8626] CPU features: 0x080000,02070084,26017203 [ 422.404370][ T8626] Memory Limit: none [ 422.981388][ T8626] Rebooting in 86400 seconds..